@dev-anywhere/relay 0.9.0 → 0.9.2

package/dist/{chunk-27ZHYXYL.js → chunk-RGMU7VLD.js}

@@ -481,18 +481,28 @@ var PreviewScopeSchema = z8.object({
   bindingId: IdSchema
 }).strict();
 
-// ../../packages/shared/dist/schemas/web-preview.js
+// ../../packages/shared/dist/schemas/proxy-upgrade-bootstrap.js
 import { z as z9 } from "zod";
+var PROXY_UPGRADE_BOOTSTRAP_VERSION = 1;
+var StableVersionSchema = z9.string().regex(/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/);
+var ProxyUpgradeBootstrapResponseSchema = z9.object({
+  bootstrapVersion: z9.literal(PROXY_UPGRADE_BOOTSTRAP_VERSION),
+  relayVersion: StableVersionSchema,
+  controlProtocolVersion: z9.number().int().positive()
+});
+
+// ../../packages/shared/dist/schemas/web-preview.js
+import { z as z10 } from "zod";
 var WEB_PREVIEW_PATH_MAX_LENGTH = 4096;
 var WEB_PREVIEW_SOURCE_URL_MAX_LENGTH = 4096;
 var WEB_PREVIEW_PUBLIC_URL_MAX_LENGTH = 65536;
 var WEB_PREVIEW_NAME_MAX_LENGTH = 256;
 var WEB_PREVIEW_ERROR_MAX_LENGTH = 4096;
 var WEB_PREVIEW_HTML_ENTRY_MAX_COUNT = 1e3;
-var WebPreviewNameSchema = z9.string().trim().min(1).max(WEB_PREVIEW_NAME_MAX_LENGTH);
+var WebPreviewNameSchema = z10.string().trim().min(1).max(WEB_PREVIEW_NAME_MAX_LENGTH);
 var tunnelProviderValues = ["cloudflare", "cpolar"];
-var TunnelProviderSchema = z9.enum(tunnelProviderValues);
-var WebPreviewPathSchema = z9.string().min(1).max(WEB_PREVIEW_PATH_MAX_LENGTH);
+var TunnelProviderSchema = z10.enum(tunnelProviderValues);
+var WebPreviewPathSchema = z10.string().min(1).max(WEB_PREVIEW_PATH_MAX_LENGTH);
 function parseUrlSafely(value) {
   try {
     return new URL(value);
@@ -500,7 +510,7 @@ function parseUrlSafely(value) {
     return null;
   }
 }
-var LoopbackHttpUrlSchema = z9.string().min(1).max(WEB_PREVIEW_SOURCE_URL_MAX_LENGTH).url().refine((value) => {
+var LoopbackHttpUrlSchema = z10.string().min(1).max(WEB_PREVIEW_SOURCE_URL_MAX_LENGTH).url().refine((value) => {
   const url = parseUrlSafely(value);
   if (!url)
     return false;
@@ -508,7 +518,7 @@ var LoopbackHttpUrlSchema = z9.string().min(1).max(WEB_PREVIEW_SOURCE_URL_MAX_LE
     return false;
   return url.hostname === "localhost" || url.hostname === "127.0.0.1" || url.hostname === "[::1]";
 }, "Local preview URL must use http:// with a loopback host and no credentials");
-var PublicPreviewUrlSchema = z9.string().min(1).max(WEB_PREVIEW_PUBLIC_URL_MAX_LENGTH).url().refine((value) => {
+var PublicPreviewUrlSchema = z10.string().min(1).max(WEB_PREVIEW_PUBLIC_URL_MAX_LENGTH).url().refine((value) => {
   const url = parseUrlSafely(value);
   if (!url)
     return false;
@@ -517,45 +527,45 @@ var PublicPreviewUrlSchema = z9.string().min(1).max(WEB_PREVIEW_PUBLIC_URL_MAX_L
 var DNS_LABEL_PATTERN = "[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?";
 var CLOUDFLARE_PUBLIC_HOST_PATTERN = new RegExp(`^${DNS_LABEL_PATTERN}\\.trycloudflare\\.com$`, "i");
 var CPOLAR_PUBLIC_HOST_PATTERN = new RegExp(`^(?:${DNS_LABEL_PATTERN}\\.)+cpolar\\.(?:top|cn|io)$`, "i");
-var WebPreviewTunnelSuggestionsSchema = z9.array(z9.string().min(1).max(WEB_PREVIEW_PATH_MAX_LENGTH)).max(32).optional();
-var WebPreviewTunnelStatusSchema = z9.discriminatedUnion("available", [
-  z9.object({
-    available: z9.literal(true),
-    command: z9.string().min(1).max(WEB_PREVIEW_PATH_MAX_LENGTH),
-    version: z9.string().min(1).max(256).optional(),
-    error: z9.never().optional(),
+var WebPreviewTunnelSuggestionsSchema = z10.array(z10.string().min(1).max(WEB_PREVIEW_PATH_MAX_LENGTH)).max(32).optional();
+var WebPreviewTunnelStatusSchema = z10.discriminatedUnion("available", [
+  z10.object({
+    available: z10.literal(true),
+    command: z10.string().min(1).max(WEB_PREVIEW_PATH_MAX_LENGTH),
+    version: z10.string().min(1).max(256).optional(),
+    error: z10.never().optional(),
     suggestions: WebPreviewTunnelSuggestionsSchema
   }).strict(),
-  z9.object({
-    available: z9.literal(false),
-    command: z9.never().optional(),
-    version: z9.never().optional(),
-    error: z9.string().min(1).max(WEB_PREVIEW_ERROR_MAX_LENGTH),
+  z10.object({
+    available: z10.literal(false),
+    command: z10.never().optional(),
+    version: z10.never().optional(),
+    error: z10.string().min(1).max(WEB_PREVIEW_ERROR_MAX_LENGTH),
     suggestions: WebPreviewTunnelSuggestionsSchema
   }).strict()
 ]);
-var WebPreviewCapabilitySchema = z9.object({
+var WebPreviewCapabilitySchema = z10.object({
   cloudflared: WebPreviewTunnelStatusSchema,
   cpolar: WebPreviewTunnelStatusSchema
 }).strict();
-var WebPreviewSourceInputSchema = z9.discriminatedUnion("kind", [
-  z9.object({
-    kind: z9.literal("local"),
+var WebPreviewSourceInputSchema = z10.discriminatedUnion("kind", [
+  z10.object({
+    kind: z10.literal("local"),
     url: LoopbackHttpUrlSchema
   }).strict(),
-  z9.object({
-    kind: z9.literal("static"),
+  z10.object({
+    kind: z10.literal("static"),
     path: WebPreviewPathSchema,
     entryPath: WebPreviewPathSchema
   }).strict()
 ]);
-var PreviewSourceSchema = z9.discriminatedUnion("kind", [
-  z9.object({
-    kind: z9.literal("local"),
+var PreviewSourceSchema = z10.discriminatedUnion("kind", [
+  z10.object({
+    kind: z10.literal("local"),
     url: LoopbackHttpUrlSchema
   }).strict(),
-  z9.object({
-    kind: z9.literal("static"),
+  z10.object({
+    kind: z10.literal("static"),
     rootPath: WebPreviewPathSchema,
     entryPath: WebPreviewPathSchema
   }).strict()
@@ -567,40 +577,40 @@ var previewStateValues = [
   "failed",
   "stopping"
 ];
-var PreviewStateSchema = z9.enum(previewStateValues);
-var PreviewSummaryBaseSchema = z9.object({
+var PreviewStateSchema = z10.enum(previewStateValues);
+var PreviewSummaryBaseSchema = z10.object({
   previewId: IdSchema,
   name: WebPreviewNameSchema,
   source: PreviewSourceSchema,
   tunnelProvider: TunnelProviderSchema,
-  createdAt: z9.number().int().nonnegative(),
-  updatedAt: z9.number().int().nonnegative()
+  createdAt: z10.number().int().nonnegative(),
+  updatedAt: z10.number().int().nonnegative()
 });
 var PreviewSummaryInactiveShape = {
-  publicUrl: z9.never().optional(),
-  error: z9.never().optional()
+  publicUrl: z10.never().optional(),
+  error: z10.never().optional()
 };
-var PreviewSummarySchema = z9.discriminatedUnion("state", [
+var PreviewSummarySchema = z10.discriminatedUnion("state", [
   PreviewSummaryBaseSchema.extend({
-    state: z9.literal("starting"),
+    state: z10.literal("starting"),
     ...PreviewSummaryInactiveShape
   }).strict(),
   PreviewSummaryBaseSchema.extend({
-    state: z9.literal("ready"),
+    state: z10.literal("ready"),
     publicUrl: PublicPreviewUrlSchema,
-    error: z9.never().optional()
+    error: z10.never().optional()
   }).strict(),
   PreviewSummaryBaseSchema.extend({
-    state: z9.literal("disconnected"),
+    state: z10.literal("disconnected"),
     ...PreviewSummaryInactiveShape
   }).strict(),
   PreviewSummaryBaseSchema.extend({
-    state: z9.literal("failed"),
-    publicUrl: z9.never().optional(),
-    error: z9.string().min(1).max(WEB_PREVIEW_ERROR_MAX_LENGTH)
+    state: z10.literal("failed"),
+    publicUrl: z10.never().optional(),
+    error: z10.string().min(1).max(WEB_PREVIEW_ERROR_MAX_LENGTH)
   }).strict(),
   PreviewSummaryBaseSchema.extend({
-    state: z9.literal("stopping"),
+    state: z10.literal("stopping"),
     ...PreviewSummaryInactiveShape
   }).strict()
 ]).superRefine((preview, context) => {
@@ -620,104 +630,104 @@ var PreviewSummarySchema = z9.discriminatedUnion("state", [
     });
   }
 });
-var PreviewHtmlEntriesSchema = z9.array(WebPreviewPathSchema).max(WEB_PREVIEW_HTML_ENTRY_MAX_COUNT);
+var PreviewHtmlEntriesSchema = z10.array(WebPreviewPathSchema).max(WEB_PREVIEW_HTML_ENTRY_MAX_COUNT);
 
 // ../../packages/shared/dist/schemas/device-preview.js
-import { z as z10 } from "zod";
+import { z as z11 } from "zod";
 var DEVICE_PREVIEW_PATH_MAX_LENGTH = 4096;
 var DEVICE_PREVIEW_TEXT_MAX_LENGTH = 4096;
 var DEVICE_PREVIEW_ERROR_MAX_LENGTH = 4096;
 var DEVICE_PREVIEW_NAME_MAX_LENGTH = 256;
 var DEVICE_PREVIEW_VERSION_MAX_LENGTH = 256;
 var DEVICE_PREVIEW_SCREEN_EDGE_MAX = 16384;
-var DevicePreviewNameSchema = z10.string().trim().min(1).max(DEVICE_PREVIEW_NAME_MAX_LENGTH);
+var DevicePreviewNameSchema = z11.string().trim().min(1).max(DEVICE_PREVIEW_NAME_MAX_LENGTH);
 var devicePreviewStreamFormatValues = ["jpeg", "h264_annex_b"];
-var DevicePreviewStreamFormatSchema = z10.enum(devicePreviewStreamFormatValues);
+var DevicePreviewStreamFormatSchema = z11.enum(devicePreviewStreamFormatValues);
 var devicePreviewPlatformValues = ["ios", "android"];
-var DevicePreviewPlatformSchema = z10.enum(devicePreviewPlatformValues);
-var DevicePreviewToolSuggestionsSchema = z10.array(z10.string().min(1).max(DEVICE_PREVIEW_PATH_MAX_LENGTH)).max(32).optional();
-var DevicePreviewToolStatusSchema = z10.union([
-  z10.object({
-    supported: z10.literal(false),
-    available: z10.literal(false),
-    interactive: z10.literal(false),
-    command: z10.never().optional(),
-    version: z10.never().optional(),
-    error: z10.string().min(1).max(DEVICE_PREVIEW_ERROR_MAX_LENGTH),
+var DevicePreviewPlatformSchema = z11.enum(devicePreviewPlatformValues);
+var DevicePreviewToolSuggestionsSchema = z11.array(z11.string().min(1).max(DEVICE_PREVIEW_PATH_MAX_LENGTH)).max(32).optional();
+var DevicePreviewToolStatusSchema = z11.union([
+  z11.object({
+    supported: z11.literal(false),
+    available: z11.literal(false),
+    interactive: z11.literal(false),
+    command: z11.never().optional(),
+    version: z11.never().optional(),
+    error: z11.string().min(1).max(DEVICE_PREVIEW_ERROR_MAX_LENGTH),
     suggestions: DevicePreviewToolSuggestionsSchema
   }).strict(),
-  z10.object({
-    supported: z10.literal(true),
-    available: z10.literal(false),
-    interactive: z10.literal(false),
-    command: z10.string().min(1).max(DEVICE_PREVIEW_PATH_MAX_LENGTH).optional(),
-    version: z10.string().min(1).max(DEVICE_PREVIEW_VERSION_MAX_LENGTH).optional(),
-    error: z10.string().min(1).max(DEVICE_PREVIEW_ERROR_MAX_LENGTH),
+  z11.object({
+    supported: z11.literal(true),
+    available: z11.literal(false),
+    interactive: z11.literal(false),
+    command: z11.string().min(1).max(DEVICE_PREVIEW_PATH_MAX_LENGTH).optional(),
+    version: z11.string().min(1).max(DEVICE_PREVIEW_VERSION_MAX_LENGTH).optional(),
+    error: z11.string().min(1).max(DEVICE_PREVIEW_ERROR_MAX_LENGTH),
     suggestions: DevicePreviewToolSuggestionsSchema
   }).strict(),
-  z10.object({
-    supported: z10.literal(true),
-    available: z10.literal(true),
-    interactive: z10.literal(true),
-    command: z10.string().min(1).max(DEVICE_PREVIEW_PATH_MAX_LENGTH),
-    version: z10.string().min(1).max(DEVICE_PREVIEW_VERSION_MAX_LENGTH).optional(),
-    error: z10.never().optional(),
+  z11.object({
+    supported: z11.literal(true),
+    available: z11.literal(true),
+    interactive: z11.literal(true),
+    command: z11.string().min(1).max(DEVICE_PREVIEW_PATH_MAX_LENGTH),
+    version: z11.string().min(1).max(DEVICE_PREVIEW_VERSION_MAX_LENGTH).optional(),
+    error: z11.never().optional(),
     suggestions: DevicePreviewToolSuggestionsSchema
   }).strict()
 ]);
-var DevicePreviewCapabilitySchema = z10.object({
+var DevicePreviewCapabilitySchema = z11.object({
   ios: DevicePreviewToolStatusSchema,
   android: DevicePreviewToolStatusSchema
 }).strict();
-var DevicePreviewTargetBaseSchema = z10.object({
+var DevicePreviewTargetBaseSchema = z11.object({
   targetId: IdSchema,
   platform: DevicePreviewPlatformSchema,
-  name: z10.string().min(1).max(DEVICE_PREVIEW_NAME_MAX_LENGTH),
-  model: z10.string().min(1).max(DEVICE_PREVIEW_NAME_MAX_LENGTH),
-  osVersion: z10.string().min(1).max(DEVICE_PREVIEW_VERSION_MAX_LENGTH),
-  interactive: z10.boolean()
+  name: z11.string().min(1).max(DEVICE_PREVIEW_NAME_MAX_LENGTH),
+  model: z11.string().min(1).max(DEVICE_PREVIEW_NAME_MAX_LENGTH),
+  osVersion: z11.string().min(1).max(DEVICE_PREVIEW_VERSION_MAX_LENGTH),
+  interactive: z11.boolean()
 });
-var DevicePreviewScreenEdgeSchema = z10.number().int().positive().max(DEVICE_PREVIEW_SCREEN_EDGE_MAX);
-var DevicePreviewTargetSchema = z10.union([
+var DevicePreviewScreenEdgeSchema = z11.number().int().positive().max(DEVICE_PREVIEW_SCREEN_EDGE_MAX);
+var DevicePreviewTargetSchema = z11.union([
   DevicePreviewTargetBaseSchema.extend({
     width: DevicePreviewScreenEdgeSchema,
     height: DevicePreviewScreenEdgeSchema
   }).strict(),
   DevicePreviewTargetBaseSchema.extend({
-    width: z10.never().optional(),
-    height: z10.never().optional()
+    width: z11.never().optional(),
+    height: z11.never().optional()
   }).strict()
 ]);
-var DevicePreviewStateSchema = z10.enum(["ready", "disconnected"]);
-var DevicePreviewSummaryBaseSchema = z10.object({
+var DevicePreviewStateSchema = z11.enum(["ready", "disconnected"]);
+var DevicePreviewSummaryBaseSchema = z11.object({
   previewId: IdSchema,
   name: DevicePreviewNameSchema,
   platform: DevicePreviewPlatformSchema,
   targetId: IdSchema,
-  model: z10.string().min(1).max(DEVICE_PREVIEW_NAME_MAX_LENGTH),
-  osVersion: z10.string().min(1).max(DEVICE_PREVIEW_VERSION_MAX_LENGTH),
-  interactive: z10.boolean(),
-  createdAt: z10.number().int().nonnegative(),
-  updatedAt: z10.number().int().nonnegative()
+  model: z11.string().min(1).max(DEVICE_PREVIEW_NAME_MAX_LENGTH),
+  osVersion: z11.string().min(1).max(DEVICE_PREVIEW_VERSION_MAX_LENGTH),
+  interactive: z11.boolean(),
+  createdAt: z11.number().int().nonnegative(),
+  updatedAt: z11.number().int().nonnegative()
 });
-var DevicePreviewSummarySchema = z10.discriminatedUnion("state", [
+var DevicePreviewSummarySchema = z11.discriminatedUnion("state", [
   DevicePreviewSummaryBaseSchema.extend({
-    state: z10.literal("ready"),
-    error: z10.never().optional()
+    state: z11.literal("ready"),
+    error: z11.never().optional()
   }).strict(),
   DevicePreviewSummaryBaseSchema.extend({
-    state: z10.literal("disconnected"),
-    error: z10.never().optional()
+    state: z11.literal("disconnected"),
+    error: z11.never().optional()
   }).strict()
 ]);
-var DevicePreviewJpegStreamProfileSchema = z10.object({
-  format: z10.literal("jpeg"),
-  maxFps: z10.number().int().min(1).max(30).optional()
+var DevicePreviewJpegStreamProfileSchema = z11.object({
+  format: z11.literal("jpeg"),
+  maxFps: z11.number().int().min(1).max(30).optional()
 }).strict();
-var DevicePreviewH264StreamProfileSchema = z10.object({
-  format: z10.literal("h264_annex_b")
+var DevicePreviewH264StreamProfileSchema = z11.object({
+  format: z11.literal("h264_annex_b")
 }).strict();
-var DevicePreviewStreamProfileSchema = z10.discriminatedUnion("format", [
+var DevicePreviewStreamProfileSchema = z11.discriminatedUnion("format", [
   DevicePreviewJpegStreamProfileSchema,
   DevicePreviewH264StreamProfileSchema
 ]);
@@ -728,10 +738,10 @@ var devicePreviewStreamStopReasonValues = [
   "relay_shutdown",
   "stream_error"
 ];
-var DevicePreviewStreamStopReasonSchema = z10.enum(devicePreviewStreamStopReasonValues);
-var NormalizedCoordinateSchema = z10.number().finite().min(0).max(1);
+var DevicePreviewStreamStopReasonSchema = z11.enum(devicePreviewStreamStopReasonValues);
+var NormalizedCoordinateSchema = z11.number().finite().min(0).max(1);
 var devicePreviewTouchPhaseValues = ["down", "move", "up"];
-var DevicePreviewTouchPhaseSchema = z10.enum(devicePreviewTouchPhaseValues);
+var DevicePreviewTouchPhaseSchema = z11.enum(devicePreviewTouchPhaseValues);
 var devicePreviewOrientationValues = [
   "portrait",
   "landscape_left",
@@ -739,102 +749,102 @@ var devicePreviewOrientationValues = [
   "portrait_upside_down",
   "auto"
 ];
-var DevicePreviewOrientationSchema = z10.enum(devicePreviewOrientationValues);
-var DevicePreviewInputSchema = z10.discriminatedUnion("kind", [
-  z10.object({
-    kind: z10.literal("touch"),
+var DevicePreviewOrientationSchema = z11.enum(devicePreviewOrientationValues);
+var DevicePreviewInputSchema = z11.discriminatedUnion("kind", [
+  z11.object({
+    kind: z11.literal("touch"),
     phase: DevicePreviewTouchPhaseSchema,
     x: NormalizedCoordinateSchema,
     y: NormalizedCoordinateSchema
   }).strict(),
-  z10.object({
-    kind: z10.literal("text"),
-    text: z10.string().min(1).max(DEVICE_PREVIEW_TEXT_MAX_LENGTH)
+  z11.object({
+    kind: z11.literal("text"),
+    text: z11.string().min(1).max(DEVICE_PREVIEW_TEXT_MAX_LENGTH)
   }).strict(),
-  z10.object({
-    kind: z10.literal("button"),
-    button: z10.enum(["home", "back"])
+  z11.object({
+    kind: z11.literal("button"),
+    button: z11.enum(["home", "back"])
   }).strict(),
-  z10.object({
-    kind: z10.literal("orientation"),
+  z11.object({
+    kind: z11.literal("orientation"),
     orientation: DevicePreviewOrientationSchema
   }).strict()
 ]);
-var DevicePreviewStreamRegisterSchema = z10.object({
-  type: z10.literal("device_preview_stream_register"),
+var DevicePreviewStreamRegisterSchema = z11.object({
+  type: z11.literal("device_preview_stream_register"),
   proxyId: IdSchema,
   connectionId: IdSchema
 }).strict();
-var DevicePreviewStreamRegisterResponseSchema = z10.discriminatedUnion("success", [
-  z10.object({
-    type: z10.literal("device_preview_stream_register_response"),
-    success: z10.literal(true)
+var DevicePreviewStreamRegisterResponseSchema = z11.discriminatedUnion("success", [
+  z11.object({
+    type: z11.literal("device_preview_stream_register_response"),
+    success: z11.literal(true)
   }).strict(),
-  z10.object({
-    type: z10.literal("device_preview_stream_register_response"),
-    success: z10.literal(false),
-    error: z10.string().min(1).max(DEVICE_PREVIEW_ERROR_MAX_LENGTH)
+  z11.object({
+    type: z11.literal("device_preview_stream_register_response"),
+    success: z11.literal(false),
+    error: z11.string().min(1).max(DEVICE_PREVIEW_ERROR_MAX_LENGTH)
   }).strict()
 ]);
-var DevicePreviewStreamFlowBaseSchema = z10.object({
-  type: z10.literal("device_preview_stream_flow"),
+var DevicePreviewStreamFlowBaseSchema = z11.object({
+  type: z11.literal("device_preview_stream_flow"),
   streamId: IdSchema
 });
-var DevicePreviewStreamFlowSchema = z10.discriminatedUnion("paused", [
+var DevicePreviewStreamFlowSchema = z11.discriminatedUnion("paused", [
   DevicePreviewStreamFlowBaseSchema.extend({
-    paused: z10.literal(true),
-    resyncRequired: z10.literal(false)
+    paused: z11.literal(true),
+    resyncRequired: z11.literal(false)
   }).strict(),
   DevicePreviewStreamFlowBaseSchema.extend({
-    paused: z10.literal(false),
-    resyncRequired: z10.boolean()
+    paused: z11.literal(false),
+    resyncRequired: z11.boolean()
   }).strict()
 ]);
-var DevicePreviewStreamServerMessageSchema = z10.union([
+var DevicePreviewStreamServerMessageSchema = z11.union([
   DevicePreviewStreamRegisterResponseSchema,
   DevicePreviewStreamFlowSchema
 ]);
 
 // ../../packages/shared/dist/schemas/voice-stream.js
-import { z as z11 } from "zod";
-var VoiceAsrAudioEncodingSchema = z11.enum(["pcm_s16le", "mulaw"]);
-var VoiceAsrStartMessageSchema = z11.object({
-  type: z11.literal("start"),
-  sessionId: z11.string().min(1),
-  attemptId: z11.string().min(1),
-  sampleRate: z11.number().int().positive(),
+import { z as z12 } from "zod";
+var VoiceAsrAudioEncodingSchema = z12.enum(["pcm_s16le", "mulaw"]);
+var VoiceAsrStartMessageSchema = z12.object({
+  type: z12.literal("start"),
+  sessionId: z12.string().min(1),
+  attemptId: z12.string().min(1),
+  sampleRate: z12.number().int().positive(),
   encoding: VoiceAsrAudioEncodingSchema
 });
-var VoiceAsrStopMessageSchema = z11.object({
-  type: z11.literal("stop"),
-  attemptId: z11.string().min(1)
+var VoiceAsrStopMessageSchema = z12.object({
+  type: z12.literal("stop"),
+  attemptId: z12.string().min(1)
 });
-var VoiceAsrClientMessageSchema = z11.discriminatedUnion("type", [
+var VoiceAsrClientMessageSchema = z12.discriminatedUnion("type", [
   VoiceAsrStartMessageSchema,
   VoiceAsrStopMessageSchema
 ]);
-var VoiceAsrServerMessageSchema = z11.discriminatedUnion("type", [
-  z11.object({ type: z11.literal("ready"), attemptId: z11.string().min(1) }),
-  z11.object({
-    type: z11.literal("audio_ack"),
-    attemptId: z11.string().min(1),
-    encodedBytes: z11.number().int().nonnegative(),
-    pcmBytes: z11.number().int().nonnegative(),
-    chunks: z11.number().int().nonnegative()
+var VoiceAsrServerMessageSchema = z12.discriminatedUnion("type", [
+  z12.object({ type: z12.literal("ready"), attemptId: z12.string().min(1) }),
+  z12.object({
+    type: z12.literal("audio_ack"),
+    attemptId: z12.string().min(1),
+    encodedBytes: z12.number().int().nonnegative(),
+    pcmBytes: z12.number().int().nonnegative(),
+    chunks: z12.number().int().nonnegative()
   }),
-  z11.object({ type: z11.literal("partial"), attemptId: z11.string().min(1), text: z11.string() }),
-  z11.object({ type: z11.literal("final"), attemptId: z11.string().min(1), text: z11.string() }),
-  z11.object({
-    type: z11.literal("closed"),
-    attemptId: z11.string().min(1),
-    code: z11.number().int().optional(),
-    reason: z11.string().optional()
+  z12.object({ type: z12.literal("partial"), attemptId: z12.string().min(1), text: z12.string() }),
+  z12.object({ type: z12.literal("final"), attemptId: z12.string().min(1), text: z12.string() }),
+  z12.object({
+    type: z12.literal("closed"),
+    attemptId: z12.string().min(1),
+    code: z12.number().int().optional(),
+    reason: z12.string().optional()
   }),
-  z11.object({
-    type: z11.literal("error"),
-    attemptId: z11.string().min(1),
-    error: z11.string().optional(),
-    errorCode: z11.string().optional()
+  z12.object({
+    type: z12.literal("error"),
+    attemptId: z12.string().min(1),
+    error: z12.string().optional(),
+    errorCode: z12.string().optional()
   })
 ]);
 
@@ -844,7 +854,7 @@ function serializeControl(msg) {
 }
 
 // ../../packages/shared/dist/schemas/relay-control.js
-import { z as z12 } from "zod";
+import { z as z13 } from "zod";
 
 // ../../packages/shared/dist/constants/relay-errors.js
 var RelayErrorCode = {
@@ -881,95 +891,95 @@ var ControlErrorCode = {
 
 // ../../packages/shared/dist/schemas/relay-control.js
 var RELAY_CONTROL_PROTOCOL_VERSION = 1;
-var ProxyInfoSchema = z12.object({
+var ProxyInfoSchema = z13.object({
   proxyId: IdSchema,
-  name: z12.string().optional(),
-  version: z12.string().min(1).max(64),
-  online: z12.boolean(),
-  sessions: z12.array(z12.string())
+  name: z13.string().optional(),
+  version: z13.string().min(1).max(64),
+  online: z13.boolean(),
+  sessions: z13.array(z13.string())
 });
-var RelayClientInfoSchema = z12.object({
+var RelayClientInfoSchema = z13.object({
   clientId: IdSchema,
   proxyId: IdSchema.optional(),
-  connectedAt: z12.number().int().nonnegative(),
-  current: z12.boolean().optional(),
-  userAgent: z12.string().optional(),
-  platform: z12.string().optional(),
-  maxTouchPoints: z12.number().int().nonnegative().optional(),
-  browserName: z12.string().min(1),
-  osName: z12.string().min(1),
-  deviceKind: z12.enum(["desktop", "tablet", "phone", "unknown"]),
-  remoteAddress: z12.string().optional()
+  connectedAt: z13.number().int().nonnegative(),
+  current: z13.boolean().optional(),
+  userAgent: z13.string().optional(),
+  platform: z13.string().optional(),
+  maxTouchPoints: z13.number().int().nonnegative().optional(),
+  browserName: z13.string().min(1),
+  osName: z13.string().min(1),
+  deviceKind: z13.enum(["desktop", "tablet", "phone", "unknown"]),
+  remoteAddress: z13.string().optional()
 });
-var AgentCliAvailabilitySchema = z12.object({
-  available: z12.boolean(),
-  command: z12.string().optional(),
-  error: z12.string().optional(),
-  suggestions: z12.array(z12.string()).optional()
+var AgentCliAvailabilitySchema = z13.object({
+  available: z13.boolean(),
+  command: z13.string().optional(),
+  error: z13.string().optional(),
+  suggestions: z13.array(z13.string()).optional()
 });
-var AgentCliStatusSchema = z12.object({
+var AgentCliStatusSchema = z13.object({
   claude: AgentCliAvailabilitySchema,
   codex: AgentCliAvailabilitySchema,
   kimi: AgentCliAvailabilitySchema
 });
-var DirEntrySchema = z12.object({ name: z12.string(), isDir: z12.boolean() });
-var FileTreeGroupSchema = z12.object({
-  path: z12.string(),
-  entries: z12.array(DirEntrySchema)
+var DirEntrySchema = z13.object({ name: z13.string(), isDir: z13.boolean() });
+var FileTreeGroupSchema = z13.object({
+  path: z13.string(),
+  entries: z13.array(DirEntrySchema)
 });
-var CommandEntrySchema = z12.object({
-  name: z12.string(),
-  description: z12.string(),
-  argumentHint: z12.string().optional(),
-  source: z12.string()
+var CommandEntrySchema = z13.object({
+  name: z13.string(),
+  description: z13.string(),
+  argumentHint: z13.string().optional(),
+  source: z13.string()
 });
-var HistorySessionSchema = z12.object({
-  id: z12.string(),
-  title: z12.string(),
-  projectDir: z12.string(),
-  updatedAt: z12.number(),
-  provider: z12.enum(providerValues),
-  preferredMode: z12.enum(sessionModeValues).optional()
+var HistorySessionSchema = z13.object({
+  id: z13.string(),
+  title: z13.string(),
+  projectDir: z13.string(),
+  updatedAt: z13.number(),
+  provider: z13.enum(providerValues),
+  preferredMode: z13.enum(sessionModeValues).optional()
 });
 var SessionHistoryPositionShape = {
-  timestamp: z12.number().optional(),
-  cursor: z12.string().optional()
+  timestamp: z13.number().optional(),
+  cursor: z13.string().optional()
 };
-var SessionHistoryMessageSchema = z12.discriminatedUnion("role", [
-  z12.object({
-    role: z12.enum(["user", "assistant", "system"]),
-    text: z12.string(),
+var SessionHistoryMessageSchema = z13.discriminatedUnion("role", [
+  z13.object({
+    role: z13.enum(["user", "assistant", "system"]),
+    text: z13.string(),
     ...SessionHistoryPositionShape
   }),
-  z12.object({
-    role: z12.literal("activity"),
-    text: z12.string(),
+  z13.object({
+    role: z13.literal("activity"),
+    text: z13.string(),
     toolId: IdSchema,
-    toolName: z12.string(),
-    parameters: z12.record(z12.string(), z12.unknown()).optional(),
-    status: z12.enum(["running", "done", "error"]),
+    toolName: z13.string(),
+    parameters: z13.record(z13.string(), z13.unknown()).optional(),
+    status: z13.enum(["running", "done", "error"]),
     ...SessionHistoryPositionShape
   })
 ]);
 var RequestIdShape = { requestId: IdSchema.optional() };
 var RequiredRequestIdShape = { requestId: IdSchema };
-var ControlErrorCodeSchema = z12.enum(Object.values(ControlErrorCode));
+var ControlErrorCodeSchema = z13.enum(Object.values(ControlErrorCode));
 var RequestErrorShape = {
-  error: z12.string().optional(),
+  error: z13.string().optional(),
   errorCode: ControlErrorCodeSchema.optional()
 };
 var RequiredRequestErrorShape = {
-  error: z12.string().min(1),
+  error: z13.string().min(1),
   errorCode: ControlErrorCodeSchema
 };
-var RemoteFileDispositionSchema = z12.enum(["inline", "download"]);
-var RemoteFileUploadKindSchema = z12.enum(["clipboard_image", "file"]);
+var RemoteFileDispositionSchema = z13.enum(["inline", "download"]);
+var RemoteFileUploadKindSchema = z13.enum(["clipboard_image", "file"]);
 function control(type, shape, directions) {
   return {
     type,
     directions: new Set(Array.isArray(directions) ? directions : directions ? [directions] : []),
-    schema: z12.object({
-      type: z12.literal(type),
+    schema: z13.object({
+      type: z13.literal(type),
       ...shape ?? {}
     })
   };
@@ -978,8 +988,8 @@ function strictControl(type, shape, directions) {
   return {
     type,
     directions: new Set(Array.isArray(directions) ? directions : directions ? [directions] : []),
-    schema: z12.object({
-      type: z12.literal(type),
+    schema: z13.object({
+      type: z13.literal(type),
       ...shape
     }).strict()
   };
@@ -991,300 +1001,300 @@ function controlSchema(type, schema, directions) {
     schema
   };
 }
-var ProxySelectResponseSchema = z12.discriminatedUnion("success", [
-  z12.object({
-    type: z12.literal("proxy_select_response"),
+var ProxySelectResponseSchema = z13.discriminatedUnion("success", [
+  z13.object({
+    type: z13.literal("proxy_select_response"),
     ...RequestIdShape,
-    success: z12.literal(true),
+    success: z13.literal(true),
     proxyId: IdSchema,
     bindingId: IdSchema
   }).strict(),
-  z12.object({
-    type: z12.literal("proxy_select_response"),
+  z13.object({
+    type: z13.literal("proxy_select_response"),
     ...RequestIdShape,
-    success: z12.literal(false),
+    success: z13.literal(false),
     ...RequestErrorShape
   }).strict()
 ]);
-var ClientRegisterResponseSchema = z12.discriminatedUnion("status", [
-  z12.object({
-    type: z12.literal("client_register_response"),
-    protocolVersion: z12.literal(RELAY_CONTROL_PROTOCOL_VERSION),
-    status: z12.literal("restored"),
+var ClientRegisterResponseSchema = z13.discriminatedUnion("status", [
+  z13.object({
+    type: z13.literal("client_register_response"),
+    protocolVersion: z13.literal(RELAY_CONTROL_PROTOCOL_VERSION),
+    status: z13.literal("restored"),
     proxyId: IdSchema,
     bindingId: IdSchema
   }).strict(),
-  z12.object({
-    type: z12.literal("client_register_response"),
-    protocolVersion: z12.literal(RELAY_CONTROL_PROTOCOL_VERSION),
-    status: z12.literal("proxy_offline"),
+  z13.object({
+    type: z13.literal("client_register_response"),
+    protocolVersion: z13.literal(RELAY_CONTROL_PROTOCOL_VERSION),
+    status: z13.literal("proxy_offline"),
     proxyId: IdSchema,
     bindingId: IdSchema
   }).strict(),
-  z12.object({
-    type: z12.literal("client_register_response"),
-    protocolVersion: z12.literal(RELAY_CONTROL_PROTOCOL_VERSION),
-    status: z12.literal("new")
+  z13.object({
+    type: z13.literal("client_register_response"),
+    protocolVersion: z13.literal(RELAY_CONTROL_PROTOCOL_VERSION),
+    status: z13.literal("new")
   }).strict()
 ]);
-var PreviewCreateResponseSchema = z12.discriminatedUnion("accepted", [
-  z12.object({
-    type: z12.literal("preview_create_response"),
+var PreviewCreateResponseSchema = z13.discriminatedUnion("accepted", [
+  z13.object({
+    type: z13.literal("preview_create_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
     operationId: IdSchema,
-    accepted: z12.literal(true),
+    accepted: z13.literal(true),
     previewId: IdSchema
   }).strict(),
-  z12.object({
-    type: z12.literal("preview_create_response"),
+  z13.object({
+    type: z13.literal("preview_create_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
     operationId: IdSchema,
-    accepted: z12.literal(false),
+    accepted: z13.literal(false),
     ...RequiredRequestErrorShape
   }).strict()
 ]);
-var DevicePreviewCreateResponseSchema = z12.discriminatedUnion("accepted", [
-  z12.object({
-    type: z12.literal("device_preview_create_response"),
+var DevicePreviewCreateResponseSchema = z13.discriminatedUnion("accepted", [
+  z13.object({
+    type: z13.literal("device_preview_create_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
     operationId: IdSchema,
-    accepted: z12.literal(true),
+    accepted: z13.literal(true),
     previewId: IdSchema
   }).strict(),
-  z12.object({
-    type: z12.literal("device_preview_create_response"),
+  z13.object({
+    type: z13.literal("device_preview_create_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
     operationId: IdSchema,
-    accepted: z12.literal(false),
+    accepted: z13.literal(false),
     ...RequiredRequestErrorShape
   }).strict()
 ]);
-var PreviewCapabilityResponseSchema = z12.discriminatedUnion("success", [
-  z12.object({
-    type: z12.literal("preview_capability_response"),
+var PreviewCapabilityResponseSchema = z13.discriminatedUnion("success", [
+  z13.object({
+    type: z13.literal("preview_capability_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
-    success: z12.literal(true),
+    success: z13.literal(true),
     capability: WebPreviewCapabilitySchema
   }).strict(),
-  z12.object({
-    type: z12.literal("preview_capability_response"),
+  z13.object({
+    type: z13.literal("preview_capability_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
-    success: z12.literal(false),
+    success: z13.literal(false),
     ...RequiredRequestErrorShape
   }).strict()
 ]);
-var DevicePreviewCapabilityResponseSchema = z12.discriminatedUnion("success", [
-  z12.object({
-    type: z12.literal("device_preview_capability_response"),
+var DevicePreviewCapabilityResponseSchema = z13.discriminatedUnion("success", [
+  z13.object({
+    type: z13.literal("device_preview_capability_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
-    success: z12.literal(true),
+    success: z13.literal(true),
     capability: DevicePreviewCapabilitySchema
   }).strict(),
-  z12.object({
-    type: z12.literal("device_preview_capability_response"),
+  z13.object({
+    type: z13.literal("device_preview_capability_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
-    success: z12.literal(false),
+    success: z13.literal(false),
     ...RequiredRequestErrorShape
   }).strict()
 ]);
-var ProxyInfoRequestSchema = z12.object({
-  type: z12.literal("proxy_info_request"),
+var ProxyInfoRequestSchema = z13.object({
+  type: z13.literal("proxy_info_request"),
   ...RequestIdShape
 }).strict();
-var ProxyInfoResponseSchema = z12.object({
-  type: z12.literal("proxy_info"),
+var ProxyInfoResponseSchema = z13.object({
+  type: z13.literal("proxy_info"),
   ...RequestIdShape,
-  homePath: z12.string(),
+  homePath: z13.string(),
   agentCli: AgentCliStatusSchema
 }).strict();
-var PreviewStaticInspectResponseSchema = z12.discriminatedUnion("success", [
-  z12.object({
-    type: z12.literal("preview_static_inspect_response"),
+var PreviewStaticInspectResponseSchema = z13.discriminatedUnion("success", [
+  z13.object({
+    type: z13.literal("preview_static_inspect_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
-    success: z12.literal(true),
+    success: z13.literal(true),
     entryPath: WebPreviewPathSchema.optional(),
     htmlEntries: PreviewHtmlEntriesSchema
   }).strict(),
-  z12.object({
-    type: z12.literal("preview_static_inspect_response"),
+  z13.object({
+    type: z13.literal("preview_static_inspect_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
-    success: z12.literal(false),
+    success: z13.literal(false),
     ...RequiredRequestErrorShape
   }).strict()
 ]);
-var PreviewRenameResponseSchema = z12.discriminatedUnion("success", [
-  z12.object({
-    type: z12.literal("preview_rename_response"),
+var PreviewRenameResponseSchema = z13.discriminatedUnion("success", [
+  z13.object({
+    type: z13.literal("preview_rename_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
     operationId: IdSchema,
     previewId: IdSchema,
-    success: z12.literal(true)
+    success: z13.literal(true)
   }).strict(),
-  z12.object({
-    type: z12.literal("preview_rename_response"),
+  z13.object({
+    type: z13.literal("preview_rename_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
     operationId: IdSchema,
     previewId: IdSchema,
-    success: z12.literal(false),
+    success: z13.literal(false),
     ...RequiredRequestErrorShape
   }).strict()
 ]);
-var PreviewReconnectResponseSchema = z12.discriminatedUnion("success", [
-  z12.object({
-    type: z12.literal("preview_reconnect_response"),
+var PreviewReconnectResponseSchema = z13.discriminatedUnion("success", [
+  z13.object({
+    type: z13.literal("preview_reconnect_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
     operationId: IdSchema,
     previewId: IdSchema,
-    success: z12.literal(true)
+    success: z13.literal(true)
   }).strict(),
-  z12.object({
-    type: z12.literal("preview_reconnect_response"),
+  z13.object({
+    type: z13.literal("preview_reconnect_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
     operationId: IdSchema,
     previewId: IdSchema,
-    success: z12.literal(false),
+    success: z13.literal(false),
     ...RequiredRequestErrorShape
   }).strict()
 ]);
-var PreviewCloseResponseSchema = z12.discriminatedUnion("success", [
-  z12.object({
-    type: z12.literal("preview_close_response"),
+var PreviewCloseResponseSchema = z13.discriminatedUnion("success", [
+  z13.object({
+    type: z13.literal("preview_close_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
     operationId: IdSchema,
     previewId: IdSchema,
-    success: z12.literal(true)
+    success: z13.literal(true)
   }).strict(),
-  z12.object({
-    type: z12.literal("preview_close_response"),
+  z13.object({
+    type: z13.literal("preview_close_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
     operationId: IdSchema,
     previewId: IdSchema,
-    success: z12.literal(false),
+    success: z13.literal(false),
     ...RequiredRequestErrorShape
   }).strict()
 ]);
-var DevicePreviewTargetsResponseSchema = z12.discriminatedUnion("success", [
-  z12.object({
-    type: z12.literal("device_preview_targets_response"),
+var DevicePreviewTargetsResponseSchema = z13.discriminatedUnion("success", [
+  z13.object({
+    type: z13.literal("device_preview_targets_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
-    success: z12.literal(true),
-    targets: z12.array(DevicePreviewTargetSchema).max(1024)
+    success: z13.literal(true),
+    targets: z13.array(DevicePreviewTargetSchema).max(1024)
   }).strict(),
-  z12.object({
-    type: z12.literal("device_preview_targets_response"),
+  z13.object({
+    type: z13.literal("device_preview_targets_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
-    success: z12.literal(false),
+    success: z13.literal(false),
     ...RequiredRequestErrorShape
   }).strict()
 ]);
-var DevicePreviewRenameResponseSchema = z12.discriminatedUnion("success", [
-  z12.object({
-    type: z12.literal("device_preview_rename_response"),
+var DevicePreviewRenameResponseSchema = z13.discriminatedUnion("success", [
+  z13.object({
+    type: z13.literal("device_preview_rename_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
     operationId: IdSchema,
     previewId: IdSchema,
-    success: z12.literal(true)
+    success: z13.literal(true)
   }).strict(),
-  z12.object({
-    type: z12.literal("device_preview_rename_response"),
+  z13.object({
+    type: z13.literal("device_preview_rename_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
     operationId: IdSchema,
     previewId: IdSchema,
-    success: z12.literal(false),
+    success: z13.literal(false),
     ...RequiredRequestErrorShape
   }).strict()
 ]);
-var DevicePreviewReconnectResponseSchema = z12.discriminatedUnion("success", [
-  z12.object({
-    type: z12.literal("device_preview_reconnect_response"),
+var DevicePreviewReconnectResponseSchema = z13.discriminatedUnion("success", [
+  z13.object({
+    type: z13.literal("device_preview_reconnect_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
     operationId: IdSchema,
     previewId: IdSchema,
-    success: z12.literal(true)
+    success: z13.literal(true)
   }).strict(),
-  z12.object({
-    type: z12.literal("device_preview_reconnect_response"),
+  z13.object({
+    type: z13.literal("device_preview_reconnect_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
     operationId: IdSchema,
     previewId: IdSchema,
-    success: z12.literal(false),
+    success: z13.literal(false),
     ...RequiredRequestErrorShape
   }).strict()
 ]);
-var DevicePreviewCloseResponseSchema = z12.discriminatedUnion("success", [
-  z12.object({
-    type: z12.literal("device_preview_close_response"),
+var DevicePreviewCloseResponseSchema = z13.discriminatedUnion("success", [
+  z13.object({
+    type: z13.literal("device_preview_close_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
     operationId: IdSchema,
     previewId: IdSchema,
-    success: z12.literal(true)
+    success: z13.literal(true)
   }).strict(),
-  z12.object({
-    type: z12.literal("device_preview_close_response"),
+  z13.object({
+    type: z13.literal("device_preview_close_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
     operationId: IdSchema,
     previewId: IdSchema,
-    success: z12.literal(false),
+    success: z13.literal(false),
     ...RequiredRequestErrorShape
   }).strict()
 ]);
-var DevicePreviewStreamUrlResponseSchema = z12.discriminatedUnion("success", [
-  z12.object({
-    type: z12.literal("device_preview_stream_url_response"),
+var DevicePreviewStreamUrlResponseSchema = z13.discriminatedUnion("success", [
+  z13.object({
+    type: z13.literal("device_preview_stream_url_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
     previewId: IdSchema,
-    success: z12.literal(true),
-    url: z12.string().min(1).max(4096),
+    success: z13.literal(true),
+    url: z13.string().min(1).max(4096),
     leaseId: IdSchema,
-    expiresAt: z12.number().int().nonnegative(),
-    controlMode: z12.enum(["controller", "view_only"])
+    expiresAt: z13.number().int().nonnegative(),
+    controlMode: z13.enum(["controller", "view_only"])
   }).strict(),
-  z12.object({
-    type: z12.literal("device_preview_stream_url_response"),
+  z13.object({
+    type: z13.literal("device_preview_stream_url_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
     previewId: IdSchema,
-    success: z12.literal(false),
+    success: z13.literal(false),
     ...RequiredRequestErrorShape
   }).strict()
 ]);
 var DevicePreviewStreamStartResponseBaseShape = {
-  type: z12.literal("device_preview_stream_start_response"),
+  type: z13.literal("device_preview_stream_start_response"),
   streamId: IdSchema,
   leaseId: IdSchema,
   previewId: IdSchema
 };
-var DevicePreviewStreamStartSuccessSchema = z12.object({
+var DevicePreviewStreamStartSuccessSchema = z13.object({
   ...DevicePreviewStreamStartResponseBaseShape,
-  success: z12.literal(true),
+  success: z13.literal(true),
   format: DevicePreviewStreamFormatSchema,
-  width: z12.number().int().positive().max(16384).optional(),
-  height: z12.number().int().positive().max(16384).optional()
+  width: z13.number().int().positive().max(16384).optional(),
+  height: z13.number().int().positive().max(16384).optional()
 }).strict().superRefine((response, context) => {
   if (response.width === void 0 === (response.height === void 0))
     return;
@@ -1294,74 +1304,74 @@ var DevicePreviewStreamStartSuccessSchema = z12.object({
     message: "Device preview stream dimensions must include both width and height"
   });
 });
-var DevicePreviewStreamStartResponseSchema = z12.discriminatedUnion("success", [
+var DevicePreviewStreamStartResponseSchema = z13.discriminatedUnion("success", [
   DevicePreviewStreamStartSuccessSchema,
-  z12.object({
+  z13.object({
     ...DevicePreviewStreamStartResponseBaseShape,
-    success: z12.literal(false),
+    success: z13.literal(false),
     ...RequiredRequestErrorShape
   }).strict()
 ]);
-var DevicePreviewStreamCompleteSchema = z12.object({
-  type: z12.literal("device_preview_stream_complete"),
+var DevicePreviewStreamCompleteSchema = z13.object({
+  type: z13.literal("device_preview_stream_complete"),
   streamId: IdSchema,
   leaseId: IdSchema,
   previewId: IdSchema,
-  success: z12.literal(false),
-  error: z12.string().min(1)
+  success: z13.literal(false),
+  error: z13.string().min(1)
 }).strict();
 var DevicePreviewStreamStartBaseShape = {
-  type: z12.literal("device_preview_stream_start"),
+  type: z13.literal("device_preview_stream_start"),
   streamId: IdSchema,
   leaseId: IdSchema,
   previewId: IdSchema
 };
-var DevicePreviewStreamStartSchema = z12.discriminatedUnion("format", [
-  z12.object({
+var DevicePreviewStreamStartSchema = z13.discriminatedUnion("format", [
+  z13.object({
     ...DevicePreviewStreamStartBaseShape,
     ...DevicePreviewJpegStreamProfileSchema.shape
   }).strict(),
-  z12.object({
+  z13.object({
     ...DevicePreviewStreamStartBaseShape,
     ...DevicePreviewH264StreamProfileSchema.shape
   }).strict()
 ]);
-var DevicePreviewInputAckSchema = z12.discriminatedUnion("success", [
-  z12.object({
-    type: z12.literal("device_preview_input_ack"),
+var DevicePreviewInputAckSchema = z13.discriminatedUnion("success", [
+  z13.object({
+    type: z13.literal("device_preview_input_ack"),
     scope: PreviewScopeSchema,
     leaseId: IdSchema,
-    inputSeq: z12.number().int().min(0).max(4294967295),
-    success: z12.literal(true)
+    inputSeq: z13.number().int().min(0).max(4294967295),
+    success: z13.literal(true)
   }).strict(),
-  z12.object({
-    type: z12.literal("device_preview_input_ack"),
+  z13.object({
+    type: z13.literal("device_preview_input_ack"),
     scope: PreviewScopeSchema,
     leaseId: IdSchema,
-    inputSeq: z12.number().int().min(0).max(4294967295),
-    success: z12.literal(false),
+    inputSeq: z13.number().int().min(0).max(4294967295),
+    success: z13.literal(false),
     ...RequiredRequestErrorShape
   }).strict()
 ]);
-var DevicePreviewControlClaimResponseSchema = z12.discriminatedUnion("success", [
-  z12.object({
-    type: z12.literal("device_preview_control_claim_response"),
+var DevicePreviewControlClaimResponseSchema = z13.discriminatedUnion("success", [
+  z13.object({
+    type: z13.literal("device_preview_control_claim_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
     leaseId: IdSchema,
-    success: z12.literal(true),
-    controlMode: z12.literal("controller")
+    success: z13.literal(true),
+    controlMode: z13.literal("controller")
   }).strict(),
-  z12.object({
-    type: z12.literal("device_preview_control_claim_response"),
+  z13.object({
+    type: z13.literal("device_preview_control_claim_response"),
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
     leaseId: IdSchema,
-    success: z12.literal(false),
+    success: z13.literal(false),
     ...RequiredRequestErrorShape
   }).strict()
 ]);
-var SessionPermissionModeSchema = z12.enum([
+var SessionPermissionModeSchema = z13.enum([
   "default",
   "auto",
   "acceptEdits",
@@ -1369,98 +1379,98 @@ var SessionPermissionModeSchema = z12.enum([
   "bypassPermissions",
   "dontAsk"
 ]);
-var AgentJsonSessionCreateSchema = z12.object({
-  type: z12.literal("session_create"),
+var AgentJsonSessionCreateSchema = z13.object({
+  type: z13.literal("session_create"),
   ...RequiredRequestIdShape,
-  kind: z12.literal("agent"),
-  cwd: z12.string(),
-  name: z12.string().optional(),
-  provider: z12.enum(providerValues),
-  mode: z12.literal("json"),
-  resumeSessionId: z12.string().optional(),
+  kind: z13.literal("agent"),
+  cwd: z13.string(),
+  name: z13.string().optional(),
+  provider: z13.enum(providerValues),
+  mode: z13.literal("json"),
+  resumeSessionId: z13.string().optional(),
   permissionMode: SessionPermissionModeSchema.optional()
 }).strict();
-var AgentPtySessionCreateSchema = z12.object({
-  type: z12.literal("session_create"),
+var AgentPtySessionCreateSchema = z13.object({
+  type: z13.literal("session_create"),
   ...RequiredRequestIdShape,
-  kind: z12.literal("agent"),
-  cwd: z12.string(),
-  name: z12.string().optional(),
-  provider: z12.enum(providerValues),
-  mode: z12.literal("pty"),
-  resumeSessionId: z12.string().optional(),
-  cols: z12.number().int().positive().max(PTY_INITIAL_MAX_COLS),
-  rows: z12.number().int().positive().max(PTY_INITIAL_MAX_ROWS),
+  kind: z13.literal("agent"),
+  cwd: z13.string(),
+  name: z13.string().optional(),
+  provider: z13.enum(providerValues),
+  mode: z13.literal("pty"),
+  resumeSessionId: z13.string().optional(),
+  cols: z13.number().int().positive().max(PTY_INITIAL_MAX_COLS),
+  rows: z13.number().int().positive().max(PTY_INITIAL_MAX_ROWS),
   permissionMode: SessionPermissionModeSchema.optional()
 }).strict();
-var TerminalSessionCreateSchema = z12.object({
-  type: z12.literal("session_create"),
+var TerminalSessionCreateSchema = z13.object({
+  type: z13.literal("session_create"),
   ...RequiredRequestIdShape,
-  kind: z12.literal("terminal"),
-  name: z12.string().optional(),
-  mode: z12.literal("pty"),
-  cols: z12.number().int().positive().max(PTY_INITIAL_MAX_COLS),
-  rows: z12.number().int().positive().max(PTY_INITIAL_MAX_ROWS)
+  kind: z13.literal("terminal"),
+  name: z13.string().optional(),
+  mode: z13.literal("pty"),
+  cols: z13.number().int().positive().max(PTY_INITIAL_MAX_COLS),
+  rows: z13.number().int().positive().max(PTY_INITIAL_MAX_ROWS)
 }).strict();
-var SessionCreateSchema = z12.discriminatedUnion("mode", [
+var SessionCreateSchema = z13.discriminatedUnion("mode", [
   AgentJsonSessionCreateSchema,
-  z12.discriminatedUnion("kind", [AgentPtySessionCreateSchema, TerminalSessionCreateSchema])
+  z13.discriminatedUnion("kind", [AgentPtySessionCreateSchema, TerminalSessionCreateSchema])
 ]);
 var SessionCreateSuccessBaseShape = {
-  type: z12.literal("session_create_response"),
+  type: z13.literal("session_create_response"),
   ...RequiredRequestIdShape,
-  success: z12.literal(true),
+  success: z13.literal(true),
   sessionId: IdSchema,
-  cwd: z12.string(),
-  lastActive: z12.number(),
-  name: z12.string().optional(),
-  nameLocked: z12.boolean().optional()
+  cwd: z13.string(),
+  lastActive: z13.number(),
+  name: z13.string().optional(),
+  nameLocked: z13.boolean().optional()
 };
-var SessionCreateSuccessResponseSchema = z12.discriminatedUnion("mode", [
-  z12.object({
+var SessionCreateSuccessResponseSchema = z13.discriminatedUnion("mode", [
+  z13.object({
     ...SessionCreateSuccessBaseShape,
-    kind: z12.literal("agent"),
-    mode: z12.literal("json"),
-    provider: z12.enum(providerValues)
+    kind: z13.literal("agent"),
+    mode: z13.literal("json"),
+    provider: z13.enum(providerValues)
   }).strict(),
-  z12.discriminatedUnion("kind", [
-    z12.object({
+  z13.discriminatedUnion("kind", [
+    z13.object({
       ...SessionCreateSuccessBaseShape,
-      kind: z12.literal("agent"),
-      mode: z12.literal("pty"),
-      provider: z12.enum(providerValues),
-      ptyOwner: z12.enum(ptyOwnerValues)
+      kind: z13.literal("agent"),
+      mode: z13.literal("pty"),
+      provider: z13.enum(providerValues),
+      ptyOwner: z13.enum(ptyOwnerValues)
     }).strict(),
-    z12.object({
+    z13.object({
       ...SessionCreateSuccessBaseShape,
-      kind: z12.literal("terminal"),
-      mode: z12.literal("pty"),
-      provider: z12.literal("claude"),
-      ptyOwner: z12.literal("local-terminal")
+      kind: z13.literal("terminal"),
+      mode: z13.literal("pty"),
+      provider: z13.literal("claude"),
+      ptyOwner: z13.literal("local-terminal")
     }).strict()
   ])
 ]);
-var SessionCreateResponseSchema = z12.discriminatedUnion("success", [
+var SessionCreateResponseSchema = z13.discriminatedUnion("success", [
   SessionCreateSuccessResponseSchema,
-  z12.object({
-    type: z12.literal("session_create_response"),
+  z13.object({
+    type: z13.literal("session_create_response"),
     ...RequiredRequestIdShape,
-    success: z12.literal(false),
+    success: z13.literal(false),
     ...RequiredRequestErrorShape,
-    activeWriterPid: z12.number().int().positive().optional()
+    activeWriterPid: z13.number().int().positive().optional()
   }).strict()
 ]);
 var relayControlDefinitions = [
   strictControl("proxy_register", {
-    protocolVersion: z12.literal(RELAY_CONTROL_PROTOCOL_VERSION),
+    protocolVersion: z13.literal(RELAY_CONTROL_PROTOCOL_VERSION),
     proxyId: IdSchema,
-    name: z12.string().optional(),
-    proxyVersion: z12.string().min(1).max(64)
+    name: z13.string().optional(),
+    proxyVersion: z13.string().min(1).max(64)
   }),
   strictControl("proxy_register_response", {
-    protocolVersion: z12.literal(RELAY_CONTROL_PROTOCOL_VERSION),
-    status: z12.enum(["new", "reconnected"]),
-    relayVersion: z12.string().min(1).max(64),
+    protocolVersion: z13.literal(RELAY_CONTROL_PROTOCOL_VERSION),
+    status: z13.enum(["new", "reconnected"]),
+    relayVersion: z13.string().min(1).max(64),
     // Relay rotates this nonce for every successful main Proxy registration. The dedicated image
     // stream socket must present it before Relay accepts frames, so a superseded Proxy connection
     // cannot keep publishing into a newly registered Proxy with the same persistent proxyId.
@@ -1469,7 +1479,7 @@ var relayControlDefinitions = [
   control("proxy_list_request", RequestIdShape),
   control("proxy_list_response", {
     ...RequestIdShape,
-    proxies: z12.array(ProxyInfoSchema)
+    proxies: z13.array(ProxyInfoSchema)
   }),
   control("proxy_remove", {
     ...RequiredRequestIdShape,
@@ -1478,74 +1488,74 @@ var relayControlDefinitions = [
   control("proxy_remove_response", {
     ...RequiredRequestIdShape,
     proxyId: IdSchema,
-    success: z12.boolean(),
+    success: z13.boolean(),
     ...RequestErrorShape
   }),
   control("relay_client_list_request", RequestIdShape),
   control("relay_client_list_response", {
     ...RequestIdShape,
-    clients: z12.array(RelayClientInfoSchema)
+    clients: z13.array(RelayClientInfoSchema)
   }),
   control("relay_client_kick", { ...RequiredRequestIdShape, clientId: IdSchema }),
   control("relay_client_kick_response", {
     ...RequiredRequestIdShape,
     clientId: IdSchema,
-    success: z12.boolean(),
+    success: z13.boolean(),
     ...RequestErrorShape
   }),
   control("relay_client_kicked", {
-    reason: z12.string().optional()
+    reason: z13.string().optional()
   }),
   control("remote_file_url_request", {
     ...RequiredRequestIdShape,
     sessionId: IdSchema,
-    path: z12.string().min(1),
+    path: z13.string().min(1),
     disposition: RemoteFileDispositionSchema
   }),
   control("remote_file_url_response", {
     ...RequiredRequestIdShape,
     ...RequestErrorShape,
     sessionId: IdSchema,
-    path: z12.string().optional(),
-    success: z12.boolean(),
-    url: z12.string().optional(),
-    expiresAt: z12.number().int().nonnegative().optional()
+    path: z13.string().optional(),
+    success: z13.boolean(),
+    url: z13.string().optional(),
+    expiresAt: z13.number().int().nonnegative().optional()
   }),
   control("remote_file_metadata_request", {
     ...RequiredRequestIdShape,
     sessionId: IdSchema,
-    path: z12.string().min(1)
+    path: z13.string().min(1)
   }),
   control("remote_file_metadata_response", {
     ...RequiredRequestIdShape,
     ...RequestErrorShape,
     sessionId: IdSchema,
-    path: z12.string().optional(),
-    success: z12.boolean(),
-    mimeType: z12.string().optional(),
-    size: z12.number().int().nonnegative().optional(),
-    fileName: z12.string().optional()
+    path: z13.string().optional(),
+    success: z13.boolean(),
+    mimeType: z13.string().optional(),
+    size: z13.number().int().nonnegative().optional(),
+    fileName: z13.string().optional()
   }),
   control("remote_file_stream_request", {
     streamId: IdSchema,
     sessionId: IdSchema,
-    path: z12.string().min(1),
+    path: z13.string().min(1),
     disposition: RemoteFileDispositionSchema
   }),
   control("remote_file_stream_response", {
     ...RequestErrorShape,
     streamId: IdSchema,
     sessionId: IdSchema,
-    success: z12.boolean(),
-    path: z12.string().optional(),
-    mimeType: z12.string().optional(),
-    size: z12.number().int().nonnegative().optional(),
-    fileName: z12.string().optional()
+    success: z13.boolean(),
+    path: z13.string().optional(),
+    mimeType: z13.string().optional(),
+    size: z13.number().int().nonnegative().optional(),
+    fileName: z13.string().optional()
   }),
   control("remote_file_stream_complete", {
     ...RequestErrorShape,
     streamId: IdSchema,
-    success: z12.boolean()
+    success: z13.boolean()
   }),
   control("remote_file_stream_cancel", {
     streamId: IdSchema
@@ -1554,25 +1564,25 @@ var relayControlDefinitions = [
     ...RequiredRequestIdShape,
     sessionId: IdSchema,
     kind: RemoteFileUploadKindSchema,
-    fileName: z12.string().optional(),
-    mimeType: z12.string().min(1),
-    size: z12.number().int().nonnegative().optional()
+    fileName: z13.string().optional(),
+    mimeType: z13.string().min(1),
+    size: z13.number().int().nonnegative().optional()
   }),
   control("remote_file_upload_url_response", {
     ...RequiredRequestIdShape,
     ...RequestErrorShape,
     sessionId: IdSchema,
-    success: z12.boolean(),
-    uploadUrl: z12.string().optional(),
-    expiresAt: z12.number().int().nonnegative().optional()
+    success: z13.boolean(),
+    uploadUrl: z13.string().optional(),
+    expiresAt: z13.number().int().nonnegative().optional()
   }),
   control("remote_file_upload_stream_request", {
     uploadId: IdSchema,
     sessionId: IdSchema,
     kind: RemoteFileUploadKindSchema,
-    fileName: z12.string().optional(),
-    mimeType: z12.string().min(1),
-    size: z12.number().int().nonnegative().optional()
+    fileName: z13.string().optional(),
+    mimeType: z13.string().min(1),
+    size: z13.number().int().nonnegative().optional()
   }),
   control("remote_file_upload_stream_complete", {
     uploadId: IdSchema
@@ -1584,14 +1594,14 @@ var relayControlDefinitions = [
     ...RequestErrorShape,
     uploadId: IdSchema,
     sessionId: IdSchema,
-    success: z12.boolean(),
-    path: z12.string().optional()
+    success: z13.boolean(),
+    path: z13.string().optional()
   }),
   control("proxy_select", { ...RequestIdShape, proxyId: IdSchema }),
   controlSchema("proxy_select_response", ProxySelectResponseSchema),
   control("relay_error", {
-    code: z12.enum(Object.values(RelayErrorCode)),
-    message: z12.string(),
+    code: z13.enum(Object.values(RelayErrorCode)),
+    message: z13.string(),
     // 可选 requestId: relay 把 client 发来 raw 的 requestId 字段透传回来,
     // client 侧 waitForMessage 据此把对应 pending request 立即拒掉而不必等到 timeout。
     requestId: IdSchema.optional()
@@ -1610,7 +1620,7 @@ var relayControlDefinitions = [
   control("voice_config_update_response", {
     ...RequestIdShape,
     ...RequestErrorShape,
-    success: z12.boolean(),
+    success: z13.boolean(),
     config: VoiceProviderConfigSchema.optional()
   }),
   control("voice_config_test", {
@@ -1620,15 +1630,15 @@ var relayControlDefinitions = [
   control("voice_config_test_response", {
     ...RequestIdShape,
     ...RequestErrorShape,
-    success: z12.boolean(),
-    audioBase64: z12.string().optional(),
-    audioSampleRate: z12.number().int().positive().optional(),
-    audioEncoding: z12.literal("pcm_s16le").optional(),
-    transcript: z12.string().optional()
+    success: z13.boolean(),
+    audioBase64: z13.string().optional(),
+    audioSampleRate: z13.number().int().positive().optional(),
+    audioEncoding: z13.literal("pcm_s16le").optional(),
+    transcript: z13.string().optional()
   }),
   control("voice_capabilities_request", {
     ...RequestIdShape,
-    region: z12.enum(voiceRegionValues).optional()
+    region: z13.enum(voiceRegionValues).optional()
   }),
   control("voice_capabilities_response", {
     ...RequestIdShape,
@@ -1640,31 +1650,31 @@ var relayControlDefinitions = [
   control("latency_web_relay_ping", RequiredRequestIdShape),
   control("latency_web_relay_pong", {
     ...RequiredRequestIdShape,
-    relayNow: z12.number().optional()
+    relayNow: z13.number().optional()
   }),
   control("latency_relay_proxy_request", RequiredRequestIdShape),
   control("latency_relay_proxy_response", {
     ...RequiredRequestIdShape,
-    success: z12.boolean(),
-    rttMs: z12.number().nonnegative().optional(),
-    error: z12.string().optional()
+    success: z13.boolean(),
+    rttMs: z13.number().nonnegative().optional(),
+    error: z13.string().optional()
   }),
   control("latency_relay_proxy_ping", {
     ...RequiredRequestIdShape,
-    relayNow: z12.number().optional()
+    relayNow: z13.number().optional()
   }),
   control("latency_relay_proxy_pong", {
     ...RequiredRequestIdShape,
-    proxyNow: z12.number().optional()
+    proxyNow: z13.number().optional()
   }),
   control("latency_web_proxy_ping", RequiredRequestIdShape, "client_to_proxy"),
-  control("latency_web_proxy_pong", { ...RequiredRequestIdShape, proxyNow: z12.number().optional() }, "proxy_to_client"),
+  control("latency_web_proxy_pong", { ...RequiredRequestIdShape, proxyNow: z13.number().optional() }, "proxy_to_client"),
   // Web preview is independent from Agent/terminal sessions. Relay rewrites requestId and routes
   // every response to the exact requesting WebSocket; only the two push messages are broadcast.
   strictControl("preview_capability_request", {
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
-    refreshPath: z12.boolean()
+    refreshPath: z13.boolean()
   }, "client_to_proxy"),
   controlSchema("preview_capability_response", PreviewCapabilityResponseSchema, "proxy_to_client"),
   strictControl("preview_static_inspect_request", {
@@ -1687,8 +1697,8 @@ var relayControlDefinitions = [
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
     epoch: IdSchema,
-    revision: z12.number().int().nonnegative(),
-    previews: z12.array(PreviewSummarySchema)
+    revision: z13.number().int().nonnegative(),
+    previews: z13.array(PreviewSummarySchema)
   }, "proxy_to_client"),
   strictControl("preview_rename_request", {
     ...RequiredRequestIdShape,
@@ -1714,24 +1724,24 @@ var relayControlDefinitions = [
   controlSchema("preview_close_response", PreviewCloseResponseSchema, "proxy_to_client"),
   strictControl("preview_state_event", {
     epoch: IdSchema,
-    revision: z12.number().int().nonnegative(),
+    revision: z13.number().int().nonnegative(),
     preview: PreviewSummarySchema
   }),
   strictControl("preview_removed_event", {
     epoch: IdSchema,
-    revision: z12.number().int().nonnegative(),
+    revision: z13.number().int().nonnegative(),
     previewId: IdSchema
   }),
   strictControl("preview_state_push", {
     scope: PreviewScopeSchema,
     epoch: IdSchema,
-    revision: z12.number().int().nonnegative(),
+    revision: z13.number().int().nonnegative(),
     preview: PreviewSummarySchema
   }, "proxy_to_client"),
   strictControl("preview_removed_push", {
     scope: PreviewScopeSchema,
     epoch: IdSchema,
-    revision: z12.number().int().nonnegative(),
+    revision: z13.number().int().nonnegative(),
     previewId: IdSchema
   }, "proxy_to_client"),
   // Device previews are a sibling of Web previews under the product-level Preview entry, but
@@ -1740,13 +1750,13 @@ var relayControlDefinitions = [
   strictControl("device_preview_capability_request", {
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
-    refreshPath: z12.boolean()
+    refreshPath: z13.boolean()
   }, "client_to_proxy"),
   controlSchema("device_preview_capability_response", DevicePreviewCapabilityResponseSchema, "proxy_to_client"),
   strictControl("device_preview_targets_request", {
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
-    refresh: z12.boolean()
+    refresh: z13.boolean()
   }, "client_to_proxy"),
   controlSchema("device_preview_targets_response", DevicePreviewTargetsResponseSchema, "proxy_to_client"),
   strictControl("device_preview_create_request", {
@@ -1762,8 +1772,8 @@ var relayControlDefinitions = [
     ...RequiredRequestIdShape,
     scope: PreviewScopeSchema,
     epoch: IdSchema,
-    revision: z12.number().int().nonnegative(),
-    previews: z12.array(DevicePreviewSummarySchema).max(1024)
+    revision: z13.number().int().nonnegative(),
+    previews: z13.array(DevicePreviewSummarySchema).max(1024)
   }, "proxy_to_client"),
   strictControl("device_preview_rename_request", {
     ...RequiredRequestIdShape,
@@ -1789,24 +1799,24 @@ var relayControlDefinitions = [
   controlSchema("device_preview_close_response", DevicePreviewCloseResponseSchema, "proxy_to_client"),
   strictControl("device_preview_state_event", {
     epoch: IdSchema,
-    revision: z12.number().int().nonnegative(),
+    revision: z13.number().int().nonnegative(),
     preview: DevicePreviewSummarySchema
   }),
   strictControl("device_preview_removed_event", {
     epoch: IdSchema,
-    revision: z12.number().int().nonnegative(),
+    revision: z13.number().int().nonnegative(),
     previewId: IdSchema
   }),
   strictControl("device_preview_state_push", {
     scope: PreviewScopeSchema,
     epoch: IdSchema,
-    revision: z12.number().int().nonnegative(),
+    revision: z13.number().int().nonnegative(),
     preview: DevicePreviewSummarySchema
   }, "proxy_to_client"),
   strictControl("device_preview_removed_push", {
     scope: PreviewScopeSchema,
     epoch: IdSchema,
-    revision: z12.number().int().nonnegative(),
+    revision: z13.number().int().nonnegative(),
     previewId: IdSchema
   }, "proxy_to_client"),
   strictControl("device_preview_stream_url_request", {
@@ -1826,7 +1836,7 @@ var relayControlDefinitions = [
   strictControl("device_preview_input", {
     scope: PreviewScopeSchema,
     leaseId: IdSchema,
-    inputSeq: z12.number().int().min(0).max(4294967295),
+    inputSeq: z13.number().int().min(0).max(4294967295),
     input: DevicePreviewInputSchema
   }, "client_to_proxy"),
   controlSchema("device_preview_input_ack", DevicePreviewInputAckSchema, "proxy_to_client"),
@@ -1834,7 +1844,7 @@ var relayControlDefinitions = [
   // browsers cannot abort another viewer's queued input, and Proxy never sends it to browsers.
   strictControl("device_preview_input_revoke", {
     leaseId: IdSchema,
-    reason: z12.literal("control_taken_over")
+    reason: z13.literal("control_taken_over")
   }),
   strictControl("device_preview_control_claim_request", {
     ...RequiredRequestIdShape,
@@ -1845,18 +1855,18 @@ var relayControlDefinitions = [
   strictControl("device_preview_control_revoked_push", {
     scope: PreviewScopeSchema,
     leaseId: IdSchema,
-    reason: z12.enum(["taken_over", "stream_closed", "proxy_offline", "lease_expired"])
+    reason: z13.enum(["taken_over", "stream_closed", "proxy_offline", "lease_expired"])
   }),
   // 客户端注册协议
   strictControl("client_register", {
-    protocolVersion: z12.literal(RELAY_CONTROL_PROTOCOL_VERSION),
+    protocolVersion: z13.literal(RELAY_CONTROL_PROTOCOL_VERSION),
     clientId: IdSchema,
-    userAgent: z12.string().optional(),
-    platform: z12.string().optional(),
-    maxTouchPoints: z12.number().int().nonnegative().optional(),
-    browserName: z12.string().min(1),
-    osName: z12.string().min(1),
-    deviceKind: z12.enum(["desktop", "tablet", "phone", "unknown"])
+    userAgent: z13.string().optional(),
+    platform: z13.string().optional(),
+    maxTouchPoints: z13.number().int().nonnegative().optional(),
+    browserName: z13.string().min(1),
+    osName: z13.string().min(1),
+    deviceKind: z13.enum(["desktop", "tablet", "phone", "unknown"])
   }),
   controlSchema("client_register_response", ClientRegisterResponseSchema),
   // Proxy 离线通知
@@ -1878,38 +1888,38 @@ var relayControlDefinitions = [
   // 目录列表请求与响应
   strictControl("dir_list_request", {
     ...RequestIdShape,
-    path: z12.string(),
-    includeHidden: z12.boolean()
+    path: z13.string(),
+    includeHidden: z13.boolean()
   }, "client_to_proxy"),
   control("dir_list_response", {
     ...RequestIdShape,
     ...RequestErrorShape,
-    entries: z12.array(DirEntrySchema),
-    path: z12.string(),
-    includeHidden: z12.boolean()
+    entries: z13.array(DirEntrySchema),
+    path: z13.string(),
+    includeHidden: z13.boolean()
   }, "proxy_to_client"),
   // 目录创建请求与响应
-  control("dir_create_request", { ...RequestIdShape, path: z12.string() }, "client_to_proxy"),
+  control("dir_create_request", { ...RequestIdShape, path: z13.string() }, "client_to_proxy"),
   control("dir_create_response", {
     ...RequestIdShape,
     ...RequestErrorShape,
-    path: z12.string(),
-    success: z12.boolean()
+    path: z13.string(),
+    success: z13.boolean()
   }, "proxy_to_client"),
   // 命令列表推送，proxy 将可用命令列表推给 client
   control("command_list_push", {
     sessionId: IdSchema,
-    commands: z12.array(CommandEntrySchema)
+    commands: z13.array(CommandEntrySchema)
   }, "proxy_to_client"),
   // 文件树推送: 按目录分组, 首组 path 即为 session cwd。
   // 前端把它写入普通目录树；includeHidden=true 的按需响应使用独立缓存。
   control("file_tree_push", {
-    groups: z12.array(FileTreeGroupSchema)
+    groups: z13.array(FileTreeGroupSchema)
   }, "proxy_to_client"),
   // 会话列表请求与权限模式变更
   strictControl("session_list_request", {}, "client_to_proxy"),
   control("permission_mode_change", {
-    mode: z12.enum(["default", "auto_accept", "plan"]),
+    mode: z13.enum(["default", "auto_accept", "plan"]),
     // sessionId 可选：传入时 proxy 按该会话的 mode 分叉（PTY 发 Tab ANSI），未传走全局日志行为
     sessionId: IdSchema.optional()
   }, "client_to_proxy"),
@@ -1918,33 +1928,33 @@ var relayControlDefinitions = [
   control("session_history_response", {
     ...RequiredRequestIdShape,
     ...RequestErrorShape,
-    success: z12.boolean(),
-    sessions: z12.array(HistorySessionSchema)
+    success: z13.boolean(),
+    sessions: z13.array(HistorySessionSchema)
   }, "proxy_to_client"),
   // PTY 语义状态，从 Envelope 迁移到 Control 层
   control("pty_state", { sessionId: IdSchema, payload: PtyStatePayloadSchema }, "proxy_to_client"),
   // Provider 语义状态，来自 Claude/Codex hook 等结构化事件，不从 PTY 字节推断
   control("agent_status", { sessionId: IdSchema, payload: AgentStatusPayloadSchema }, "proxy_to_client"),
   // 终端标题变化，proxy -> client
-  control("terminal_title", { sessionId: IdSchema, title: z12.string() }, "proxy_to_client"),
+  control("terminal_title", { sessionId: IdSchema, title: z13.string() }, "proxy_to_client"),
   // 终端尺寸变化，proxy -> client
   control("terminal_resize", {
     sessionId: IdSchema,
-    cols: z12.number().int().positive(),
-    rows: z12.number().int().positive(),
+    cols: z13.number().int().positive(),
+    rows: z13.number().int().positive(),
     // PTY output and resize events share one ordered render sequence. The client can therefore
     // place a resize between the exact byte frames that preceded and followed it.
-    outputSeq: z12.number().int().nonnegative()
+    outputSeq: z13.number().int().nonnegative()
   }, "proxy_to_client"),
-  control("terminal_resize_request", { sessionId: IdSchema, cols: z12.number().int().positive(), rows: z12.number().int().positive() }, "client_to_proxy"),
+  control("terminal_resize_request", { sessionId: IdSchema, cols: z13.number().int().positive(), rows: z13.number().int().positive() }, "client_to_proxy"),
   // 远程终止 JSON 会话，client -> proxy
   strictControl("session_terminate", { sessionId: IdSchema }, "client_to_proxy"),
-  control("session_rename", { ...RequestIdShape, sessionId: IdSchema, name: z12.string() }, "client_to_proxy"),
+  control("session_rename", { ...RequestIdShape, sessionId: IdSchema, name: z13.string() }, "client_to_proxy"),
   control("session_rename_response", {
     ...RequestIdShape,
     sessionId: IdSchema,
-    success: z12.boolean(),
-    name: z12.string().optional(),
+    success: z13.boolean(),
+    name: z13.string().optional(),
     ...RequestErrorShape
   }, "proxy_to_client"),
   // 中断当前 turn，client -> proxy；JSON 由 session-worker 打断 Claude 子进程并保留会话。
@@ -1952,22 +1962,22 @@ var relayControlDefinitions = [
   // turn 完成信号，proxy -> client，对应 claude stream-json 的 result 事件
   control("turn_result", {
     sessionId: IdSchema,
-    success: z12.boolean(),
-    isError: z12.boolean(),
+    success: z13.boolean(),
+    isError: z13.boolean(),
     // stream-json result.result 是本轮最终文本。assistant_message 流丢失或 CLI 未发增量时，
     // Web 用它作为 JSON 模式兜底展示，避免 turn 已结束但界面空白。
-    result: z12.string().optional()
+    result: z13.string().optional()
   }, "proxy_to_client"),
   // 客户端发送到 PTY 的原始字节（ANSI 序列），不追加换行
-  control("remote_input_raw", { sessionId: IdSchema, data: z12.string(), traceId: IdSchema.optional() }, "client_to_proxy"),
+  control("remote_input_raw", { sessionId: IdSchema, data: z13.string(), traceId: IdSchema.optional() }, "client_to_proxy"),
   // 客户端询问 proxy 的环境信息 (home 路径等), client -> proxy -> response
   // FilePathPicker 用 homePath 作为 select 模式下的默认起点, 新建会话时打开即可浏览
   controlSchema("proxy_info_request", ProxyInfoRequestSchema, "client_to_proxy"),
   controlSchema("proxy_info", ProxyInfoResponseSchema, "proxy_to_client"),
-  control("agent_cli_config_update", { ...RequestIdShape, provider: z12.enum(providerValues), path: z12.string().min(1) }, "client_to_proxy"),
+  control("agent_cli_config_update", { ...RequestIdShape, provider: z13.enum(providerValues), path: z13.string().min(1) }, "client_to_proxy"),
   control("agent_cli_config_update_response", {
     ...RequestIdShape,
-    provider: z12.enum(providerValues),
+    provider: z13.enum(providerValues),
     agentCli: AgentCliStatusSchema.optional(),
     ...RequestErrorShape
   }, "proxy_to_client"),
@@ -1979,16 +1989,16 @@ var relayControlDefinitions = [
   // 非零退出。把可识别的运行时错误结构化推给 Web，避免关键错误只留在终端闪屏里。
   control("session_runtime_error", {
     sessionId: IdSchema,
-    error: z12.string(),
+    error: z13.string(),
     errorCode: ControlErrorCodeSchema,
-    activeWriterPid: z12.number().int().positive().optional()
+    activeWriterPid: z13.number().int().positive().optional()
   }, "proxy_to_client"),
   // 客户端请求会话历史消息，client -> proxy
   control("session_messages_request", {
     ...RequestIdShape,
     sessionId: IdSchema,
-    limit: z12.number().int().min(1).max(200).optional(),
-    before: z12.string().optional()
+    limit: z13.number().int().min(1).max(200).optional(),
+    before: z13.string().optional()
   }, "client_to_proxy"),
   // 客户端请求会话资源（命令列表 + 文件树），client -> proxy
   control("session_resources_request", { ...RequiredRequestIdShape, sessionId: IdSchema }, "client_to_proxy"),
@@ -1996,14 +2006,14 @@ var relayControlDefinitions = [
     ...RequiredRequestIdShape,
     ...RequestErrorShape,
     sessionId: IdSchema,
-    commands: z12.array(CommandEntrySchema),
-    groups: z12.array(FileTreeGroupSchema)
+    commands: z13.array(CommandEntrySchema),
+    groups: z13.array(FileTreeGroupSchema)
   }, "proxy_to_client"),
   // 客户端请求当前 provider 语义状态；不经 relay 缓存，由 proxy 返回当前值
   control("agent_status_request", { ...RequestIdShape, sessionId: IdSchema.optional() }, "client_to_proxy"),
   control("agent_status_response", {
     ...RequestIdShape,
-    statuses: z12.array(z12.object({ sessionId: IdSchema, payload: AgentStatusPayloadSchema }))
+    statuses: z13.array(z13.object({ sessionId: IdSchema, payload: AgentStatusPayloadSchema }))
   }, "proxy_to_client"),
   // 客户端确认已收到审批请求；proxy 只记录送达状态，不把它当成用户决策
   control("permission_request_delivered", { sessionId: IdSchema, requestId: IdSchema }, "client_to_proxy"),
@@ -2013,18 +2023,18 @@ var relayControlDefinitions = [
   control("permission_decision_result", {
     sessionId: IdSchema,
     requestId: IdSchema,
-    outcome: z12.enum(["allow", "deny"]),
-    delivered: z12.boolean(),
-    message: z12.string().optional()
+    outcome: z13.enum(["allow", "deny"]),
+    delivered: z13.boolean(),
+    message: z13.string().optional()
   }, "proxy_to_client"),
   // proxy 推送当前 pending 的工具审批列表，client 据此恢复审批卡片
   control("pending_approvals_push", {
     sessionId: IdSchema,
-    approvals: z12.array(z12.object({
+    approvals: z13.array(z13.object({
       requestId: IdSchema,
-      toolName: z12.string(),
-      input: z12.record(z12.string(), z12.unknown()),
-      options: z12.array(ApprovalOptionSchema).optional()
+      toolName: z13.string(),
+      input: z13.record(z13.string(), z13.unknown()),
+      options: z13.array(ApprovalOptionSchema).optional()
     }))
   }, "proxy_to_client"),
   // Voice Pilot speech summaries are produced by proxy-side Claude Code so it can read project context.
@@ -2032,7 +2042,7 @@ var relayControlDefinitions = [
     ...RequestIdShape,
     sessionId: IdSchema,
     messageId: IdSchema,
-    text: z12.string().min(1),
+    text: z13.string().min(1),
     reason: VoiceSummaryReasonSchema
   }, "client_to_proxy"),
   control("voice_summary_response", {
@@ -2040,27 +2050,27 @@ var relayControlDefinitions = [
     ...RequestErrorShape,
     sessionId: IdSchema,
     messageId: IdSchema,
-    success: z12.boolean(),
-    summary: z12.string().min(1).optional()
+    success: z13.boolean(),
+    summary: z13.string().min(1).optional()
   }, "proxy_to_client"),
   // 恢复会话时推送历史消息，proxy -> client
   control("session_history_messages", {
     ...RequestIdShape,
     sessionId: IdSchema,
-    before: z12.string().optional(),
-    messages: z12.array(SessionHistoryMessageSchema),
-    hasMore: z12.boolean().optional(),
-    nextBefore: z12.string().optional()
+    before: z13.string().optional(),
+    messages: z13.array(SessionHistoryMessageSchema),
+    hasMore: z13.boolean().optional(),
+    nextBefore: z13.string().optional()
   }, "proxy_to_client"),
   // proxy 重连后同步活跃 session 列表给 relay。session_sync 由 relay 自消费（更新 proxy-session
   // 关联）不转发给 client，因此**没有** direction 标注——RelayControlDirection 只描述转发流。
   control("session_sync", {
-    sessions: z12.array(createSessionIdentitySchema({
-      id: z12.string(),
-      cwd: z12.string(),
-      name: z12.string().optional(),
-      nameLocked: z12.boolean().optional(),
-      state: z12.enum(sessionStateValues)
+    sessions: z13.array(createSessionIdentitySchema({
+      id: z13.string(),
+      cwd: z13.string(),
+      name: z13.string().optional(),
+      nameLocked: z13.boolean().optional(),
+      state: z13.enum(sessionStateValues)
     }))
   }),
   // PTY 会话订阅，client -> proxy，触发 terminal serialize() 返回当前状态
@@ -2068,15 +2078,15 @@ var relayControlDefinitions = [
   // PTY 会话快照，proxy -> client，serialize() 的全量终端状态
   control("session_snapshot", {
     sessionId: IdSchema,
-    cols: z12.number().int().positive(),
-    rows: z12.number().int().positive(),
-    data: z12.string(),
-    outputSeq: z12.number().int().nonnegative(),
+    cols: z13.number().int().positive(),
+    rows: z13.number().int().positive(),
+    data: z13.string(),
+    outputSeq: z13.number().int().nonnegative(),
     requestId: IdSchema
   }, "proxy_to_client")
 ];
 var relayControlSchemas = relayControlDefinitions.map((definition) => definition.schema);
-var RelayControlSchema = z12.discriminatedUnion("type", relayControlSchemas);
+var RelayControlSchema = z13.discriminatedUnion("type", relayControlSchemas);
 var ProxyToClientRelayControlTypes = new Set(relayControlDefinitions.filter((definition) => definition.directions.has("proxy_to_client")).map((definition) => definition.type));
 function isProxyToClientRelayControlType(type) {
   return ProxyToClientRelayControlTypes.has(type);
@@ -2099,6 +2109,29 @@ var RelayCloseCode = {
   DEVICE_STREAM_BINDING_REJECTED: 4404,
   PROXY_PROTOCOL_REJECTED: 4405
 };
+var RelayProtocolRejectReason = {
+  PAGE_OUTDATED: "page_outdated",
+  SERVICE_OUTDATED: "service_outdated",
+  PROTOCOL_MISMATCH: "protocol_mismatch"
+};
+var ProxyProtocolAdmissionDirection = {
+  COMPATIBLE: "compatible",
+  PROXY_OUTDATED: "proxy_outdated",
+  RELAY_OUTDATED: "relay_outdated",
+  PROTOCOL_MISMATCH: "protocol_mismatch"
+};
+function isPositiveSafeProtocolVersion(value) {
+  return Number.isSafeInteger(value) && value > 0;
+}
+function compareProxyRelayProtocolVersions(proxyProtocolVersion, relayProtocolVersion) {
+  if (!isPositiveSafeProtocolVersion(proxyProtocolVersion) || !isPositiveSafeProtocolVersion(relayProtocolVersion)) {
+    return ProxyProtocolAdmissionDirection.PROTOCOL_MISMATCH;
+  }
+  if (proxyProtocolVersion === relayProtocolVersion) {
+    return ProxyProtocolAdmissionDirection.COMPATIBLE;
+  }
+  return proxyProtocolVersion < relayProtocolVersion ? ProxyProtocolAdmissionDirection.PROXY_OUTDATED : ProxyProtocolAdmissionDirection.RELAY_OUTDATED;
+}
 
 // ../../packages/shared/dist/constants/wire-limits.js
 var RELAY_JSON_MESSAGE_MAX_BYTES = 8 * 1024 * 1024;
@@ -2618,8 +2651,8 @@ var RelayRegistry = class {
   }
   getAllClientWs() {
     const clients = [];
-    for (const ws of this.connectedClients.keys()) {
-      if (ws.readyState === WebSocket.OPEN) {
+    for (const [ws, metadata] of this.connectedClients) {
+      if (metadata.clientId && ws.readyState === WebSocket.OPEN) {
         clients.push(ws);
       }
     }
@@ -2708,9 +2741,11 @@ function healthRouter(registry, options = {}) {
   const proxyTokenRequired = options.proxyTokenRequired ?? false;
   const clientTokenRequired = options.clientTokenRequired ?? false;
   router.get("/health", (_req, res) => {
+    res.setHeader("Cache-Control", "no-store");
     res.json({
       status: "ok",
       version: RELAY_VERSION,
+      controlProtocolVersion: RELAY_CONTROL_PROTOCOL_VERSION,
       uptime: process.uptime(),
       auth: {
         proxyTokenRequired,
@@ -2754,6 +2789,15 @@ function healthRouter(registry, options = {}) {
     res.status(401).json({ error: "invalid_proxy_token" });
     return false;
   }
+  router.get("/api/proxy-upgrade-bootstrap", (req, res) => {
+    if (!requireProxyTokenIfConfigured(req, res)) return;
+    res.setHeader("Cache-Control", "no-store");
+    res.json({
+      bootstrapVersion: PROXY_UPGRADE_BOOTSTRAP_VERSION,
+      relayVersion: RELAY_VERSION,
+      controlProtocolVersion: RELAY_CONTROL_PROTOCOL_VERSION
+    });
+  });
   router.get("/status", (_req, res) => {
     res.json({
       version: RELAY_VERSION,
@@ -3141,6 +3185,56 @@ var WebPreviewRouteRegistry = class extends PreviewRouteRegistry {
   }
 };
 
+// src/proxy-upgrade-bootstrap.ts
+import { z as z14 } from "zod";
+var UPGRADE_BOOTSTRAP_SOURCE_VERSION = "0.8.1";
+var STABLE_VERSION_RE = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/;
+var ProxyUpgradeBootstrapRequestSchema = z14.object({
+  type: z14.literal("proxy_register"),
+  proxyId: IdSchema,
+  name: z14.string().optional(),
+  proxyVersion: z14.literal(UPGRADE_BOOTSTRAP_SOURCE_VERSION)
+}).strict();
+function parseStableVersion(value) {
+  const match = STABLE_VERSION_RE.exec(value);
+  if (!match) return null;
+  const parts = [Number(match[1]), Number(match[2]), Number(match[3])];
+  return parts.every(Number.isSafeInteger) ? parts : null;
+}
+function isLowerStableVersion(source, target) {
+  const left = parseStableVersion(source);
+  const right = parseStableVersion(target);
+  if (!left || !right) return false;
+  for (let index = 0; index < left.length; index += 1) {
+    if (left[index] !== right[index]) return left[index] < right[index];
+  }
+  return false;
+}
+function parseProxyUpgradeBootstrapRequest(raw, relayVersion) {
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  const request = ProxyUpgradeBootstrapRequestSchema.safeParse(parsed);
+  if (!request.success) return null;
+  if (!isLowerStableVersion(request.data.proxyVersion, relayVersion)) return null;
+  return request.data;
+}
+function sendProxyUpgradeBootstrapResponse(ws, relayVersion) {
+  ws.send(
+    JSON.stringify({
+      type: "proxy_register_response",
+      status: "new",
+      relayVersion
+    }),
+    (error) => {
+      if (error) ws.terminate();
+    }
+  );
+}
+
 // src/handlers/proxy.ts
 var PREVIEW_EVENT_TYPES = /* @__PURE__ */ new Set([
   "preview_state_event",
@@ -3154,6 +3248,8 @@ var PREVIEW_PUSH_TYPES = /* @__PURE__ */ new Set([
   "device_preview_state_push",
   "device_preview_removed_push"
 ]);
+var DEFAULT_PROXY_ADMISSION_TIMEOUT_MS = 1e4;
+var RETRYABLE_PROXY_ADMISSION_TIMEOUT_CLOSE_CODE = 1013;
 function isPreviewEventMessage(message) {
   return PREVIEW_EVENT_TYPES.has(message.type);
 }
@@ -3234,23 +3330,60 @@ function rejectNotRegistered(ws) {
     })
   );
 }
-function closeRejectedProxyProtocol(ws) {
-  ws.close(RelayCloseCode.PROXY_PROTOCOL_REJECTED, "proxy protocol rejected");
+function closeRejectedProxyProtocol(ws, direction = ProxyProtocolAdmissionDirection.PROTOCOL_MISMATCH) {
+  if (ws.admissionPhase === "rejected") return;
+  ws.admissionPhase = "rejected";
+  ws.close(RelayCloseCode.PROXY_PROTOCOL_REJECTED, direction);
+}
+function classifyInitialProxyProtocol(raw) {
+  let value;
+  try {
+    value = JSON.parse(raw);
+  } catch {
+    return ProxyProtocolAdmissionDirection.PROTOCOL_MISMATCH;
+  }
+  if (!value || typeof value !== "object" || value.type !== "proxy_register") {
+    return ProxyProtocolAdmissionDirection.PROTOCOL_MISMATCH;
+  }
+  const direction = compareProxyRelayProtocolVersions(
+    value.protocolVersion,
+    RELAY_CONTROL_PROTOCOL_VERSION
+  );
+  return direction === ProxyProtocolAdmissionDirection.COMPATIBLE ? null : direction;
 }
 function isCurrentProxySocket(ws, registry) {
   return ws.proxyId !== void 0 && registry.getProxy(ws.proxyId) === ws;
 }
-function handleProxyConnection(ws, registry, logger, ptySnapshotRoutes, sessionHistoryRoutes, webPreviewRoutes, devicePreviewBridge, chaos, remoteFileBridge) {
+function handleProxyConnection(ws, registry, logger, ptySnapshotRoutes, sessionHistoryRoutes, webPreviewRoutes, devicePreviewBridge, chaos, remoteFileBridge, proxyAdmissionTimeoutMs = DEFAULT_PROXY_ADMISSION_TIMEOUT_MS) {
   const proxyWs = ws;
   proxyWs.isAlive = true;
+  proxyWs.admissionPhase = "awaiting";
   let registrationCompleted = false;
+  let initialFrameReceived = false;
+  const effectiveAdmissionTimeoutMs = Number.isSafeInteger(proxyAdmissionTimeoutMs) && proxyAdmissionTimeoutMs > 0 ? proxyAdmissionTimeoutMs : DEFAULT_PROXY_ADMISSION_TIMEOUT_MS;
+  let admissionTimeout = setTimeout(() => {
+    admissionTimeout = null;
+    if (proxyWs.admissionPhase !== "awaiting" || proxyWs.readyState !== WebSocket4.OPEN) return;
+    proxyWs.admissionPhase = "rejected";
+    logger.warn({ timeoutMs: effectiveAdmissionTimeoutMs }, "Proxy registration timed out");
+    proxyWs.close(RETRYABLE_PROXY_ADMISSION_TIMEOUT_CLOSE_CODE, "proxy registration timeout");
+  }, effectiveAdmissionTimeoutMs);
+  admissionTimeout.unref?.();
+  const clearAdmissionTimeout = () => {
+    if (!admissionTimeout) return;
+    clearTimeout(admissionTimeout);
+    admissionTimeout = null;
+  };
   proxyWs.on("pong", () => {
     proxyWs.isAlive = true;
   });
   proxyWs.on("message", (data, isBinary) => {
+    if (proxyWs.admissionPhase === "quarantined" || proxyWs.admissionPhase === "rejected") return;
+    const isInitialFrame = !initialFrameReceived;
+    initialFrameReceived = true;
     if (isBinary) {
       if (!proxyWs.proxyId) {
-        closeRejectedProxyProtocol(proxyWs);
+        closeRejectedProxyProtocol(proxyWs, ProxyProtocolAdmissionDirection.PROTOCOL_MISMATCH);
         return;
       }
       if (!isCurrentProxySocket(proxyWs, registry)) {
@@ -3292,10 +3425,35 @@ function handleProxyConnection(ws, registry, logger, ptySnapshotRoutes, sessionH
         { size: data.length, proxyId: proxyWs.proxyId },
         "JSON message rejected: exceeds max size"
       );
-      if (!proxyWs.proxyId) closeRejectedProxyProtocol(proxyWs);
+      if (!proxyWs.proxyId) {
+        closeRejectedProxyProtocol(proxyWs, ProxyProtocolAdmissionDirection.PROTOCOL_MISMATCH);
+      }
       return;
     }
     const raw = data.toString();
+    const upgradeBootstrap = isInitialFrame ? parseProxyUpgradeBootstrapRequest(raw, RELAY_VERSION) : null;
+    if (upgradeBootstrap) {
+      proxyWs.admissionPhase = "quarantined";
+      clearAdmissionTimeout();
+      logger.info(
+        {
+          proxyId: upgradeBootstrap.proxyId,
+          proxyVersion: upgradeBootstrap.proxyVersion,
+          relayVersion: RELAY_VERSION
+        },
+        "Proxy upgrade bootstrap sent"
+      );
+      sendProxyUpgradeBootstrapResponse(proxyWs, RELAY_VERSION);
+      return;
+    }
+    if (isInitialFrame) {
+      const rejection = classifyInitialProxyProtocol(raw);
+      if (rejection) {
+        logger.warn({ direction: rejection }, "Proxy control protocol rejected before admission");
+        closeRejectedProxyProtocol(proxyWs, rejection);
+        return;
+      }
+    }
     const result = parseMessage(raw);
     if (result.kind === "control" && result.message.type === "proxy_register") {
       if (registrationCompleted) {
@@ -3303,10 +3461,12 @@ function handleProxyConnection(ws, registry, logger, ptySnapshotRoutes, sessionH
           { proxyId: proxyWs.proxyId, requestedProxyId: result.message.proxyId },
           "Repeated Proxy registration on the same socket rejected"
         );
-        closeRejectedProxyProtocol(proxyWs);
+        closeRejectedProxyProtocol(proxyWs, ProxyProtocolAdmissionDirection.PROTOCOL_MISMATCH);
         return;
       }
       const { proxyId, name, proxyVersion } = result.message;
+      proxyWs.admissionPhase = "ready";
+      clearAdmissionTimeout();
       const status = registry.registerProxy(proxyId, proxyWs, proxyVersion, name);
       proxyWs.proxyId = proxyId;
       registrationCompleted = true;
@@ -3333,8 +3493,7 @@ function handleProxyConnection(ws, registry, logger, ptySnapshotRoutes, sessionH
       return;
     }
     if (!proxyWs.proxyId) {
-      rejectNotRegistered(proxyWs);
-      closeRejectedProxyProtocol(proxyWs);
+      closeRejectedProxyProtocol(proxyWs, ProxyProtocolAdmissionDirection.PROTOCOL_MISMATCH);
       return;
     }
     if (!isCurrentProxySocket(proxyWs, registry)) {
@@ -3634,6 +3793,7 @@ function handleProxyConnection(ws, registry, logger, ptySnapshotRoutes, sessionH
     }
   });
   proxyWs.on("close", (code, reason) => {
+    clearAdmissionTimeout();
     if (!proxyWs.proxyId) return;
     const closeMeta = { code, reason: reason.toString() || void 0 };
     const current = registry.getProxy(proxyWs.proxyId);
@@ -4398,15 +4558,45 @@ var DevicePreviewRouteRegistry = class extends PreviewRouteRegistry {
   }
 };
 
-// src/handlers/client.ts
-function isMalformedClientRegister(raw) {
+// src/client-registration-admission.ts
+function inspectClientRegistrationAdmission(raw) {
+  let value;
   try {
-    const parsed = JSON.parse(raw);
-    return parsed !== null && typeof parsed === "object" && parsed.type === "client_register";
+    value = JSON.parse(raw);
   } catch {
-    return false;
+    return { kind: "not_client_registration" };
   }
+  if (value === null || typeof value !== "object") {
+    return { kind: "not_client_registration" };
+  }
+  const candidate = value;
+  if (candidate.type !== "client_register") {
+    return { kind: "not_client_registration" };
+  }
+  const clientId = typeof candidate.clientId === "string" ? candidate.clientId : void 0;
+  if (!("protocolVersion" in candidate)) {
+    return {
+      kind: "unversioned_client_registration",
+      ...clientId !== void 0 ? { clientId } : {}
+    };
+  }
+  return {
+    kind: "versioned_client_registration",
+    ...clientId !== void 0 ? { clientId } : {},
+    protocolVersion: candidate.protocolVersion
+  };
+}
+function classifyClientRegistrationProtocol(clientVersion, relayVersion = RELAY_CONTROL_PROTOCOL_VERSION) {
+  if (typeof clientVersion !== "number" || !Number.isSafeInteger(clientVersion) || clientVersion <= 0) {
+    return RelayProtocolRejectReason.PROTOCOL_MISMATCH;
+  }
+  if (clientVersion === relayVersion) return null;
+  return clientVersion < relayVersion ? RelayProtocolRejectReason.PAGE_OUTDATED : RelayProtocolRejectReason.SERVICE_OUTDATED;
 }
+
+// src/handlers/client.ts
+var DEFAULT_CLIENT_ADMISSION_TIMEOUT_MS = 1e4;
+var RETRYABLE_CLIENT_ADMISSION_TIMEOUT_CLOSE_CODE = 1013;
 function handleClientRegister(registration, clientWs, registry, logger, webPreviewRoutes, devicePreviewBridge) {
   const { clientId } = registration;
   if (clientWs.clientId && clientWs.clientId !== clientId) {
@@ -4761,8 +4951,36 @@ function validatePreviewScope(ws, registry, requestId, scope) {
   rejectStaleBinding(ws, requestId);
   return false;
 }
-function closeRejectedClientProtocol(ws) {
-  ws.close(RelayCloseCode.CLIENT_PROTOCOL_REJECTED, "client protocol rejected");
+function closeRejectedClientProtocol(ws, reason = RelayProtocolRejectReason.PROTOCOL_MISMATCH) {
+  if (!beginClientRejection(ws)) return;
+  ws.close(RelayCloseCode.CLIENT_PROTOCOL_REJECTED, reason);
+}
+function beginClientRejection(ws) {
+  if (ws.admissionPhase === "rejected") return false;
+  ws.admissionPhase = "rejected";
+  return ws.readyState !== WebSocket7.CLOSING && ws.readyState !== WebSocket7.CLOSED;
+}
+function closeUnversionedClientProtocol(ws) {
+  if (!beginClientRejection(ws)) return;
+  ws.send(
+    JSON.stringify({
+      type: "relay_client_kicked",
+      reason: "\u9875\u9762\u7248\u672C\u5DF2\u66F4\u65B0\uFF0C\u8BF7\u5237\u65B0"
+    })
+  );
+  ws.close(RelayCloseCode.CLIENT_KICKED, "client refresh required");
+}
+function rejectVersionedClientProtocol(ws, clientProtocolVersion, reason, clientId, logger) {
+  logger.warn(
+    {
+      ...clientId !== void 0 ? { clientId } : {},
+      clientProtocolVersion,
+      relayProtocolVersion: RELAY_CONTROL_PROTOCOL_VERSION,
+      reason
+    },
+    "Client control protocol rejected at admission"
+  );
+  closeRejectedClientProtocol(ws, reason);
 }
 function rejectProxySelect(ws, requestId, proxyId) {
   ws.send(
@@ -4815,14 +5033,33 @@ function sendRemoteFileUploadUrlFailure(ws, requestId, sessionId, error, errorCo
     })
   );
 }
-function handleClientConnection(ws, registry, logger, ptySnapshotRoutes, sessionHistoryRoutes, webPreviewRoutes, devicePreviewBridge, chaos, voiceConfigStore, voiceProviders, remoteFileBridge, connectionInfo = {}) {
+function handleClientConnection(ws, registry, logger, ptySnapshotRoutes, sessionHistoryRoutes, webPreviewRoutes, devicePreviewBridge, chaos, voiceConfigStore, voiceProviders, remoteFileBridge, connectionInfo = {}, clientAdmissionTimeoutMs = DEFAULT_CLIENT_ADMISSION_TIMEOUT_MS) {
   const clientWs = ws;
   clientWs.isAlive = true;
+  clientWs.admissionPhase = "awaiting";
   registry.addClientWs(clientWs, connectionInfo);
+  const effectiveAdmissionTimeoutMs = Number.isSafeInteger(clientAdmissionTimeoutMs) && clientAdmissionTimeoutMs > 0 ? clientAdmissionTimeoutMs : DEFAULT_CLIENT_ADMISSION_TIMEOUT_MS;
+  let admissionTimeout = setTimeout(() => {
+    admissionTimeout = null;
+    if (clientWs.admissionPhase !== "awaiting" || clientWs.readyState !== WebSocket7.OPEN) return;
+    if (!beginClientRejection(clientWs)) return;
+    logger.warn(
+      { timeoutMs: effectiveAdmissionTimeoutMs, remoteAddress: connectionInfo.remoteAddress },
+      "Client registration timed out"
+    );
+    clientWs.close(RETRYABLE_CLIENT_ADMISSION_TIMEOUT_CLOSE_CODE, "client registration timeout");
+  }, effectiveAdmissionTimeoutMs);
+  admissionTimeout.unref?.();
+  const clearAdmissionTimeout = () => {
+    if (!admissionTimeout) return;
+    clearTimeout(admissionTimeout);
+    admissionTimeout = null;
+  };
   clientWs.on("pong", () => {
     clientWs.isAlive = true;
   });
   clientWs.on("message", (data, isBinary) => {
+    if (clientWs.admissionPhase === "rejected") return;
     if (isBinary) {
       if (!clientWs.clientId) closeRejectedClientProtocol(clientWs);
       return;
@@ -4836,6 +5073,32 @@ function handleClientConnection(ws, registry, logger, ptySnapshotRoutes, session
       return;
     }
     const raw = data.toString();
+    const registrationAdmission = inspectClientRegistrationAdmission(raw);
+    if (registrationAdmission.kind === "unversioned_client_registration") {
+      logger.warn(
+        {
+          ...registrationAdmission.clientId !== void 0 ? { clientId: registrationAdmission.clientId } : {}
+        },
+        "Unversioned client registration rejected"
+      );
+      closeUnversionedClientProtocol(clientWs);
+      return;
+    }
+    if (registrationAdmission.kind === "versioned_client_registration") {
+      const registrationProtocolIssue = classifyClientRegistrationProtocol(
+        registrationAdmission.protocolVersion
+      );
+      if (registrationProtocolIssue) {
+        rejectVersionedClientProtocol(
+          clientWs,
+          registrationAdmission.protocolVersion,
+          registrationProtocolIssue,
+          registrationAdmission.clientId,
+          logger
+        );
+        return;
+      }
+    }
     const result = parseMessage(raw);
     if (result.kind === "control") {
       const msg = result.message;
@@ -4852,6 +5115,8 @@ function handleClientConnection(ws, registry, logger, ptySnapshotRoutes, session
           webPreviewRoutes,
           devicePreviewBridge
         );
+        clientWs.admissionPhase = "ready";
+        clearAdmissionTimeout();
         return;
       }
       if (!clientWs.clientId) {
@@ -5369,7 +5634,13 @@ function handleClientConnection(ws, registry, logger, ptySnapshotRoutes, session
       routeClientMessage(raw, clientWs.boundProxyId, clientWs, registry, logger, chaos);
       return;
     }
-    logger.error({ error: result.error, raw: raw.slice(0, 200) }, "Invalid message from client");
+    const isRegistrationAttempt = registrationAdmission.kind !== "not_client_registration";
+    const logContext = {
+      error: result.error,
+      raw: raw.slice(0, 200),
+      ...registrationAdmission.kind !== "not_client_registration" && registrationAdmission.clientId !== void 0 ? { clientId: registrationAdmission.clientId } : {}
+    };
+    logger.error(logContext, "Invalid message from client");
     clientWs.send(
       JSON.stringify({
         type: "relay_error",
@@ -5377,11 +5648,13 @@ function handleClientConnection(ws, registry, logger, ptySnapshotRoutes, session
         message: `${result.error} | raw: ${raw.slice(0, 200)}`
       })
     );
-    if (isMalformedClientRegister(raw) || !clientWs.clientId) {
+    if (isRegistrationAttempt || !clientWs.clientId) {
       closeRejectedClientProtocol(clientWs);
     }
   });
   clientWs.on("close", (code, reason) => {
+    clearAdmissionTimeout();
+    clientWs.admissionPhase = "rejected";
     ptySnapshotRoutes.abandonSocket(clientWs);
     sessionHistoryRoutes.abandonSocket(clientWs);
     webPreviewRoutes.abandonSocket(clientWs);
@@ -8480,7 +8753,8 @@ function createRelayServer(options) {
       webPreviewRoutes,
       devicePreviewBridge,
       relayChaos,
-      remoteFileBridge
+      remoteFileBridge,
+      options.proxyAdmissionTimeoutMs
     );
   });
   devicePreviewStreamWss.on("connection", (ws) => {
@@ -8502,7 +8776,8 @@ function createRelayServer(options) {
       {
         userAgent: firstHeaderValue(request.headers["user-agent"]),
         remoteAddress: requestRemoteAddress(request)
-      }
+      },
+      options.clientAdmissionTimeoutMs
     );
   });
   voiceAsrWss.on("connection", (ws) => {
@@ -8609,4 +8884,4 @@ export {
   parseRelayChaosFromEnv,
   createRelayServer
 };
-//# sourceMappingURL=chunk-27ZHYXYL.js.map
+//# sourceMappingURL=chunk-RGMU7VLD.js.map