@leemour/max-cli 0.5.0 → 0.7.0

package/dist/spec/operations/folders.js

@@ -0,0 +1,64 @@
+import * as v from "valibot";
+import { defineOperation } from "../define.js";
+import { id } from "../scalars.js";
+const webClient = "web.max.ru chunk `_app/immutable/chunks/5oCuRT0F.js`, read 2026-09-24";
+const Folder = {
+    id: v.pipe(v.string(), v.minLength(1)),
+    title: v.string(),
+    include: v.optional(v.array(id())),
+    /** Sent back as they came: nobody has described what they hold. */
+    filters: v.array(v.unknown()),
+    options: v.array(v.unknown()),
+    favorites: v.optional(v.array(v.unknown())),
+};
+export const foldersList = defineOperation({
+    name: "folders.list",
+    constant: "FOLDERS_GET",
+    opcode: 272,
+    auth: true,
+    request: v.strictObject({ folderSync: v.number() }),
+    response: v.looseObject({
+        folders: v.optional(v.array(v.looseObject({}))),
+        foldersOrder: v.optional(v.array(v.unknown())),
+        folderSync: v.optional(v.number()),
+    }),
+    provenance: {
+        confidence: "measured",
+        sources: [
+            "measured against MAX 2026-09-24 (`pnpm probe:account`): no folder of the owner's carries `include`",
+            webClient,
+            "PyMax 53103f0 `get_folders`",
+        ],
+    },
+});
+export const foldersUpdate = defineOperation({
+    name: "folders.update",
+    constant: "FOLDERS_UPDATE",
+    opcode: 274,
+    auth: true,
+    request: v.strictObject(Folder),
+    response: v.looseObject({ folder: v.optional(v.looseObject({})), folderSync: v.optional(v.number()) }),
+    provenance: {
+        confidence: "measured",
+        sources: [
+            "measured against MAX 2026-09-24 (`pnpm probe:account`): created, renamed and deleted a folder; a 21-character title came back `folder.validation.title.too-long`, 15 was taken",
+            webClient,
+            "PyMax 53103f0 `create_folder`, `update_folder`",
+        ],
+        notes: "Creates a folder under an id it has not seen, replaces one it has. **The whole folder**: the web client sends every field back, and PyMax's `include or []` would empty a folder whose title changed.",
+    },
+});
+export const foldersDelete = defineOperation({
+    name: "folders.delete",
+    constant: "FOLDERS_DELETE",
+    opcode: 276,
+    auth: true,
+    request: v.strictObject({ folderIds: v.array(v.pipe(v.string(), v.minLength(1))) }),
+    response: v.looseObject({}),
+    provenance: {
+        confidence: "measured",
+        sources: ["measured against MAX 2026-09-24 (`pnpm probe:account`)", webClient, "PyMax 53103f0 `delete_folder`"],
+        notes: "Deletes the folder, not the chats in it.",
+    },
+});
+//# sourceMappingURL=folders.js.map

package/dist/spec/operations/folders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"folders.js","sourceRoot":"","sources":["../../../src/spec/operations/folders.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,EAAE,EAAE,MAAM,eAAe,CAAA;AAElC,MAAM,SAAS,GAAG,uEAAuE,CAAA;AAEzF,MAAM,MAAM,GAAG;IACb,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAClC,mEAAmE;IACnE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7B,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;CAC5C,CAAA;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,eAAe,CAAC;IACzC,IAAI,EAAE,cAAc;IACpB,QAAQ,EAAE,aAAa;IACvB,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACnD,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC;QACtB,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/C,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9C,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACnC,CAAC;IACF,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE;YACP,oGAAoG;YACpG,SAAS;YACT,6BAA6B;SAC9B;KACF;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;IAC3C,IAAI,EAAE,gBAAgB;IACtB,QAAQ,EAAE,gBAAgB;IAC1B,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;IAC/B,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IACtG,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE;YACP,gLAAgL;YAChL,SAAS;YACT,gDAAgD;SACjD;QACD,KAAK,EACH,uMAAuM;KAC1M;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;IAC3C,IAAI,EAAE,gBAAgB;IACtB,QAAQ,EAAE,gBAAgB;IAC1B,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;IAC3B,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,CAAC,wDAAwD,EAAE,SAAS,EAAE,+BAA+B,CAAC;QAC/G,KAAK,EAAE,0CAA0C;KAClD;CACF,CAAC,CAAA"}

package/dist/spec/operations/login.d.ts

@@ -0,0 +1,64 @@
+import * as v from "valibot";
+export declare const loginQrRequest: import("../define.js").Operation<v.StrictObjectSchema<{}, undefined>, v.LooseObjectSchema<{
+    readonly qrLink: v.StringSchema<undefined>;
+    readonly trackId: v.StringSchema<undefined>;
+    readonly pollingInterval: v.NumberSchema<undefined>;
+    readonly expiresAt: v.NumberSchema<undefined>;
+}, undefined>>;
+export declare const loginQrStatus: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly trackId: v.StringSchema<undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly status: v.LooseObjectSchema<{
+        readonly expiresAt: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+        readonly loginAvailable: v.OptionalSchema<v.BooleanSchema<undefined>, undefined>;
+    }, undefined>;
+}, undefined>>;
+export declare const loginByQr: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly trackId: v.StringSchema<undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    tokenAttrs: v.OptionalSchema<v.LooseObjectSchema<{
+        readonly LOGIN: v.OptionalSchema<v.LooseObjectSchema<{
+            readonly token: v.StringSchema<undefined>;
+        }, undefined>, undefined>;
+    }, undefined>, undefined>;
+    passwordChallenge: v.OptionalSchema<v.LooseObjectSchema<{
+        readonly trackId: v.StringSchema<undefined>;
+        readonly hint: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    }, undefined>, undefined>;
+}, undefined>>;
+export declare const loginSmsRequest: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly phone: v.StringSchema<undefined>;
+    readonly type: v.LiteralSchema<"START_AUTH", undefined>;
+    readonly language: v.StringSchema<undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly token: v.StringSchema<undefined>;
+    readonly codeLength: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+}, undefined>>;
+export declare const loginSmsCode: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly token: v.StringSchema<undefined>;
+    readonly verifyCode: v.StringSchema<undefined>;
+    readonly authTokenType: v.LiteralSchema<"CHECK_CODE", undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    tokenAttrs: v.OptionalSchema<v.LooseObjectSchema<{
+        readonly LOGIN: v.OptionalSchema<v.LooseObjectSchema<{
+            readonly token: v.StringSchema<undefined>;
+        }, undefined>, undefined>;
+    }, undefined>, undefined>;
+    passwordChallenge: v.OptionalSchema<v.LooseObjectSchema<{
+        readonly trackId: v.StringSchema<undefined>;
+        readonly hint: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    }, undefined>, undefined>;
+}, undefined>>;
+export declare const loginPassword: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly trackId: v.StringSchema<undefined>;
+    readonly password: v.StringSchema<undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly tokenAttrs: v.OptionalSchema<v.LooseObjectSchema<{
+        readonly LOGIN: v.OptionalSchema<v.LooseObjectSchema<{
+            readonly token: v.StringSchema<undefined>;
+        }, undefined>, undefined>;
+    }, undefined>, undefined>;
+    readonly error: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+}, undefined>>;
+export declare const qrApprove: import("../define.js").Reservation;
+//# sourceMappingURL=login.d.ts.map

package/dist/spec/operations/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../src/spec/operations/login.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAe5B,eAAO,MAAM,cAAc;;;;;cAgBzB,CAAA;AAEF,eAAO,MAAM,aAAa;;;;;;;cAexB,CAAA;AAEF,eAAO,MAAM,SAAS;;;;;;;;;;;;cAWpB,CAAA;AAEF,eAAO,MAAM,eAAe;;;;;;;cAa1B,CAAA;AAEF,eAAO,MAAM,YAAY;;;;;;;;;;;;;;cAQvB,CAAA;AAEF,eAAO,MAAM,aAAa;;;;;;;;;;cAYxB,CAAA;AAEF,eAAO,MAAM,SAAS,oCAOpB,CAAA"}

package/dist/spec/operations/login.js

@@ -0,0 +1,99 @@
+import * as v from "valibot";
+import { defineOperation, reserveOpcode } from "../define.js";
+/**
+ * How MAX hands over a token once a person has proved who they are — by QR, SMS code or password.
+ * ⚠ **It is a credential**: nothing prints it, logs it or puts it in a fixture.
+ */
+const Issued = {
+    tokenAttrs: v.optional(v.looseObject({ LOGIN: v.optional(v.looseObject({ token: v.string() })) })),
+    passwordChallenge: v.optional(v.looseObject({ trackId: v.string(), hint: v.optional(v.string()) })),
+};
+const PYMAX = "PyMax 2.4.1 src/pymax/api/auth/service.py, GitHub 53103f0";
+const DOCS = "max-api-docs/protocol/auth.md (dac4b19)";
+export const loginQrRequest = defineOperation({
+    name: "login.qrRequest",
+    constant: "GET_QR",
+    opcode: 288,
+    auth: false,
+    request: v.strictObject({}),
+    response: v.looseObject({
+        qrLink: v.string(),
+        trackId: v.string(),
+        pollingInterval: v.number(),
+        expiresAt: v.number(),
+    }),
+    provenance: {
+        confidence: "measured",
+        sources: ["measured against MAX 2026-09-24: `session start qr` logged in", PYMAX, DOCS],
+    },
+});
+export const loginQrStatus = defineOperation({
+    name: "login.qrStatus",
+    constant: "GET_QR_STATUS",
+    opcode: 289,
+    auth: false,
+    request: v.strictObject({ trackId: v.string() }),
+    response: v.looseObject({
+        status: v.looseObject({ expiresAt: v.optional(v.number()), loginAvailable: v.optional(v.boolean()) }),
+    }),
+    provenance: {
+        confidence: "measured",
+        sources: ["measured against MAX 2026-09-24: `session start qr` logged in", PYMAX, DOCS],
+        notes: "`loginAvailable` is in PyMax only. The protocol notes say the token arrives as a push of opcode 18 instead.",
+    },
+});
+export const loginByQr = defineOperation({
+    name: "login.byQr",
+    constant: "LOGIN_BY_QR",
+    opcode: 291,
+    auth: false,
+    request: v.strictObject({ trackId: v.string() }),
+    response: v.looseObject(Issued),
+    provenance: {
+        confidence: "measured",
+        sources: ["measured against MAX 2026-09-24: `session start qr` logged in", PYMAX],
+    },
+});
+export const loginSmsRequest = defineOperation({
+    name: "login.smsRequest",
+    constant: "AUTH_REQUEST",
+    opcode: 17,
+    auth: false,
+    request: v.strictObject({ phone: v.string(), type: v.literal("START_AUTH"), language: v.string() }),
+    response: v.looseObject({ token: v.string(), codeLength: v.optional(v.number()) }),
+    provenance: {
+        confidence: "confirmed",
+        sources: [PYMAX, DOCS],
+        notes: "Measured 2026-09-24: MAX refused the first request with a captcha demand, which only the web page can solve. So `session start sms` opens web.max.ru instead of sending this; nothing sends it.",
+    },
+});
+export const loginSmsCode = defineOperation({
+    name: "login.smsCode",
+    constant: "AUTH",
+    opcode: 18,
+    auth: false,
+    request: v.strictObject({ token: v.string(), verifyCode: v.string(), authTokenType: v.literal("CHECK_CODE") }),
+    response: v.looseObject(Issued),
+    provenance: { confidence: "confirmed", sources: [PYMAX, DOCS] },
+});
+export const loginPassword = defineOperation({
+    name: "login.password",
+    constant: "AUTH_LOGIN_CHECK_PASSWORD",
+    opcode: 115,
+    auth: false,
+    request: v.strictObject({ trackId: v.string(), password: v.string() }),
+    response: v.looseObject({ tokenAttrs: Issued.tokenAttrs, error: v.optional(v.string()) }),
+    provenance: {
+        confidence: "measured",
+        sources: ["measured against MAX 2026-09-24: `session start qr` on an account with a cloud password", PYMAX],
+        notes: "A wrong password is refused as `password2fa.wrong`, and the same `trackId` takes another attempt.",
+    },
+});
+export const qrApprove = reserveOpcode({
+    name: "login.qrApprove",
+    constant: "AUTH_QR_APPROVE",
+    opcode: 290,
+    reason: "The phone's side of a QR login: it lets whoever showed the code into the owner's account. A CLI logging itself in never approves anybody.",
+    provenance: { confidence: "observed", sources: [PYMAX] },
+});
+//# sourceMappingURL=login.js.map

package/dist/spec/operations/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../../src/spec/operations/login.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAE7D;;;GAGG;AACH,MAAM,MAAM,GAAG;IACb,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAClG,iBAAiB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;CACpG,CAAA;AAED,MAAM,KAAK,GAAG,2DAA2D,CAAA;AACzE,MAAM,IAAI,GAAG,yCAAyC,CAAA;AAEtD,MAAM,CAAC,MAAM,cAAc,GAAG,eAAe,CAAC;IAC5C,IAAI,EAAE,iBAAiB;IACvB,QAAQ,EAAE,QAAQ;IAClB,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC;QACtB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;QAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;KACtB,CAAC;IACF,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,CAAC,+DAA+D,EAAE,KAAK,EAAE,IAAI,CAAC;KACxF;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;IAC3C,IAAI,EAAE,gBAAgB;IACtB,QAAQ,EAAE,eAAe;IACzB,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAChD,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC;QACtB,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;KACtG,CAAC;IACF,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,CAAC,+DAA+D,EAAE,KAAK,EAAE,IAAI,CAAC;QACvF,KAAK,EACH,6GAA6G;KAChH;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,eAAe,CAAC;IACvC,IAAI,EAAE,YAAY;IAClB,QAAQ,EAAE,aAAa;IACvB,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAChD,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC;IAC/B,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,CAAC,+DAA+D,EAAE,KAAK,CAAC;KAClF;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAC;IAC7C,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,cAAc;IACxB,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACnG,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IAClF,UAAU,EAAE;QACV,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC;QACtB,KAAK,EACH,iMAAiM;KACpM;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,eAAe,CAAC;IAC1C,IAAI,EAAE,eAAe;IACrB,QAAQ,EAAE,MAAM;IAChB,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;IAC9G,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC;IAC/B,UAAU,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE;CAChE,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;IAC3C,IAAI,EAAE,gBAAgB;IACtB,QAAQ,EAAE,2BAA2B;IACrC,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACtE,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IACzF,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,CAAC,yFAAyF,EAAE,KAAK,CAAC;QAC3G,KAAK,EAAE,mGAAmG;KAC3G;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,aAAa,CAAC;IACrC,IAAI,EAAE,iBAAiB;IACvB,QAAQ,EAAE,iBAAiB;IAC3B,MAAM,EAAE,GAAG;IACX,MAAM,EACJ,2IAA2I;IAC7I,UAAU,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE;CACzD,CAAC,CAAA"}

package/dist/spec/operations/messages.d.ts

@@ -1,19 +1,83 @@
 import * as v from "valibot";
-export declare const messagesSend: import("../define.js").Operation<v.StrictObjectSchema<{
+export declare const messagesSend: import("../define.js").Operation<v.UnionSchema<[v.StrictObjectSchema<{
     readonly chatId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
     readonly message: v.StrictObjectSchema<{
-        readonly text: v.StringSchema<undefined>;
+        /** Left out on a forward, as the web client does: the forwarded message is the content. */
+        readonly text: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
         /**
          * The client id MAX deduplicates by — measured, and it is what makes one retry safe. It must
          * never be regenerated on a retry: a fresh one means a second message in somebody's chat.
          */
         readonly cid: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>]>;
-        readonly elements: v.ArraySchema<v.UnknownSchema, undefined>;
+        /** Markup in UTF-16 positions. STRONG, EMPHASIZED, STRIKETHROUGH, MONOSPACED read back from MAX 2026-09-24. */
+        readonly elements: v.OptionalSchema<v.ArraySchema<v.StrictObjectSchema<{
+            readonly type: v.StringSchema<undefined>;
+            readonly from: v.NumberSchema<undefined>;
+            readonly length: v.NumberSchema<undefined>;
+        }, undefined>, undefined>, undefined>;
         readonly attaches: v.ArraySchema<v.UnknownSchema, undefined>;
+        /** Read back as `{type, chatId, message}` — the quoted message whole (measured 2026-09-23). */
+        readonly link: v.OptionalSchema<v.VariantSchema<"type", [v.StrictObjectSchema<{
+            readonly type: v.LiteralSchema<"REPLY", undefined>;
+            readonly messageId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+        }, undefined>, v.StrictObjectSchema<{
+            readonly type: v.LiteralSchema<"FORWARD", undefined>;
+            readonly messageId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+            readonly chatId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+        }, undefined>], undefined>, undefined>;
     }, undefined>;
     readonly notify: v.BooleanSchema<undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly message: v.StrictObjectSchema<{
+        readonly cid: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>]>;
+        readonly attaches: v.TupleSchema<[v.StrictObjectSchema<{
+            readonly _type: v.LiteralSchema<"CONTROL", undefined>;
+            readonly event: v.LiteralSchema<"new", undefined>;
+            readonly chatType: v.LiteralSchema<"CHAT", undefined>;
+            readonly title: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+            readonly userIds: v.ArraySchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>, undefined>;
+        }, undefined>], undefined>;
+    }, undefined>;
+    readonly notify: v.BooleanSchema<undefined>;
+}, undefined>], undefined>, v.LooseObjectSchema<{
+    readonly message: v.OptionalSchema<v.LooseObjectSchema<{}, undefined>, undefined>;
+    readonly chat: v.OptionalSchema<v.LooseObjectSchema<{}, undefined>, undefined>;
+}, undefined>>;
+export declare const messagesEdit: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly chatId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    readonly messageId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    readonly text: v.StringSchema<undefined>;
+    readonly elements: v.ArraySchema<v.StrictObjectSchema<{
+        readonly type: v.StringSchema<undefined>;
+        readonly from: v.NumberSchema<undefined>;
+        readonly length: v.NumberSchema<undefined>;
+    }, undefined>, undefined>;
+    /** `attachments`, not `attaches` as in MSG_SEND — every source spells them differently. */
+    readonly attachments: v.ArraySchema<v.UnknownSchema, undefined>;
 }, undefined>, v.LooseObjectSchema<{
     readonly message: v.OptionalSchema<v.LooseObjectSchema<{}, undefined>, undefined>;
 }, undefined>>;
+export declare const messagesReactions: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly chatId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    readonly messageIds: v.ArraySchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>, undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly messagesReactions: v.OptionalSchema<v.LooseObjectSchema<{}, undefined>, undefined>;
+}, undefined>>;
+export declare const messagesReact: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly chatId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    readonly messageId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    readonly reaction: v.StrictObjectSchema<{
+        readonly reactionType: v.LiteralSchema<"EMOJI", undefined>;
+        readonly id: v.StringSchema<undefined>;
+    }, undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly reactionInfo: v.OptionalSchema<v.LooseObjectSchema<{}, undefined>, undefined>;
+}, undefined>>;
+export declare const messagesUnreact: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly chatId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    readonly messageId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly reactionInfo: v.OptionalSchema<v.LooseObjectSchema<{}, undefined>, undefined>;
+}, undefined>>;
 export declare const messageDelete: import("../define.js").Reservation;
 //# sourceMappingURL=messages.d.ts.map

package/dist/spec/operations/messages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../../src/spec/operations/messages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAI5B,eAAO,MAAM,YAAY;;;;QASnB;;;WAGG;;;;;;;;cAaP,CAAA;AAEF,eAAO,MAAM,aAAa,oCAOxB,CAAA"}
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../../src/spec/operations/messages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAI5B,eAAO,MAAM,YAAY;;;QASjB,2FAA2F;;QAE3F;;;WAGG;;QAEH,+GAA+G;;;;;;;QAG/G,+FAA+F;;;;;;;;;;;;;;;;;;;;;;;;;;cA6CrG,CAAA;AAEF,eAAO,MAAM,YAAY;;;;;;;;;IAUrB,2FAA2F;;;;cAgB7F,CAAA;AAEF,eAAO,MAAM,iBAAiB;;;;;cAiB5B,CAAA;AAEF,eAAO,MAAM,aAAa;;;;;;;;;cAqBxB,CAAA;AAEF,eAAO,MAAM,eAAe;;;;;cAY1B,CAAA;AAEF,eAAO,MAAM,aAAa,oCAOxB,CAAA"}

package/dist/spec/operations/messages.js

@@ -6,25 +6,138 @@ export const messagesSend = defineOperation({
     constant: "MSG_SEND",
     opcode: 64,
     auth: true,
+    request: v.union([
+        v.strictObject({
+            chatId: id(),
+            message: v.strictObject({
+                /** Left out on a forward, as the web client does: the forwarded message is the content. */
+                text: v.optional(v.string()),
+                /**
+                 * The client id MAX deduplicates by — measured, and it is what makes one retry safe. It must
+                 * never be regenerated on a retry: a fresh one means a second message in somebody's chat.
+                 */
+                cid: v.pipe(v.number(), v.integer()),
+                /** Markup in UTF-16 positions. STRONG, EMPHASIZED, STRIKETHROUGH, MONOSPACED read back from MAX 2026-09-24. */
+                elements: v.optional(v.array(v.strictObject({ type: v.string(), from: v.number(), length: v.number() }))),
+                attaches: v.array(v.unknown()),
+                /** Read back as `{type, chatId, message}` — the quoted message whole (measured 2026-09-23). */
+                link: v.optional(v.variant("type", [
+                    v.strictObject({ type: v.literal("REPLY"), messageId: id() }),
+                    /** `chatId` is the chat the message is forwarded **from** (web.max.ru, PyMax). */
+                    v.strictObject({ type: v.literal("FORWARD"), messageId: id(), chatId: id() }),
+                ])),
+            }),
+            notify: v.boolean(),
+        }),
+        /**
+         * Creating a group is a message too: a CONTROL attachment with no chat to send it to. Measured
+         * 2026-09-24 with nobody invited (`pnpm probe:groups`); the answer adds `chat` and `chatId`.
+         */
+        v.strictObject({
+            message: v.strictObject({
+                cid: v.pipe(v.number(), v.integer()),
+                attaches: v.tuple([
+                    v.strictObject({
+                        _type: v.literal("CONTROL"),
+                        event: v.literal("new"),
+                        chatType: v.literal("CHAT"),
+                        title: v.pipe(v.string(), v.minLength(1)),
+                        userIds: v.array(id()),
+                    }),
+                ]),
+            }),
+            notify: v.boolean(),
+        }),
+    ]),
+    response: v.looseObject({ message: v.optional(v.looseObject({})), chat: v.optional(v.looseObject({})) }),
+    provenance: {
+        confidence: "measured",
+        sources: [
+            "measured against MAX 2026-09-19, including deduplication by `cid` across two connections",
+            "`link` and `elements` measured 2026-09-23 in Saved messages (`pnpm probe:reply`); shapes from tsmax and PyMax",
+            "the FORWARD link: web.max.ru `_app/immutable/chunks/5oCuRT0F.js` (2026-09-24), PyMax `api/messages/payloads.py:56-73`",
+            "a forward with no `text` and no `elements` measured 2026-09-24 in Saved messages (`pnpm probe:edit-pin-forward`)",
+            "group creation measured 2026-09-24 (`pnpm probe:groups`); shape from PyMax create_group",
+        ],
+        notes: "How long MAX remembers a `cid` is still unmeasured (`PROTO-2`); the two probes were seconds apart. " +
+            "The forward was measured from chat 0 to chat 0, so that `link.chatId` is the source rests on the two clients.",
+    },
+});
+export const messagesEdit = defineOperation({
+    name: "messages.edit",
+    constant: "MSG_EDIT",
+    opcode: 67,
+    auth: true,
     request: v.strictObject({
         chatId: id(),
-        message: v.strictObject({
-            text: v.string(),
-            /**
-             * The client id MAX deduplicates by — measured, and it is what makes one retry safe. It must
-             * never be regenerated on a retry: a fresh one means a second message in somebody's chat.
-             */
-            cid: v.pipe(v.number(), v.integer()),
-            elements: v.array(v.unknown()),
-            attaches: v.array(v.unknown()),
-        }),
-        notify: v.boolean(),
+        messageId: id(),
+        text: v.string(),
+        elements: v.array(v.strictObject({ type: v.string(), from: v.number(), length: v.number() })),
+        /** `attachments`, not `attaches` as in MSG_SEND — every source spells them differently. */
+        attachments: v.array(v.unknown()),
     }),
     response: v.looseObject({ message: v.optional(v.looseObject({})) }),
     provenance: {
         confidence: "measured",
-        sources: ["measured against MAX 2026-09-19, including deduplication by `cid` across two connections"],
-        notes: "How long MAX remembers a `cid` is still unmeasured (`PROTO-2`); the two probes were seconds apart.",
+        sources: [
+            "measured against MAX 2026-09-24 in Saved messages (`pnpm probe:edit-pin-forward`)",
+            "web.max.ru `_app/immutable/chunks/5oCuRT0F.js` (2026-09-24)",
+            "PyMax `api/messages/payloads.py:21-28` (53103f0)",
+        ],
+        notes: 'Answers `{message}` with `status: "EDITED"`. `attachments: []` removes a photo; the ones history gives, sent back ' +
+            "as they are, keep it. LOGIN's `config.server.edit-timeout` was 604800 s. The web client edits only your own " +
+            "messages, and never a forward.",
+    },
+});
+export const messagesReactions = defineOperation({
+    name: "messages.reactions",
+    constant: "MSG_GET_REACTIONS",
+    opcode: 180,
+    auth: true,
+    request: v.strictObject({ chatId: id(), messageIds: v.array(id()) }),
+    response: v.looseObject({ messagesReactions: v.optional(v.looseObject({})) }),
+    provenance: {
+        confidence: "measured",
+        sources: [
+            "measured against MAX 2026-09-24 in Saved messages (`pnpm probe:message-shapes`)",
+            "tsmax getReactions",
+            "PyMax get_reactions",
+        ],
+        notes: "Answers `{messagesReactions: {<message id>: {counters: [{count, reaction}], yourReaction, totalCount}}}`. History carries no reactions (measured 2026-09-23), so this is the only way to read them.",
+    },
+});
+export const messagesReact = defineOperation({
+    name: "messages.react",
+    constant: "MSG_REACTION",
+    opcode: 178,
+    auth: true,
+    request: v.strictObject({
+        chatId: id(),
+        messageId: id(),
+        reaction: v.strictObject({ reactionType: v.literal("EMOJI"), id: v.string() }),
+    }),
+    response: v.looseObject({ reactionInfo: v.optional(v.looseObject({})) }),
+    provenance: {
+        confidence: "measured",
+        sources: [
+            "measured against MAX 2026-09-23 in Saved messages (`pnpm probe:reply`)",
+            "tsmax addReaction",
+            "PyMax add_reaction",
+        ],
+        notes: "Answers `{reactionInfo: {counters: [{count, reaction}], yourReaction, totalCount}}`. Allowed by the owner (`NEED-141`).",
+    },
+});
+export const messagesUnreact = defineOperation({
+    name: "messages.unreact",
+    constant: "MSG_CANCEL_REACTION",
+    opcode: 179,
+    auth: true,
+    request: v.strictObject({ chatId: id(), messageId: id() }),
+    response: v.looseObject({ reactionInfo: v.optional(v.looseObject({})) }),
+    provenance: {
+        confidence: "measured",
+        sources: ["measured against MAX 2026-09-24 in Saved messages", "tsmax removeReaction", "PyMax remove_reaction"],
+        notes: "Answers the reactions left, `{reactionInfo: {}}` when none. A second call is answered the same.",
     },
 });
 export const messageDelete = reserveOpcode({

package/dist/spec/operations/messages.js.map

@@ -1 +1 @@
-{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../../src/spec/operations/messages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC7D,OAAO,EAAE,EAAE,EAAE,MAAM,eAAe,CAAA;AAElC,MAAM,CAAC,MAAM,YAAY,GAAG,eAAe,CAAC;IAC1C,IAAI,EAAE,eAAe;IACrB,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC;QACtB,MAAM,EAAE,EAAE,EAAE;QACZ,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC;YACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB;;;eAGG;YACH,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YACpC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YAC9B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/B,CAAC;QACF,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;KACpB,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACnE,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,CAAC,0FAA0F,CAAC;QACrG,KAAK,EAAE,oGAAoG;KAC5G;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAC;IACzC,IAAI,EAAE,iBAAiB;IACvB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,EAAE;IACV,MAAM,EACJ,wJAAwJ;IAC1J,UAAU,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE;CAC3D,CAAC,CAAA"}
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../../src/spec/operations/messages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC7D,OAAO,EAAE,EAAE,EAAE,MAAM,eAAe,CAAA;AAElC,MAAM,CAAC,MAAM,YAAY,GAAG,eAAe,CAAC;IAC1C,IAAI,EAAE,eAAe;IACrB,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC;QACf,CAAC,CAAC,YAAY,CAAC;YACb,MAAM,EAAE,EAAE,EAAE;YACZ,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC;gBACtB,2FAA2F;gBAC3F,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBAC5B;;;mBAGG;gBACH,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;gBACpC,+GAA+G;gBAC/G,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;gBACzG,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;gBAC9B,+FAA+F;gBAC/F,IAAI,EAAE,CAAC,CAAC,QAAQ,CACd,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE;oBAChB,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC;oBAC7D,kFAAkF;oBAClF,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;iBAC9E,CAAC,CACH;aACF,CAAC;YACF,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;SACpB,CAAC;QACF;;;WAGG;QACH,CAAC,CAAC,YAAY,CAAC;YACb,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC;gBACtB,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;gBACpC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC;oBAChB,CAAC,CAAC,YAAY,CAAC;wBACb,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;wBAC3B,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;wBACvB,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;wBAC3B,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;wBACzC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;qBACvB,CAAC;iBACH,CAAC;aACH,CAAC;YACF,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;SACpB,CAAC;KACH,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACxG,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE;YACP,0FAA0F;YAC1F,+GAA+G;YAC/G,uHAAuH;YACvH,kHAAkH;YAClH,yFAAyF;SAC1F;QACD,KAAK,EACH,qGAAqG;YACrG,+GAA+G;KAClH;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,eAAe,CAAC;IAC1C,IAAI,EAAE,eAAe;IACrB,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC;QACtB,MAAM,EAAE,EAAE,EAAE;QACZ,SAAS,EAAE,EAAE,EAAE;QACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7F,2FAA2F;QAC3F,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;KAClC,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACnE,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE;YACP,mFAAmF;YACnF,6DAA6D;YAC7D,kDAAkD;SACnD;QACD,KAAK,EACH,oHAAoH;YACpH,8GAA8G;YAC9G,gCAAgC;KACnC;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,CAAC;IAC/C,IAAI,EAAE,oBAAoB;IAC1B,QAAQ,EAAE,mBAAmB;IAC7B,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACpE,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC7E,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE;YACP,iFAAiF;YACjF,oBAAoB;YACpB,qBAAqB;SACtB;QACD,KAAK,EACH,qMAAqM;KACxM;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;IAC3C,IAAI,EAAE,gBAAgB;IACtB,QAAQ,EAAE,cAAc;IACxB,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC;QACtB,MAAM,EAAE,EAAE,EAAE;QACZ,SAAS,EAAE,EAAE,EAAE;QACf,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;KAC/E,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACxE,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE;YACP,wEAAwE;YACxE,mBAAmB;YACnB,oBAAoB;SACrB;QACD,KAAK,EACH,yHAAyH;KAC5H;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAC;IAC7C,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,qBAAqB;IAC/B,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC;IAC1D,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACxE,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,CAAC,mDAAmD,EAAE,sBAAsB,EAAE,uBAAuB,CAAC;QAC/G,KAAK,EAAE,iGAAiG;KACzG;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAC;IACzC,IAAI,EAAE,iBAAiB;IACvB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,EAAE;IACV,MAAM,EACJ,wJAAwJ;IAC1J,UAAU,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE;CAC3D,CAAC,CAAA"}

package/dist/spec/operations/session.d.ts

@@ -1,4 +1,11 @@
 import * as v from "valibot";
+/**
+ * **The keep-alive, which only `max serve` sends** — a one-shot command is gone long before it
+ * would matter. `interactive` is whether the tab is visible; ours is never, as LOGIN's is.
+ */
+export declare const sessionPing: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly interactive: v.BooleanSchema<undefined>;
+}, undefined>, v.LooseObjectSchema<{}, undefined>>;
 export declare const sessionInit: import("../define.js").Operation<v.StrictObjectSchema<{
     readonly userAgent: v.StrictObjectSchema<{
         readonly deviceType: v.LiteralSchema<"WEB", undefined>;

package/dist/spec/operations/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../src/spec/operations/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAsB5B,eAAO,MAAM,WAAW;;;;;;;;;;;;;;kDAYtB,CAAA;AAEF,eAAO,MAAM,YAAY;;IAOrB;;;;OAIG;;;IAKH;;;;;;;;;;;OAWG;;;;;;;;;IAUH;;;;;;;;;;;;;;OAcG;;IAEH;;;;;;;;;;;;;;OAcG;;;;;;;cAkBL,CAAA;AAEF,eAAO,MAAM,MAAM,oCAOjB,CAAA"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../src/spec/operations/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAsB5B;;;GAGG;AACH,eAAO,MAAM,WAAW;;kDAYtB,CAAA;AAEF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;kDAYtB,CAAA;AAEF,eAAO,MAAM,YAAY;;IAOrB;;;;OAIG;;;IAKH;;;;;;;;;;;OAWG;;;;;;;;;IAUH;;;;;;;;;;;;;;OAcG;;IAEH;;;;;;;;;;;;;;OAcG;;;;;;;cAkBL,CAAA;AAEF,eAAO,MAAM,MAAM,oCAOjB,CAAA"}

package/dist/spec/operations/session.js

@@ -18,6 +18,23 @@ const WebUserAgent = v.strictObject({
     screen: v.string(),
     timezone: v.string(),
 });
+/**
+ * **The keep-alive, which only `max serve` sends** — a one-shot command is gone long before it
+ * would matter. `interactive` is whether the tab is visible; ours is never, as LOGIN's is.
+ */
+export const sessionPing = defineOperation({
+    name: "session.ping",
+    constant: "PING",
+    opcode: 1,
+    auth: true,
+    request: v.strictObject({ interactive: v.boolean() }),
+    response: v.looseObject({}),
+    provenance: {
+        confidence: "confirmed",
+        sources: ["web.max.ru bundle read 2026-09-24: `cmd(1, {interactive})` every 30 s", "PyMax Opcode.PING = 1"],
+        notes: "MAX pings too; `Connection` answers those itself when it is live.",
+    },
+});
 export const sessionInit = defineOperation({
     name: "session.init",
     constant: "SESSION_INIT",

package/dist/spec/operations/session.js.map

@@ -1 +1 @@
-{"version":3,"file":"session.js","sourceRoot":"","sources":["../../../src/spec/operations/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAE7D;;;;;GAKG;AACH,MAAM,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;IAClC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5B,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,eAAe,CAAC;IACzC,IAAI,EAAE,cAAc;IACpB,QAAQ,EAAE,cAAc;IACxB,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC1E,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;IAC3B,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,CAAC,iCAAiC,EAAE,+BAA+B,EAAE,sBAAsB,CAAC;QACrG,KAAK,EAAE,2DAA2D;KACnE;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,eAAe,CAAC;IAC1C,IAAI,EAAE,eAAe;IACrB,QAAQ,EAAE,OAAO;IACjB,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC;QACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB;;;;WAIG;QACH,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7B,2FAA2F;QAC3F,gFAAgF;QAChF,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3E;;;;;;;;;;;WAWG;QACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;QACxB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;QACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;KACvB,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC;QACtB,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACtC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7C,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QAChD;;;;;;;;;;;;;;WAcG;QACH,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACjC;;;;;;;;;;;;;;WAcG;QACH,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5B,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAC/B,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;KAC1C,CAAC;IACF,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE;YACP,iCAAiC;YACjC,2DAA2D;YAC3D,0FAA0F;SAC3F;QACD,KAAK,EACH,uIAAuI;KAC1I;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,MAAM,GAAG,aAAa,CAAC;IAClC,IAAI,EAAE,gBAAgB;IACtB,QAAQ,EAAE,QAAQ;IAClB,MAAM,EAAE,EAAE;IACV,MAAM,EACJ,sMAAsM;IACxM,UAAU,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,+BAA+B,CAAC,EAAE;CACnF,CAAC,CAAA"}
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../../src/spec/operations/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAE7D;;;;;GAKG;AACH,MAAM,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;IAClC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5B,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,eAAe,CAAC;IACzC,IAAI,EAAE,cAAc;IACpB,QAAQ,EAAE,MAAM;IAChB,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;IACrD,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;IAC3B,UAAU,EAAE;QACV,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE,CAAC,uEAAuE,EAAE,uBAAuB,CAAC;QAC3G,KAAK,EAAE,mEAAmE;KAC3E;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,eAAe,CAAC;IACzC,IAAI,EAAE,cAAc;IACpB,QAAQ,EAAE,cAAc;IACxB,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC1E,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;IAC3B,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,CAAC,iCAAiC,EAAE,+BAA+B,EAAE,sBAAsB,CAAC;QACrG,KAAK,EAAE,2DAA2D;KACnE;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,eAAe,CAAC;IAC1C,IAAI,EAAE,eAAe;IACrB,QAAQ,EAAE,OAAO;IACjB,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC;QACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB;;;;WAIG;QACH,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7B,2FAA2F;QAC3F,gFAAgF;QAChF,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3E;;;;;;;;;;;WAWG;QACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;QACxB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;QACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;KACvB,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC;QACtB,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACtC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7C,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QAChD;;;;;;;;;;;;;;WAcG;QACH,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACjC;;;;;;;;;;;;;;WAcG;QACH,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5B,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAC/B,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;KAC1C,CAAC;IACF,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE;YACP,iCAAiC;YACjC,2DAA2D;YAC3D,0FAA0F;SAC3F;QACD,KAAK,EACH,uIAAuI;KAC1I;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,MAAM,GAAG,aAAa,CAAC;IAClC,IAAI,EAAE,gBAAgB;IACtB,QAAQ,EAAE,QAAQ;IAClB,MAAM,EAAE,EAAE;IACV,MAAM,EACJ,sMAAsM;IACxM,UAAU,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,+BAA+B,CAAC,EAAE;CACnF,CAAC,CAAA"}

package/dist/spec/operations/uploads.d.ts

@@ -0,0 +1,18 @@
+import * as v from "valibot";
+export declare const uploadsPhoto: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly count: v.LiteralSchema<1, undefined>;
+    readonly type: v.LiteralSchema<0, undefined>;
+    readonly uploaderType: v.LiteralSchema<0, undefined>;
+    readonly profile: v.LiteralSchema<false, undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly url: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+}, undefined>>;
+export declare const uploadsFile: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly count: v.LiteralSchema<1, undefined>;
+    readonly type: v.LiteralSchema<0, undefined>;
+    readonly uploaderType: v.LiteralSchema<0, undefined>;
+    readonly profile: v.LiteralSchema<false, undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly info: v.OptionalSchema<v.ArraySchema<v.LooseObjectSchema<{}, undefined>, undefined>, undefined>;
+}, undefined>>;
+//# sourceMappingURL=uploads.d.ts.map

package/dist/spec/operations/uploads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploads.d.ts","sourceRoot":"","sources":["../../../src/spec/operations/uploads.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAU5B,eAAO,MAAM,YAAY;;;;;;;cAavB,CAAA;AAEF,eAAO,MAAM,WAAW;;;;;;;cAatB,CAAA"}

package/dist/spec/operations/uploads.js

@@ -0,0 +1,35 @@
+import * as v from "valibot";
+import { defineOperation } from "../define.js";
+const uploadRequest = v.strictObject({
+    count: v.literal(1),
+    type: v.literal(0),
+    uploaderType: v.literal(0),
+    profile: v.literal(false),
+});
+export const uploadsPhoto = defineOperation({
+    name: "uploads.photo",
+    constant: "PHOTO_UPLOAD",
+    opcode: 80,
+    auth: true,
+    request: uploadRequest,
+    response: v.looseObject({ url: v.optional(v.string()) }),
+    provenance: {
+        confidence: "measured",
+        sources: ["measured against MAX 2026-09-24 in Saved messages (`pnpm probe:upload`)", "PyMax upload_photo"],
+        notes: 'Answers `{url}`. A multipart POST of the image, field `file`, answers `{photos: {<key>: {token}}}`; the message attaches `{_type: "PHOTO", photoToken}`.',
+    },
+});
+export const uploadsFile = defineOperation({
+    name: "uploads.file",
+    constant: "FILE_UPLOAD",
+    opcode: 87,
+    auth: true,
+    request: uploadRequest,
+    response: v.looseObject({ info: v.optional(v.array(v.looseObject({}))) }),
+    provenance: {
+        confidence: "measured",
+        sources: ["measured against MAX 2026-09-24 in Saved messages (`pnpm probe:upload`)", "PyMax upload_file"],
+        notes: 'Answers `{info: [{url, fileId, token}]}`. The bytes are POSTed raw with `Content-Range: 0-<end>/<size>`; MAX then pushes 136 `{fileId}`, and a send before that is refused `attachment.not.ready`. The message attaches `{_type: "FILE", fileId}`.',
+    },
+});
+//# sourceMappingURL=uploads.js.map