@ai-matrx/desktop-protocol 0.21.30 → 0.21.32

package/dist/index.js

@@ -2,7 +2,7 @@
 import { z } from "zod";
 import { UUID_SHAPE_PATTERN } from "@ai-matrx/kit/uuid";
 var PROTOCOL_MAJOR = 1;
-var PROTOCOL_MINOR = 39;
+var PROTOCOL_MINOR = 42;
 var PROTOCOL_VERSION = `${PROTOCOL_MAJOR}.${PROTOCOL_MINOR}`;
 var ProtocolVersion = z.string().regex(/^[1-9][0-9]{0,2}\.[0-9]{1,3}$/);
 var RequestId = z.string().min(1).max(64).regex(/^[A-Za-z0-9_-]+$/);
@@ -394,8 +394,17 @@ var OsPermissionName = z5.enum([
   "location",
   "local_network",
   "bluetooth",
-  "notifications"
+  "notifications",
+  // (1.41) Matrx Local's remaining kinds, checked on every OS (its permissions checker): a peer
+  // older than 1.41 is never sent these rows (versioning.ts PERMISSIONS_SINCE).
+  "reminders",
+  "speech_recognition",
+  "messages",
+  "mail",
+  "wifi"
 ]);
+var OsGrantState = z5.enum(["granted", "denied", "not_determined", "not_applicable"]);
+var OsRequirementName = z5.enum(["secret_storage", "tray", "display_server", "helper_programs", "smart_app_control", "path_length"]);
 var SysinfoGetParams = z5.strictObject({});
 var SysinfoGetResult = z5.strictObject({
   device_id: DeviceId,
@@ -425,9 +434,20 @@ var SysinfoGetResult = z5.strictObject({
     z5.strictObject({
       name: OsPermissionName,
       state: z5.enum(["granted", "denied", "not_determined", "not_applicable"]),
-      settings_url: z5.string().max(512).nullable()
+      settings_url: z5.string().max(512).nullable(),
+      /** (1.41) One short fact when the state alone does not say it ("No camera", "Bluetooth is off"); absent when there is none. */
+      detail: z5.string().max(256).optional()
     })
-  )
+  ),
+  /** (1.41) The requirements beyond the grants (OsRequirementName), each read when asked. */
+  requirements: z5.array(
+    z5.strictObject({
+      name: OsRequirementName,
+      state: OsGrantState,
+      settings_url: z5.string().max(512).nullable(),
+      detail: z5.string().max(256).nullable()
+    })
+  ).optional()
 });
 var SysinfoHardwareParams = z5.strictObject({});
 var SysinfoHardwareResult = z5.strictObject({
@@ -1866,10 +1886,12 @@ var GitCloneParams = z19.strictObject({
 });
 
 // src/schema/web.ts
+import { UUID_SHAPE_PATTERN as UUID_SHAPE_PATTERN4 } from "@ai-matrx/kit/uuid";
 import { z as z20 } from "zod";
 var WEB_MAX_TEXT_CHARS = 524288;
 var WebUrl = z20.string().min(1).max(8192).regex(/^https?:\/\//);
 var WebText = z20.string().max(WEB_MAX_TEXT_CHARS);
+var OrgId = z20.string().regex(UUID_SHAPE_PATTERN4);
 var WebHeader = z20.strictObject({ name: z20.string().min(1).max(256), value: z20.string().max(8192) });
 var WebFetchParams = z20.strictObject({
   url: WebUrl,
@@ -1891,10 +1913,65 @@ var WebFetchResult = z20.strictObject({
   bytes: nonNegInt,
   elapsed_ms: nonNegInt
 });
+var WebAttachTarget = z20.strictObject({
+  entity_type: z20.string().min(1).max(64),
+  entity_id: z20.string().min(1).max(128),
+  label: z20.string().max(200).optional()
+});
+var WebLand = z20.strictObject({
+  /** The organization the page is saved in; absent: this computer's active organization. */
+  organization_id: OrgId.optional(),
+  /** Keep it: AI processing starts (chunks, search). Unkept pages are saved and wait. */
+  keep: z20.boolean().default(false),
+  attach_to: z20.array(WebAttachTarget).max(8).default([])
+});
+var WebNotSavedReason = z20.enum([
+  /** Nobody is signed in on this computer. Saved on sign-in. */
+  "signed_out",
+  /** AI Matrx could not be reached. Retried on its own. */
+  "offline",
+  /** AI Matrx refused it (the message says why). Kept until the person retries or discards it. */
+  "rejected",
+  /** Waiting its turn behind other pages (retried on its own). */
+  "queued"
+]);
+var WebSourceNotice = z20.strictObject({ code: z20.string().max(120), message: z20.string().max(2e3), remedy: z20.string().max(120) });
+var WebSourceState = z20.discriminatedUnion("state", [
+  z20.strictObject({
+    state: z20.literal("saved"),
+    processed_document_id: z20.string().min(1).max(64),
+    source_id: z20.string().min(1).max(128),
+    /** The page was already saved and nothing changed ("Already saved, no change"). */
+    reused_existing: z20.boolean(),
+    /** The page changed: this is a new version of that Source. */
+    new_version_of: z20.string().max(64).nullable(),
+    kept: z20.boolean(),
+    intelligence: z20.enum(["queued", "deferred", "never"]),
+    /** The original page as captured, kept by AI Matrx (null: the organization keeps none). */
+    original_file_id: z20.string().max(128).nullable(),
+    /** The organization it was saved in. */
+    organization_id: OrgId,
+    notices: z20.array(WebSourceNotice).max(20)
+  }),
+  z20.strictObject({
+    state: z20.literal("not_saved"),
+    outbox_id: z20.string().min(1).max(64),
+    reason: WebNotSavedReason,
+    message: z20.string().max(2e3)
+  })
+]);
 var WebScrapeParams = z20.strictObject({
   urls: z20.array(WebUrl).min(1).max(20),
   use_cache: z20.boolean().default(true),
-  get_links: z20.boolean().default(false)
+  get_links: z20.boolean().default(false),
+  /**
+   * Since 1.38. `auto` (absent): this computer's scraper (HTTP, its browser only when a page needs
+   * it). `browser`: this computer's own browser renders every page. `server`: AI Matrx's servers
+   * read it (their connection, not this computer's; saved there as a web capture).
+   */
+  engine: z20.enum(["auto", "browser", "server"]).optional(),
+  /** Since 1.38: where the pages are saved (see WebLand). */
+  land: WebLand.optional()
 });
 var WebScrapePage = z20.strictObject({
   url: z20.string(),
@@ -1909,7 +1986,9 @@ var WebScrapePage = z20.strictObject({
   /** Why the page failed (blocked, timeout, not found…), in the scraper's words; null when ok. */
   error: z20.string().nullable(),
   /** How the page was fetched (http, browser, cache). */
-  via: z20.string().nullable()
+  via: z20.string().nullable(),
+  /** Since 1.38: the page's Source (absent from a 1.37 core, and for a page that failed). */
+  source: WebSourceState.optional()
 });
 var WebScrapeResult = z20.strictObject({ pages: z20.array(WebScrapePage), elapsed_ms: nonNegInt });
 var WebSearchParams = z20.strictObject({
@@ -1933,7 +2012,9 @@ var WebBrowserFetchParams = z20.strictObject({
   wait_for: z20.string().max(1024).optional(),
   wait_timeout_ms: z20.int().min(100).max(12e4).default(3e4),
   /** true: readable text; false: the rendered HTML. */
-  extract_text: z20.boolean().default(true)
+  extract_text: z20.boolean().default(true),
+  /** Since 1.38: where the rendered page is saved (see WebLand). */
+  land: WebLand.optional()
 });
 var WebBrowserFetchResult = z20.strictObject({
   url: z20.string(),
@@ -1941,7 +2022,137 @@ var WebBrowserFetchResult = z20.strictObject({
   title: z20.string().nullable(),
   content: WebText,
   truncated: z20.boolean(),
-  elapsed_ms: nonNegInt
+  elapsed_ms: nonNegInt,
+  /** Since 1.38: the rendered page's Source (absent from a 1.37 core). */
+  source: WebSourceState.optional()
+});
+var ToolsParseFile = z20.strictObject({
+  /** Absolute path of the gzipped JSON the core reads, saves and then removes. */
+  path: z20.string().min(1).max(4096),
+  bytes: nonNegInt
+});
+var ToolsWebScrapeParams = z20.strictObject({
+  urls: z20.array(WebUrl).min(1).max(20),
+  use_cache: z20.boolean().default(true),
+  get_links: z20.boolean().default(false),
+  /** `browser`: render every page in this computer's browser, then parse it. */
+  engine: z20.enum(["auto", "browser"]).default("auto"),
+  /** Pages read at once (desktop.web/scrape_concurrency). */
+  concurrency: z20.int().min(1).max(20).default(5),
+  /** The wait between pages from the same site (desktop.web/request_delay_ms). */
+  delay_ms: z20.int().min(0).max(3e4).default(0),
+  /** Where the parse files go (the core's spool folder). */
+  spool_dir: z20.string().min(1).max(4096)
+});
+var ToolsWebScrapePage = z20.strictObject({
+  page: WebScrapePage,
+  /** The page's whole parse, for the door; null when the page failed or had no words. */
+  parse: ToolsParseFile.nullable(),
+  /** The page as fetched, for research (rendered HTML or the HTTP body); null when not kept. */
+  html: ToolsParseFile.nullable()
+});
+var ToolsWebScrapeResult = z20.strictObject({ pages: z20.array(ToolsWebScrapePage), elapsed_ms: nonNegInt });
+var ToolsWebBrowserFetchParams = z20.strictObject({
+  url: WebUrl,
+  wait_for: z20.string().max(1024).optional(),
+  wait_timeout_ms: z20.int().min(100).max(12e4).default(3e4),
+  extract_text: z20.boolean().default(true),
+  spool_dir: z20.string().min(1).max(4096)
+});
+var ToolsWebBrowserFetchResult = z20.strictObject({ result: WebBrowserFetchResult, parse: ToolsParseFile.nullable() });
+var WebRuntimeStateName = z20.enum(["not_installed", "installing", "installed", "failed"]);
+var WebRuntimeParams = z20.strictObject({});
+var WebRuntimeState = z20.strictObject({
+  state: WebRuntimeStateName,
+  /** Why it failed, in the installer's words; null otherwise. */
+  error: z20.string().max(2e3).nullable(),
+  /** Bytes the browser takes on this computer (its packages and Chromium); null when unknown. */
+  size_bytes: nonNegInt.nullable(),
+  /** Whether it can show a window while it works (false: only the headless shell is installed). */
+  can_show_window: z20.boolean()
+});
+var WebOutboxItem = z20.strictObject({
+  outbox_id: z20.string().min(1).max(64),
+  url: z20.string().max(8192),
+  title: z20.string().max(500).nullable(),
+  organization_id: OrgId.nullable(),
+  reason: WebNotSavedReason,
+  message: z20.string().max(2e3),
+  attempts: nonNegInt,
+  created_at_ms: nonNegInt,
+  last_attempt_at_ms: nonNegInt.nullable(),
+  bytes: nonNegInt
+});
+var WebOutboxListParams = z20.strictObject({});
+var WebOutboxListResult = z20.strictObject({
+  items: z20.array(WebOutboxItem),
+  bytes: nonNegInt,
+  /** The most the outbox holds; past it the oldest pages are dropped (and the log says so). */
+  cap_bytes: nonNegInt
+});
+var WebOutboxRetryParams = z20.strictObject({ outbox_id: z20.string().min(1).max(64).optional() });
+var WebOutboxRetryResult = z20.strictObject({ saved: nonNegInt, waiting: nonNegInt });
+var WebOutboxDiscardParams = z20.strictObject({ outbox_id: z20.string().min(1).max(64) });
+var WebOutboxDiscardResult = z20.strictObject({ discarded: z20.boolean() });
+var WebLogVia = z20.enum(["this_computer", "browser", "server"]);
+var WebLogCaller = z20.enum(["person", "agent", "research", "phone", "other"]);
+var WebLogResult = z20.enum(["saved", "not_saved", "failed", "blocked", "read"]);
+var WebLogEntry = z20.strictObject({
+  id: z20.string().min(1).max(64),
+  at_ms: nonNegInt,
+  caller: WebLogCaller,
+  url: z20.string().max(8192),
+  title: z20.string().max(500).nullable(),
+  result: WebLogResult,
+  /** One sentence: why it failed or was blocked, or the save's notice. Never page text. */
+  detail: z20.string().max(1e3).nullable(),
+  via: WebLogVia,
+  duration_ms: nonNegInt,
+  processed_document_id: z20.string().max(64).nullable()
+});
+var WebLogListParams = z20.strictObject({ since_ms: nonNegInt.optional(), limit: z20.int().min(1).max(1e3).default(200) });
+var WebLogListResult = z20.strictObject({ entries: z20.array(WebLogEntry) });
+var WebLogClearParams = z20.strictObject({});
+var WebLogClearResult = z20.strictObject({ cleared: nonNegInt });
+var WebProgressEvent = z20.strictObject({
+  request_id: RequestId,
+  phase: z20.enum(["installing", "fetching", "saving"]),
+  done: nonNegInt,
+  total: nonNegInt
+});
+var WebResearchItemState = z20.enum(["waiting", "fetching", "saved", "thin", "failed", "cannot_edit", "blocked"]);
+var WebResearchItem = z20.strictObject({
+  topic_id: z20.string().min(1).max(64),
+  topic_name: z20.string().max(500),
+  source_id: z20.string().min(1).max(64),
+  url: z20.string().max(8192),
+  title: z20.string().max(500).nullable(),
+  /** The capture level this computer would try (1 quick, 2 scroll); 3+ is the extension's. */
+  level: z20.int().min(1).max(4),
+  last_failure: z20.string().max(1e3).nullable(),
+  state: WebResearchItemState,
+  /** One sentence after a fetch: what happened. */
+  message: z20.string().max(1e3).nullable()
+});
+var WebResearchQueueParams = z20.strictObject({ topic_id: z20.string().min(1).max(64).optional() });
+var WebResearchQueueResult = z20.strictObject({
+  state: z20.enum(["ready", "signed_out", "unavailable"]),
+  problem: z20.string().max(1e3).nullable(),
+  /** L1/L2 items on topics this person can edit: what this computer can fetch. */
+  items: z20.array(WebResearchItem),
+  /** Items on topics the person can view but not add to (shown, never fetched). */
+  view_only: nonNegInt
+});
+var WebResearchFetchParams = z20.strictObject({
+  topic_id: z20.string().min(1).max(64).optional(),
+  source_ids: z20.array(z20.string().min(1).max(64)).max(200).optional()
+});
+var WebResearchFetchResult = z20.strictObject({
+  items: z20.array(WebResearchItem),
+  saved: nonNegInt,
+  thin: nonNegInt,
+  failed: nonNegInt,
+  cannot_edit: nonNegInt
 });
 var ToolsServiceProgress = z20.strictObject({ phase: z20.enum(["fetching", "installing"]), done: nonNegInt, total: nonNegInt });
 
@@ -1979,7 +2190,27 @@ var SystemSettingsPane = z21.enum([
   "storage",
   "system_report",
   /** (1.35) Privacy & Security › Microphone: where the person allows Matrx 2 the microphone. */
-  "microphone"
+  "microphone",
+  // (1.41) Each other privacy grant's own page (Settings › Permissions and privacy's buttons), named
+  // as sysinfo's OsPermissionName so a row opens its pane by its own name. A 1.40 core refuses these
+  // as INVALID_PARAMS, so a client asks only a 1.41 core for them.
+  "full_disk_access",
+  "accessibility",
+  "screen_recording",
+  "camera",
+  "automation",
+  "contacts",
+  "calendars",
+  "reminders",
+  "photos",
+  "location",
+  "local_network",
+  "bluetooth",
+  "wifi",
+  "notifications",
+  "speech_recognition",
+  "messages",
+  "mail"
 ]);
 var SystemOpenSettingsParams = z21.strictObject({ pane: SystemSettingsPane });
 var SystemOpenSettingsResult = z21.strictObject({ pane: SystemSettingsPane });
@@ -2685,10 +2916,10 @@ var ExecJobListResult = z31.strictObject({ jobs: z31.array(ExecJobInfo).max(64)
 
 // src/schema/coding.ts
 import { z as z32 } from "zod";
-import { UUID_SHAPE_PATTERN as UUID_SHAPE_PATTERN4 } from "@ai-matrx/kit/uuid";
+import { UUID_SHAPE_PATTERN as UUID_SHAPE_PATTERN5 } from "@ai-matrx/kit/uuid";
 var CodingServiceCredentials = z32.strictObject({
   access_token: z32.string().min(16).max(16384),
-  user_id: z32.string().regex(UUID_SHAPE_PATTERN4),
+  user_id: z32.string().regex(UUID_SHAPE_PATTERN5),
   /** The AI Matrx server this app talks to (production, or a local server on the nightly copy). */
   server_url: z32.string().min(1).max(2048).regex(/^https?:\/\/[^\s/?#]+(\/[^\s?#]*)?$/)
 });
@@ -3459,7 +3690,12 @@ var MessagesListResult = z36.strictObject({ messages: z36.array(MessagesMessage)
 var MessagesSendParams = z36.strictObject({
   /** A phone number or email the person can message. */
   to: z36.string().min(3).max(320),
-  text: z36.string().min(1).max(2e4)
+  text: z36.string().min(1).max(2e4),
+  /**
+   * Send only over this service (Matrx Local's SendMessage `service`). Absent: iMessage first, and
+   * SMS when the recipient has no iMessage (since 1.42).
+   */
+  service: z36.enum(["iMessage", "SMS"]).optional()
 });
 var MessagesSendResult = z36.strictObject({ sent: z36.boolean() });
 var ContactsSearchParams = z36.strictObject({
@@ -4013,6 +4249,16 @@ var OPS = {
   "web.scrape": { params: WebScrapeParams, result: WebScrapeResult, kind: "unary", since: "1.22", errors: ["INVALID_PARAMS", "TIMEOUT", "RESOURCE_BUSY", "AUTH_REQUIRED", "INTERNAL"] },
   "web.search": { params: WebSearchParams, result: WebSearchResult, kind: "unary", since: "1.22", errors: ["INVALID_PARAMS", "TIMEOUT", "RESOURCE_BUSY", "AUTH_REQUIRED", "INTERNAL"] },
   "web.fetch_with_browser": { params: WebBrowserFetchParams, result: WebBrowserFetchResult, kind: "unary", since: "1.22", errors: ["INVALID_PARAMS", "TIMEOUT", "RESOURCE_BUSY", "AUTH_REQUIRED", "INTERNAL"] },
+  "web.runtime.state": { params: WebRuntimeParams, result: WebRuntimeState, kind: "unary", since: "1.40", errors: ["INTERNAL"] },
+  "web.runtime.install": { params: WebRuntimeParams, result: WebRuntimeState, kind: "unary", since: "1.40", errors: ["TIMEOUT", "RESOURCE_BUSY", "CANCELLED", "INTERNAL"] },
+  "web.runtime.remove": { params: WebRuntimeParams, result: WebRuntimeState, kind: "unary", since: "1.40", errors: ["RESOURCE_BUSY", "INTERNAL"] },
+  "web.outbox.list": { params: WebOutboxListParams, result: WebOutboxListResult, kind: "unary", since: "1.40", errors: ["INTERNAL"] },
+  "web.outbox.retry": { params: WebOutboxRetryParams, result: WebOutboxRetryResult, kind: "unary", since: "1.40", errors: ["NOT_FOUND", "AUTH_REQUIRED", "INTERNAL"] },
+  "web.outbox.discard": { params: WebOutboxDiscardParams, result: WebOutboxDiscardResult, kind: "unary", since: "1.40", errors: ["NOT_FOUND", "INTERNAL"] },
+  "web.log.list": { params: WebLogListParams, result: WebLogListResult, kind: "unary", since: "1.40", errors: ["INVALID_PARAMS"] },
+  "web.log.clear": { params: WebLogClearParams, result: WebLogClearResult, kind: "unary", since: "1.40", errors: ["INTERNAL"] },
+  "web.research.queue": { params: WebResearchQueueParams, result: WebResearchQueueResult, kind: "unary", since: "1.40", errors: ["INVALID_PARAMS", "INTERNAL"] },
+  "web.research.fetch": { params: WebResearchFetchParams, result: WebResearchFetchResult, kind: "unary", since: "1.40", errors: ["INVALID_PARAMS", "AUTH_REQUIRED", "RESOURCE_BUSY", "CANCELLED", "INTERNAL"] },
   // 1.23: the signed-in person's own agents and Vault, read as them (the desktop's Agents library and Vault).
   "account.agents.list": { params: AccountAgentsListParams, result: AccountAgentsListResult, kind: "unary", since: "1.23", errors: ["INTERNAL"] },
   "account.vault.list": { params: AccountVaultListParams, result: AccountVaultListResult, kind: "unary", since: "1.23", errors: ["INTERNAL"] },
@@ -4103,7 +4349,9 @@ var EVENTS = {
   "diag.errors.changed": DiagErrorsChangedEvent,
   "browser.invoke": BrowserInvokeEvent,
   "browser.sessions_changed": BrowserSessionsChangedEvent,
-  "browser.progress": BrowserProgressEvent
+  "browser.progress": BrowserProgressEvent,
+  "web.log.entry": WebLogEntry,
+  "web.progress": WebProgressEvent
 };
 var SERVICES = {
   ml: {
@@ -4129,9 +4377,12 @@ var SERVICES = {
     progress: ToolsServiceProgress,
     ops: {
       "tools.web_fetch": { params: WebFetchParams, result: WebFetchResult },
-      "tools.web_scrape": { params: WebScrapeParams, result: WebScrapeResult },
+      "tools.web_scrape": { params: ToolsWebScrapeParams, result: ToolsWebScrapeResult },
       "tools.web_search": { params: ToolsWebSearchParams, result: WebSearchResult },
-      "tools.web_browser_fetch": { params: WebBrowserFetchParams, result: WebBrowserFetchResult }
+      "tools.web_browser_fetch": { params: ToolsWebBrowserFetchParams, result: ToolsWebBrowserFetchResult },
+      "tools.web_runtime_state": { params: WebRuntimeParams, result: WebRuntimeState },
+      "tools.web_runtime_install": { params: WebRuntimeParams, result: WebRuntimeState },
+      "tools.web_runtime_remove": { params: WebRuntimeParams, result: WebRuntimeState }
     }
   }
 };
@@ -4164,7 +4415,9 @@ var NAMED_SCHEMAS = {
   RelayMsg,
   ClientToCoreMsg,
   CoreToClientMsg,
+  OsGrantState,
   OsPermissionName,
+  OsRequirementName,
   SysinfoGetParams,
   SysinfoGetResult,
   SysinfoHardwareParams,
@@ -4653,6 +4906,42 @@ var NAMED_SCHEMAS = {
   ToolsWebSearchParams,
   WebBrowserFetchParams,
   WebBrowserFetchResult,
+  WebAttachTarget,
+  WebLand,
+  WebNotSavedReason,
+  WebSourceNotice,
+  WebSourceState,
+  ToolsParseFile,
+  ToolsWebScrapeParams,
+  ToolsWebScrapePage,
+  ToolsWebScrapeResult,
+  ToolsWebBrowserFetchParams,
+  ToolsWebBrowserFetchResult,
+  WebRuntimeStateName,
+  WebRuntimeParams,
+  WebRuntimeState,
+  WebOutboxItem,
+  WebOutboxListParams,
+  WebOutboxListResult,
+  WebOutboxRetryParams,
+  WebOutboxRetryResult,
+  WebOutboxDiscardParams,
+  WebOutboxDiscardResult,
+  WebLogVia,
+  WebLogCaller,
+  WebLogResult,
+  WebLogEntry,
+  WebLogListParams,
+  WebLogListResult,
+  WebLogClearParams,
+  WebLogClearResult,
+  WebProgressEvent,
+  WebResearchItemState,
+  WebResearchItem,
+  WebResearchQueueParams,
+  WebResearchQueueResult,
+  WebResearchFetchParams,
+  WebResearchFetchResult,
   ToolsServiceProgress,
   AccountRowId,
   AccountReadState,
@@ -4862,7 +5151,14 @@ var FIELDS_SINCE = {
   AppsProjectsToWindowParams: { pin: "1.32", chat_ids: "1.36", take_off_from: "1.36" },
   AppsProjectsToWindowResult: { pin: "1.32" },
   AppsChatsTitlesCheckResult: { stale_windows: "1.33" },
-  AccountAgent: { tags: "1.39", model_id: "1.39", access_level: "1.39", organization_id: "1.39", origin: "1.39", is_archived: "1.39", orchestra: "1.39" }
+  AccountAgent: { tags: "1.39", model_id: "1.39", access_level: "1.39", organization_id: "1.39", origin: "1.39", is_archived: "1.39", orchestra: "1.39" },
+  WebScrapeParams: { engine: "1.40", land: "1.40" },
+  WebScrapePage: { source: "1.40" },
+  WebBrowserFetchParams: { land: "1.40" },
+  WebBrowserFetchResult: { source: "1.40" },
+  SysinfoGetResult: { requirements: "1.41" },
+  "SysinfoGetResult.permissions[]": { detail: "1.41" },
+  MessagesSendParams: { service: "1.42" }
 };
 var NULL_SINCE = {
   "RelayDeviceStatusEvent.since_ms": { since: "1.1", olderPeersGet: 0 }
@@ -4882,6 +5178,25 @@ var REASONS_SINCE = {
   awaiting_confirmation: "1.28",
   tool_disabled_on_device: "1.34"
 };
+var PERMISSIONS_SINCE = {
+  reminders: "1.41",
+  speech_recognition: "1.41",
+  messages: "1.41",
+  mail: "1.41",
+  wifi: "1.41"
+};
+function permissionsForPeer(value, version) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) return value;
+  const body = value;
+  if (!Array.isArray(body.permissions)) return value;
+  const since = PERMISSIONS_SINCE;
+  const kept = body.permissions.filter((p) => {
+    const name = p?.name;
+    const added = typeof name === "string" ? since[name] : void 0;
+    return !added || knows(version, added);
+  });
+  return kept.length === body.permissions.length ? value : { ...body, permissions: kept };
+}
 function statusForPeer(status, version) {
   const rule = NULL_SINCE["RelayDeviceStatusEvent.since_ms"];
   return status.since_ms === null && !knows(version, rule.since) ? { ...status, since_ms: rule.olderPeersGet } : status;
@@ -4926,7 +5241,9 @@ var RESULT_PATH = /* @__PURE__ */ new Map([
   ["apps.chats.list", "AppsChatsListResult"],
   ["apps.accounts.usage", "AppsAccountsUsageResult"],
   ["apps.accounts.resets", "AppsAccountsResetsResult"],
-  ["apps.windows.update_state", "AppsWindowsUpdateStateResult"]
+  ["apps.windows.update_state", "AppsWindowsUpdateStateResult"],
+  ["web.fetch_with_browser", "WebBrowserFetchResult"],
+  ["sysinfo.get", "SysinfoGetResult"]
 ]);
 var NESTED_RESULTS = /* @__PURE__ */ new Map([
   ["apps.chats.list", [["chats", "ChatRow"]]],
@@ -4939,7 +5256,9 @@ var NESTED_RESULTS = /* @__PURE__ */ new Map([
   ["apps.accounts.usage", [["accounts", "AccountUsage"]]],
   ["resources.snapshot", [["disks", "ResourcesDisk"]]],
   ["stack.state", [["servers", "StackServer"]]],
-  ["account.agents.list", [["agents", "AccountAgent"]]]
+  ["account.agents.list", [["agents", "AccountAgent"]]],
+  ["web.scrape", [["pages", "WebScrapePage"]]],
+  ["sysinfo.get", [["permissions", "SysinfoGetResult.permissions[]"]]]
 ]);
 function stripNested(value, nested, version) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) return value;
@@ -4981,7 +5300,8 @@ function forPeer(op, part, value, version) {
     const windowKey = op ? WINDOW_RESULTS.get(op) : void 0;
     if (windowKey) return stripWindows(value, windowKey, version);
     const path = op ? RESULT_PATH.get(op) : void 0;
-    const top = path ? strip(value, FIELDS_SINCE[path], version) : value;
+    const known = op === "sysinfo.get" ? permissionsForPeer(value, version) : value;
+    const top = path ? strip(known, FIELDS_SINCE[path], version) : known;
     const nested = op ? NESTED_RESULTS.get(op) : void 0;
     return nested ? stripNested(top, nested, version) : top;
   }
@@ -5000,7 +5320,7 @@ function forPeer(op, part, value, version) {
 var VERSIONED_RESULT_OPS = [.../* @__PURE__ */ new Set([...RESULT_PATH.keys(), ...WINDOW_RESULTS.keys(), ...NESTED_RESULTS.keys()])];
 
 // src/contract.ts
-var CONTRACT_SHA256 = "542bc69319741eea52154d413b4fe974ee5a56f7aef351e78b866b0562e82753";
+var CONTRACT_SHA256 = "c96c1a43bc4b34d518fa088be9300d96baab63938ce0dbfb9425cdc706097668";
 
 // src/close-policy.ts
 var CLOSE_RULES = {
@@ -5071,7 +5391,9 @@ var TOOL_CATALOG = [
   { name: "desktop_contacts", group: "personal_automation", state: "built", path: "device_op", ops: ["contacts.search", "contacts.get"], platforms: ["darwin"], summary: "Contacts: search, one card" },
   { name: "desktop_calendar", group: "personal_automation", state: "built", path: "device_op", ops: ["calendar.list", "calendar.create", "reminders.list", "reminders.create"], platforms: ["darwin"], summary: "Calendar and Reminders: list and add" },
   { name: "desktop_photos", group: "personal_automation", state: "built", path: "device_op", ops: ["photos.search", "photos.get"], platforms: ["darwin"], summary: "The Photos library: find, export an original" },
-  { name: "desktop_location", group: "personal_automation", state: "built", path: "device_op", ops: ["location.get"], platforms: ["darwin", "win32"], summary: "Where the computer is (the OS's location service)" },
+  // Windows comes back once a Windows location fix is proven (plan attack retire-local 2026-10-12, B6):
+  // until then local_mac_apps (macOS-only) is judged on macOS and nothing claims Windows.
+  { name: "desktop_location", group: "personal_automation", state: "built", path: "device_op", ops: ["location.get"], platforms: ["darwin"], summary: "Where the computer is (the OS's location service)" },
   { name: "desktop_net", group: "personal_automation", state: "built", path: "device_op", ops: ["net.info", "net.wifi", "net.bluetooth", "net.devices", "net.mdns", "net.scan", "net.download"], platforms: ALL, summary: "Local network, Wi-Fi, Bluetooth, open ports and downloads" },
   { name: "desktop_schedule", group: "personal_automation", state: "built", path: "device_op", ops: ["schedule.create", "schedule.list", "schedule.cancel"], platforms: ALL, summary: "Run a tool's op on this computer on an interval; list and cancel" },
   // 1.38, code from anywhere: the person's Claude Code and Codex sessions on this computer. Turning
@@ -5902,7 +6224,10 @@ export {
   NotesWriteResult,
   OPS,
   OpDescriptor,
+  OsGrantState,
   OsPermissionName,
+  OsRequirementName,
+  PERMISSIONS_SINCE,
   PING_TEXT,
   PONG_TEXT,
   PROTOCOL_MAJOR,
@@ -6080,7 +6405,13 @@ export {
   ToolPlatform,
   ToolResultsFile,
   ToolTransport,
+  ToolsParseFile,
   ToolsServiceProgress,
+  ToolsWebBrowserFetchParams,
+  ToolsWebBrowserFetchResult,
+  ToolsWebScrapePage,
+  ToolsWebScrapeParams,
+  ToolsWebScrapeResult,
   ToolsWebSearchParams,
   TranscriptSegment,
   TranscriptionModelId,
@@ -6090,11 +6421,39 @@ export {
   VaultItemKind,
   VaultItemSummary,
   WEB_MAX_TEXT_CHARS,
+  WebAttachTarget,
   WebBrowserFetchParams,
   WebBrowserFetchResult,
   WebFetchParams,
   WebFetchResult,
   WebHeader,
+  WebLand,
+  WebLogCaller,
+  WebLogClearParams,
+  WebLogClearResult,
+  WebLogEntry,
+  WebLogListParams,
+  WebLogListResult,
+  WebLogResult,
+  WebLogVia,
+  WebNotSavedReason,
+  WebOutboxDiscardParams,
+  WebOutboxDiscardResult,
+  WebOutboxItem,
+  WebOutboxListParams,
+  WebOutboxListResult,
+  WebOutboxRetryParams,
+  WebOutboxRetryResult,
+  WebProgressEvent,
+  WebResearchFetchParams,
+  WebResearchFetchResult,
+  WebResearchItem,
+  WebResearchItemState,
+  WebResearchQueueParams,
+  WebResearchQueueResult,
+  WebRuntimeParams,
+  WebRuntimeState,
+  WebRuntimeStateName,
   WebScrapePage,
   WebScrapeParams,
   WebScrapeResult,
@@ -6102,6 +6461,8 @@ export {
   WebSearchParams,
   WebSearchQueryResult,
   WebSearchResult,
+  WebSourceNotice,
+  WebSourceState,
   Welcome,
   WindowFocusParams,
   WindowFocusResult,