@neta-art/cohub 10.0.0 → 11.1.0

package/dist/index.js

@@ -1,5 +1,5 @@
-import { $ as resolveOpenSurface, A as ReferencesApi, B as DESKTOP_COMMAND_DEFAULT_TIMEOUT_MS, C as createSessionPatchReducer, D as BoardClient, E as connectDisplay, F as ModelsApi, G as DESKTOP_COMMAND_SETTLEMENT_GRACE_SECONDS, H as DESKTOP_COMMAND_OPEN_TIMEOUT_MS, I as GenerationsApi, J as defaultDesktopCommandTimeoutMs, K as DESKTOP_COMMAND_TERMINAL_TTL_SECONDS, L as CronJobsApi, M as PublicAssetsApi, N as SkillsApi, O as ensureRealtimeConnected, P as PromptsApi, Q as parseDesktopCommandId, R as ChannelsApi, S as SessionPatchReducer, T as DisplayConnection, U as DESKTOP_COMMAND_PAYLOAD_MAX_BYTES, V as DESKTOP_COMMAND_MAX_TIMEOUT_MS, W as DESKTOP_COMMAND_PENDING_TTL_SECONDS, X as isTerminalDesktopCommandStatus, Y as isDesktopCallMethod, Z as parseDesktopCommand, _ as buildSpaceInvitePath, a as DesktopCommandsApi, at as normalizeDisplayPoint, b as createSessionGenerationStreamClient, c as ReferralsApi, d as TasksApi, et as NAVIGATION_ERROR_MESSAGE_MAX_LENGTH, f as SpaceClient, g as PublicInviteApi, h as SpacesApi, i as WorkCommerceApi, it as DISPLAY_SYSTEM_ACTIONS, j as SearchApi, k as SessionAccessApi, l as UsersApi, m as SpaceWebhooksApi, n as createHttpClient, o as UiCommandsApi, ot as splitDisplayText, p as SpacePublicFilesApi, q as DESKTOP_COMMAND_VERSION, r as AppCommerceApi, rt as DISPLAY_INPUT_MAX_TEXT, s as AppsApi, t as CohubHttpClient, tt as DISPLAY_ELEMENT_REF_PATTERN, u as UserApi, v as buildSpacePath, w as SpaceDisplaysApi, x as parseAssistantMessageCommit, y as SessionGenerationStreamClient, z as DESKTOP_COMMAND_ACCEPT_TIMEOUT_MS } from "./chunks/http.js";
-import { A as isUuid, C as isRequestSourceUuid, D as readRequestSourceFromEnv, E as parseRequestSourceFromHeaders, M as isUuidOrShortUuid, O as requestSourceToHeaders, S as isRequestSourceEmpty, T as normalizeRequestSource, _ as COHUB_SOURCE_HEADER, a as sanitizeAccessToken, b as hasRequestSourceIdentity, i as matchesUnauthorizedErrorToken, j as isUuidLike, k as resolveRequestSourceChannel, n as HttpTransport, o as REALTIME_ROOM_EVENT_NAME_PATTERN, r as joinApiUrl, t as HttpError, v as COHUB_SOURCE_HEADER_NAMES, w as mergeRequestSourceIntoMeta, x as isRequestSourceClientId, y as REQUEST_SOURCE_VIA_MAX_LENGTH } from "./chunks/transport.js";
+import { $ as isTerminalDesktopCommandStatus, A as BoardClient, B as CronJobsApi, C as SessionPatchReducer, D as connectDisplay, E as DisplayConnection, F as PublicAssetsApi, G as DESKTOP_COMMAND_OPEN_TIMEOUT_MS, H as DESKTOP_COMMAND_ACCEPT_TIMEOUT_MS, I as SkillsApi, J as DESKTOP_COMMAND_SETTLEMENT_GRACE_SECONDS, K as DESKTOP_COMMAND_PAYLOAD_MAX_BYTES, L as PromptsApi, M as SessionAccessApi, N as ReferencesApi, O as readRtcTransportStats, P as SearchApi, Q as isDesktopCallMethod, R as ModelsApi, S as parseAssistantMessageCommit, T as SpaceDisplaysApi, U as DESKTOP_COMMAND_DEFAULT_TIMEOUT_MS, V as ChannelsApi, W as DESKTOP_COMMAND_MAX_TIMEOUT_MS, X as DESKTOP_COMMAND_VERSION, Y as DESKTOP_COMMAND_TERMINAL_TTL_SECONDS, Z as defaultDesktopCommandTimeoutMs, _ as PublicInviteApi, a as WorkCommerceApi, b as SessionGenerationStreamClient, c as AppsApi, ct as normalizeDisplayPoint, d as UserApi, et as parseDesktopCommand, f as TasksApi, g as SpacesApi, h as SpaceWebhooksApi, i as AppCommerceApi, it as DISPLAY_ELEMENT_REF_PATTERN, j as ensureRealtimeConnected, k as waitForIceGathering, l as ReferralsApi, lt as splitDisplayText, m as SpacePublicFilesApi, n as createHttpClient, nt as resolveOpenSurface, o as DesktopCommandsApi, ot as DISPLAY_INPUT_MAX_TEXT, p as SpaceClient, q as DESKTOP_COMMAND_PENDING_TTL_SECONDS, r as RoomsApi, rt as NAVIGATION_ERROR_MESSAGE_MAX_LENGTH, s as UiCommandsApi, st as DISPLAY_SYSTEM_ACTIONS, t as CohubHttpClient, tt as parseDesktopCommandId, u as UsersApi, v as buildSpaceInvitePath, w as createSessionPatchReducer, x as createSessionGenerationStreamClient, y as buildSpacePath, z as GenerationsApi } from "./chunks/http.js";
+import { A as requestSourceToHeaders, C as isRequestSourceClientId, D as normalizeRequestSource, E as mergeRequestSourceIntoMeta, M as isUuid, N as isUuidLike, O as parseRequestSourceFromHeaders, P as isUuidOrShortUuid, S as hasRequestSourceIdentity, T as isRequestSourceUuid, a as sanitizeAccessToken, b as COHUB_SOURCE_HEADER_NAMES, i as matchesUnauthorizedErrorToken, j as resolveRequestSourceChannel, k as readRequestSourceFromEnv, n as HttpTransport, o as REALTIME_ROOM_EVENT_NAME_PATTERN, r as joinApiUrl, t as HttpError, w as isRequestSourceEmpty, x as REQUEST_SOURCE_VIA_MAX_LENGTH, y as COHUB_SOURCE_HEADER } from "./chunks/transport.js";
 import { a as normalizeWebsocketUrl, c as resolveExecutionAppId, d as resolveWebBaseUrl, f as resolveWebsocketUrl, g as scopeListHasPermission, h as isUserLevelPermission, i as normalizeVoiceInputWebsocketUrl, l as resolveExecutionToken, m as USER_LEVEL_PERMISSIONS, n as getCohubContext, o as resolveApiBaseUrl, p as PERMISSIONS, r as normalizeBaseUrl, s as resolveCohubEnvironment, t as COHUB_ENVIRONMENTS, u as resolveVoiceInputWebsocketUrl } from "./chunks/environment.js";
 import { a as extractBillingPayload, c as isFeatureNotEntitledError, i as FEATURE_NOT_ENTITLED_ERROR_CODE, l as isHttpErrorCode, n as createWebsocketClient, o as isBillingAccessBlockedCode, r as BILLING_ACCESS_BLOCKED_ERROR_CODE, s as isBillingAccessBlockedError, t as WebsocketClient } from "./chunks/websocket.js";
 import { VoiceApi, VoiceInputClient, createVoiceInputClient } from "./voice-input.js";
@@ -78,8 +78,95 @@ const UPLOAD_MAX_FILE_BYTES = 1 * GiB;
 const UPLOAD_MAX_BATCH_BYTES = 2 * GiB;
 /** Maximum file count of one upload batch. */
 const UPLOAD_MAX_BATCH_FILES = 2e3;
+//#endregion
+//#region ../protocol/dist/board-url.js
+const BOARD_REMOTE_URL_MAX_LENGTH = 4096;
+function parseIpv4(host) {
+	const parts = host.split(".").map(Number);
+	return parts.length === 4 && parts.every((part) => Number.isInteger(part) && part >= 0 && part <= 255) ? parts : null;
+}
+function isBlockedIpv4(host) {
+	const parts = parseIpv4(host);
+	if (!parts) return false;
+	const [first, second, third] = parts;
+	if (first === 0 || first === 10 || first === 127) return true;
+	if (first === 100 && second >= 64 && second <= 127) return true;
+	if (first === 169 && second === 254) return true;
+	if (first === 172 && second >= 16 && second <= 31) return true;
+	if (first === 192 && second === 168) return true;
+	if (first === 192 && second === 0 && (third === 0 || third === 2)) return true;
+	if (first === 192 && second === 88 && third === 99) return true;
+	if (first === 198 && (second === 18 || second === 19)) return true;
+	if (first === 198 && second === 51 && third === 100) return true;
+	if (first === 203 && second === 0 && third === 113) return true;
+	return first >= 224;
+}
+function expandIpv6(host) {
+	const [head, tail, extra] = host.toLowerCase().split("::");
+	if (extra !== void 0) return null;
+	const headParts = head ? head.split(":").filter(Boolean) : [];
+	const tailParts = tail ? tail.split(":").filter(Boolean) : [];
+	const missing = 8 - headParts.length - tailParts.length;
+	if (missing < 0 || tail === void 0 && missing !== 0) return null;
+	const parts = [
+		...headParts,
+		...Array.from({ length: missing }, () => "0"),
+		...tailParts
+	];
+	if (parts.length !== 8 || parts.some((part) => !/^[0-9a-f]{1,4}$/.test(part))) return null;
+	return parts.map((part) => part.padStart(4, "0"));
+}
+function isBlockedIpv6(host) {
+	const parts = expandIpv6(host);
+	if (!parts) return true;
+	if (parts.every((part) => part === "0000")) return true;
+	if (parts.slice(0, 7).every((part) => part === "0000") && parts[7] === "0001") return true;
+	if (parts.slice(0, 5).every((part) => part === "0000") && parts[5] === "ffff") {
+		const high = Number.parseInt(parts[6] ?? "0", 16);
+		const low = Number.parseInt(parts[7] ?? "0", 16);
+		return isBlockedIpv4(`${high >> 8}.${high & 255}.${low >> 8}.${low & 255}`);
+	}
+	if (parts.slice(0, 6).every((part) => part === "0000")) return true;
+	const first = Number.parseInt(parts[0] ?? "0", 16);
+	if ((first & 65024) === 64512) return true;
+	if ((first & 65472) === 65152 || (first & 65472) === 65216) return true;
+	if ((first & 65280) === 65280) return true;
+	return parts[0] === "2001" && parts[1] === "0db8";
+}
+function isPublicBoardRemoteAddress(value) {
+	const address = value.toLowerCase().replace(/^\[|\]$/g, "").replace(/\.$/, "");
+	if (parseIpv4(address)) return !isBlockedIpv4(address);
+	return address.includes(":") && !isBlockedIpv6(address);
+}
+function isBlockedHost(hostname) {
+	const host = hostname.toLowerCase().replace(/^\[|\]$/g, "").replace(/\.$/, "");
+	if (host === "localhost" || host.endsWith(".localhost") || host.endsWith(".local") || host.endsWith(".internal")) return true;
+	if (parseIpv4(host) || host.includes(":")) return !isPublicBoardRemoteAddress(host);
+	return false;
+}
+/**
+* Normalize a browser-loadable public HTTP(S) URL. This blocks explicit local
+* addresses; any future server-side fetcher must additionally validate DNS
+* resolution to defend against rebinding.
+*/
+function normalizeBoardRemoteUrl(value) {
+	if (typeof value !== "string") return void 0;
+	const input = value.trim();
+	if (!input || input.length > 4096) return void 0;
+	try {
+		const url = new URL(input);
+		if (url.protocol !== "https:" && url.protocol !== "http:") return void 0;
+		if (url.username || url.password || isBlockedHost(url.hostname)) return;
+		const normalized = url.toString();
+		return normalized.length <= 4096 ? normalized : void 0;
+	} catch {
+		return;
+	}
+}
+z.string().max(BOARD_REMOTE_URL_MAX_LENGTH).refine((value) => normalizeBoardRemoteUrl(value) !== void 0, { message: "URL must be a public HTTP(S) URL without credentials" });
 const BOARD_CAMERA_TARGET = "camera";
-const BoardIdSchema = z.string().min(1).max(160).regex(/^[^\s/]+$/, "ids must not contain whitespace or '/'").refine((value) => value !== BOARD_CAMERA_TARGET, "\"camera\" is reserved");
+const BoardKeySchema = z.string().min(1).max(160).regex(/^[^\s/]+$/, "ids must not contain whitespace or '/'");
+const BoardIdSchema = BoardKeySchema.refine((value) => value !== BOARD_CAMERA_TARGET, "\"camera\" is reserved");
 const finite$1 = z.number().finite();
 const nonNegative = finite$1.nonnegative();
 const ratio = finite$1.min(0).max(1);
@@ -126,10 +213,29 @@ const BoardStyleSchema = z.object({
 	trim: ratio.optional()
 }).strict();
 function isSafeBoardSourcePath(value) {
-	return value.length > 0 && value.length <= 4096 && !value.startsWith("/") && !value.includes("\\") && value.split("/").every((part) => part.length > 0 && part !== "." && part !== "..");
+	return value.length > 0 && value.length <= 4096 && !value.startsWith("/") && !/^[a-z][a-z\d+.-]*:/i.test(value.trimStart()) && !value.includes("\\") && value.split("/").every((part) => part.length > 0 && part !== "." && part !== "..");
 }
 const srcSchema = z.string().refine(isSafeBoardSourcePath, "src must be a relative Space file path");
+function parseBoardMediaSource(src) {
+	if (isSafeBoardSourcePath(src)) return {
+		kind: "file",
+		value: src
+	};
+	return normalizeBoardRemoteUrl(src) ? {
+		kind: "url",
+		value: src
+	} : null;
+}
+const BoardMediaSourceSchema = z.string().max(4096).refine((src) => parseBoardMediaSource(src) !== null, "src must be a public HTTP(S) URL or relative Space file path").describe("Prefer a stable public HTTP(S) URL; relative Space file paths remain supported.");
+const BoardScriptSchema = z.object({
+	src: srcSchema.refine((path) => /\.m?js$/.test(path), "script src must be a .js or .mjs module"),
+	params: z.record(z.string(), z.json()).default({}),
+	targets: z.record(z.string().min(1).max(80), BoardIdSchema).default({}),
+	seed: z.string().min(1).max(160).optional(),
+	enabled: z.boolean().default(true)
+}).strict();
 const itemEnvelope = {
+	script: BoardScriptSchema.optional(),
 	parent: BoardIdSchema.optional(),
 	z: finite$1.optional(),
 	position: BoardVec2Schema.default({
@@ -174,6 +280,7 @@ const BoardFrameItemSchema = z.object({
 	type: z.literal("frame"),
 	props: z.object({
 		label: z.string().max(280).default(""),
+		decoration: z.enum(["frame", "none"]).optional(),
 		clip: z.boolean().default(true)
 	}).strict().prefault({})
 }).strict();
@@ -260,7 +367,7 @@ const BoardArrowItemSchema = z.object({
 	}).strict()
 }).strict();
 const fileProps = {
-	src: srcSchema,
+	src: BoardMediaSourceSchema,
 	snapshot: z.object({
 		title: z.string().optional(),
 		mimeType: z.string().optional(),
@@ -274,8 +381,16 @@ const fileProps = {
 		coverUrl: z.string().optional()
 	}).strict().optional()
 };
-const timedFileProps = {
+const BoardMediaOriginSchema = z.object({
+	taskRunId: z.string().min(1).max(160),
+	artifactId: z.string().min(1).max(240)
+}).strict();
+const mediaProps = {
 	...fileProps,
+	origin: BoardMediaOriginSchema.optional()
+};
+const timedFileProps = {
+	...mediaProps,
 	time: nonNegative.optional()
 };
 const BoardCropSchema = z.object({
@@ -288,7 +403,7 @@ const BoardImageItemSchema = z.object({
 	...boxed(640, 360),
 	type: z.literal("image"),
 	props: z.object({
-		...fileProps,
+		...mediaProps,
 		crop: BoardCropSchema.optional()
 	}).strict()
 }).strict();
@@ -353,8 +468,10 @@ const BoardTaskSnapshotSchema = z.object({
 	title: z.string().min(1).max(240),
 	model: z.string().max(160).optional(),
 	promptExcerpt: z.string().max(480).optional(),
+	errorExcerpt: z.string().max(240).optional(),
 	artifactCount: z.number().int().nonnegative(),
 	artifacts: z.array(BoardTaskArtifactSchema).max(6).default([]),
+	startedAt: z.string().max(64).optional(),
 	updatedAt: z.string().optional()
 }).strict();
 const BoardTaskItemSchema = z.object({
@@ -362,7 +479,7 @@ const BoardTaskItemSchema = z.object({
 	type: z.literal("task"),
 	props: z.object({
 		taskRunId: z.string().min(1).max(160),
-		snapshot: BoardTaskSnapshotSchema
+		snapshot: BoardTaskSnapshotSchema.describe("Maintained by the server for tasks in the Board's Space; writers may omit it.")
 	}).strict()
 }).strict();
 const BOARD_EFFECT_KINDS = [
@@ -389,14 +506,11 @@ const BoardEffectItemSchema = z.object({
 		seed: z.string().min(1).max(160).optional()
 	}).strict()
 }).strict();
-const BoardSketchItemSchema = z.object({
+const BoardCustomItemSchema = z.object({
 	...boxed(480, 320),
-	type: z.literal("sketch"),
-	props: z.object({
-		src: srcSchema.refine((path) => /\.m?js$/.test(path), "sketch src must be a .js or .mjs module"),
-		params: z.record(z.string(), z.unknown()).default({}),
-		seed: z.string().min(1).max(160).optional()
-	}).strict()
+	type: z.literal("custom"),
+	script: BoardScriptSchema,
+	props: z.object({}).strict().default({})
 }).strict();
 const BOARD_EXTENSION_TYPE_PATTERN = /^[a-z][a-z0-9]*(?:\.[a-z0-9-]+)+$/;
 const BoardExtensionItemSchema = z.object({
@@ -420,7 +534,7 @@ const BOARD_ITEM_SCHEMAS = {
 	file: BoardFileItemSchema,
 	task: BoardTaskItemSchema,
 	effect: BoardEffectItemSchema,
-	sketch: BoardSketchItemSchema
+	custom: BoardCustomItemSchema
 };
 const BOARD_ITEM_TYPES = Object.keys(BOARD_ITEM_SCHEMAS);
 function isBuiltinItemType(type) {
@@ -535,7 +649,7 @@ const BoardAnimationHeaderSchema = z.object({
 	end: z.enum(["hold", "reset"]).default("hold"),
 	markers: z.array(BoardMarkerSchema).max(1e4).default([])
 }).strict();
-const BoardAnimationSchema = BoardAnimationHeaderSchema.extend({ tracks: z.record(BoardIdSchema, BoardTrackSchema).default({}) }).strict();
+const BoardAnimationSchema = BoardAnimationHeaderSchema.extend({ tracks: z.record(BoardKeySchema, BoardTrackSchema).default({}) }).strict();
 const BOARD_ENTER_PRESETS = [
 	"fade-in",
 	"rise",
@@ -575,7 +689,7 @@ const patchObject = z.record(z.string(), z.unknown());
 const BoardPatchSchema = z.object({
 	board: patchObject.nullable().optional(),
 	items: z.record(BoardIdSchema, patchObject.nullable()).optional(),
-	animations: z.record(BoardIdSchema, patchObject.and(z.object({ tracks: z.record(BoardIdSchema, patchObject.nullable()).optional() })).nullable()).optional()
+	animations: z.record(BoardIdSchema, patchObject.and(z.object({ tracks: z.record(BoardKeySchema, patchObject.nullable()).optional() })).nullable()).optional()
 }).strict();
 //#endregion
 //#region ../protocol/dist/board-json.js
@@ -1119,7 +1233,8 @@ const NOT_ANIMATABLE = /* @__PURE__ */ new Set([
 	"parent",
 	"z",
 	"locked",
-	"metadata"
+	"metadata",
+	"script"
 ]);
 const CAMERA_PROPERTIES = {
 	focus: {
@@ -1646,96 +1761,132 @@ function parseBoardDocument(input) {
 	} : result;
 }
 //#endregion
-//#region ../protocol/dist/board-url.js
-const BOARD_REMOTE_URL_MAX_LENGTH = 4096;
-function parseIpv4(host) {
-	const parts = host.split(".").map(Number);
-	return parts.length === 4 && parts.every((part) => Number.isInteger(part) && part >= 0 && part <= 255) ? parts : null;
+//#region ../protocol/dist/generation/blocks.js
+const EXCERPT_LIMIT = 240;
+function asRecord(value) {
+	return value && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
-function isBlockedIpv4(host) {
-	const parts = parseIpv4(host);
-	if (!parts) return false;
-	const [first, second, third] = parts;
-	if (first === 0 || first === 10 || first === 127) return true;
-	if (first === 100 && second >= 64 && second <= 127) return true;
-	if (first === 169 && second === 254) return true;
-	if (first === 172 && second >= 16 && second <= 31) return true;
-	if (first === 192 && second === 168) return true;
-	if (first === 192 && second === 0 && (third === 0 || third === 2)) return true;
-	if (first === 192 && second === 88 && third === 99) return true;
-	if (first === 198 && (second === 18 || second === 19)) return true;
-	if (first === 198 && second === 51 && third === 100) return true;
-	if (first === 203 && second === 0 && third === 113) return true;
-	return first >= 224;
+function cleanExcerpt(value, limit = EXCERPT_LIMIT) {
+	if (typeof value !== "string") return void 0;
+	const clean = value.replace(/\s+/g, " ").trim();
+	if (!clean) return void 0;
+	return clean.length > limit ? `${clean.slice(0, limit - 3).trimEnd()}...` : clean;
 }
-function expandIpv6(host) {
-	const [head, tail, extra] = host.toLowerCase().split("::");
-	if (extra !== void 0) return null;
-	const headParts = head ? head.split(":").filter(Boolean) : [];
-	const tailParts = tail ? tail.split(":").filter(Boolean) : [];
-	const missing = 8 - headParts.length - tailParts.length;
-	if (missing < 0 || tail === void 0 && missing !== 0) return null;
-	const parts = [
-		...headParts,
-		...Array.from({ length: missing }, () => "0"),
-		...tailParts
-	];
-	if (parts.length !== 8 || parts.some((part) => !/^[0-9a-f]{1,4}$/.test(part))) return null;
-	return parts.map((part) => part.padStart(4, "0"));
+function blockText(block) {
+	return cleanExcerpt(block.text ?? block.content ?? block.value);
 }
-function isBlockedIpv6(host) {
-	const parts = expandIpv6(host);
-	if (!parts) return true;
-	if (parts.every((part) => part === "0000")) return true;
-	if (parts.slice(0, 7).every((part) => part === "0000") && parts[7] === "0001") return true;
-	if (parts.slice(0, 5).every((part) => part === "0000") && parts[5] === "ffff") {
-		const high = Number.parseInt(parts[6] ?? "0", 16);
-		const low = Number.parseInt(parts[7] ?? "0", 16);
-		return isBlockedIpv4(`${high >> 8}.${high & 255}.${low >> 8}.${low & 255}`);
+function blockUrl(block) {
+	const source = asRecord(block.source);
+	return normalizeBoardRemoteUrl(source?.url ?? source?.src ?? block.url ?? block.src);
+}
+function blockMimeType(block) {
+	const source = asRecord(block.source);
+	const value = source?.mediaType ?? source?.media_type ?? source?.mimeType ?? block.mediaType ?? block.media_type ?? block.mimeType;
+	return typeof value === "string" ? value : void 0;
+}
+function positiveNumber(value) {
+	return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : void 0;
+}
+function blockNaturalSize(block) {
+	const source = asRecord(block.source);
+	const naturalWidth = positiveNumber(source?.width ?? source?.naturalWidth ?? block.width ?? block.naturalWidth);
+	const naturalHeight = positiveNumber(source?.height ?? source?.naturalHeight ?? block.height ?? block.naturalHeight);
+	return {
+		...naturalWidth ? { naturalWidth } : {},
+		...naturalHeight ? { naturalHeight } : {}
+	};
+}
+function contentBlocks(value) {
+	return Array.isArray(value) ? value.filter((item) => asRecord(item)) : [];
+}
+function taskData(run) {
+	const payload = asRecord(run.payload);
+	return asRecord(payload?.data) ?? payload;
+}
+function generationOutput(run) {
+	return contentBlocks(asRecord(run.result)?.output);
+}
+function generationPrompt(run) {
+	for (const block of contentBlocks(taskData(run)?.content)) {
+		const text = blockText(block);
+		if (text) return text;
 	}
-	if (parts.slice(0, 6).every((part) => part === "0000")) return true;
-	const first = Number.parseInt(parts[0] ?? "0", 16);
-	if ((first & 65024) === 64512) return true;
-	if ((first & 65472) === 65152 || (first & 65472) === 65216) return true;
-	if ((first & 65280) === 65280) return true;
-	return parts[0] === "2001" && parts[1] === "0db8";
 }
-function isPublicBoardRemoteAddress(value) {
-	const address = value.toLowerCase().replace(/^\[|\]$/g, "").replace(/\.$/, "");
-	if (parseIpv4(address)) return !isBlockedIpv4(address);
-	return address.includes(":") && !isBlockedIpv6(address);
+function blockMeta(block) {
+	return asRecord(block.meta);
 }
-function isBlockedHost(hostname) {
-	const host = hostname.toLowerCase().replace(/^\[|\]$/g, "").replace(/\.$/, "");
-	if (host === "localhost" || host.endsWith(".localhost") || host.endsWith(".local") || host.endsWith(".internal")) return true;
-	if (parseIpv4(host) || host.includes(":")) return !isPublicBoardRemoteAddress(host);
-	return false;
+function blockIdentity(block) {
+	const meta = blockMeta(block);
+	const value = meta?.id ?? meta?.clip_id ?? meta?.clipId ?? block.id ?? block.clip_id ?? block.clipId;
+	if (typeof value !== "string" && typeof value !== "number") return void 0;
+	return cleanExcerpt(String(value), 220);
+}
+function blockTitle(block) {
+	return cleanExcerpt(blockMeta(block)?.title ?? block.title ?? block.name, 240);
+}
+function blockDurationMs(block) {
+	const source = asRecord(block.source);
+	const meta = blockMeta(block);
+	const milliseconds = positiveNumber(source?.durationMs ?? meta?.durationMs ?? block.durationMs);
+	if (milliseconds) return Math.round(milliseconds);
+	const seconds = positiveNumber(source?.duration ?? meta?.duration ?? block.duration);
+	return seconds ? Math.round(seconds * 1e3) : void 0;
+}
+function blockPreviewUrl(block) {
+	const source = asRecord(block.source);
+	return normalizeBoardRemoteUrl(source?.poster ?? source?.thumbnail ?? source?.previewUrl ?? block.poster ?? block.thumbnail ?? block.previewUrl);
 }
 /**
-* Normalize a browser-loadable public HTTP(S) URL. This blocks explicit local
-* addresses; any future server-side fetcher must additionally validate DNS
-* resolution to defend against rebinding.
+* Image roles that depict playable media, by the media types they may cover;
+* `last_frame` stays a result of its own.
 */
-function normalizeBoardRemoteUrl(value) {
-	if (typeof value !== "string") return void 0;
-	const input = value.trim();
-	if (!input || input.length > 4096) return void 0;
-	try {
-		const url = new URL(input);
-		if (url.protocol !== "https:" && url.protocol !== "http:") return void 0;
-		if (url.username || url.password || isBlockedHost(url.hostname)) return;
-		const normalized = url.toString();
-		return normalized.length <= 4096 ? normalized : void 0;
-	} catch {
-		return;
-	}
+const COVER_ROLES = /* @__PURE__ */ new Map([
+	["first_frame", /* @__PURE__ */ new Set(["video"])],
+	["cover", /* @__PURE__ */ new Set(["video", "audio"])],
+	["poster", /* @__PURE__ */ new Set(["video", "audio"])],
+	["thumbnail", /* @__PURE__ */ new Set(["video", "audio"])]
+]);
+function isPlayable(block) {
+	return block.type === "video" || block.type === "audio";
+}
+/**
+* Pair playable media with its cover image, returning media index → cover
+* index. An image sharing the provider id wins (music tracks and their art,
+* shared by every media of that id); otherwise cover-role images pair in
+* order with remaining media their role fits (a video and its `first_frame`).
+* Covers need a remote URL, so an inline image is never folded away.
+*/
+function generationCovers(blocks) {
+	const covers = /* @__PURE__ */ new Map();
+	const isCover = (block) => block.type === "image" && blockUrl(block) !== void 0 && blockMeta(block)?.role !== "last_frame";
+	blocks.forEach((block, index) => {
+		const id = blockIdentity(block);
+		if (!isPlayable(block) || id === void 0) return;
+		const cover = blocks.findIndex((candidate) => isCover(candidate) && blockIdentity(candidate) === id);
+		if (cover >= 0) covers.set(index, cover);
+	});
+	const paired = new Set(covers.values());
+	const roleCovers = blocks.flatMap((block, index) => {
+		const role = blockMeta(block)?.role;
+		const types = typeof role === "string" ? COVER_ROLES.get(role) : void 0;
+		return isCover(block) && !paired.has(index) && types ? [{
+			index,
+			types
+		}] : [];
+	});
+	blocks.forEach((block, index) => {
+		if (!isPlayable(block) || covers.has(index)) return;
+		const at = roleCovers.findIndex(({ types }) => types.has(String(block.type)));
+		const [cover] = at < 0 ? [] : roleCovers.splice(at, 1);
+		if (cover) covers.set(index, cover.index);
+	});
+	return covers;
 }
-z.string().max(BOARD_REMOTE_URL_MAX_LENGTH).refine((value) => normalizeBoardRemoteUrl(value) !== void 0, { message: "URL must be a public HTTP(S) URL without credentials" });
 //#endregion
 //#region ../protocol/dist/turn-origin.js
-const record$2 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
+const record$1 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
 const normalizeSessionTurnOrigin = (value) => {
-	const input = record$2(value);
+	const input = record$1(value);
 	if (!input || ![
 		"prompt",
 		"scheduled_prompt",
@@ -1755,12 +1906,12 @@ const normalizeSessionTurnOrigin = (value) => {
 };
 /** Reads durable provenance; legacy background tasks only knew their caller's Session/Turn. */
 const readSessionTurnOrigin = (meta, spaceId) => {
-	const input = record$2(meta);
+	const input = record$1(meta);
 	const origin = normalizeSessionTurnOrigin(input?.origin);
 	if (origin) return origin;
-	const context = record$2(input?.context);
+	const context = record$1(input?.context);
 	if (context?.kind !== "background_bash_task" || !isUuidLike(spaceId)) return null;
-	const legacy = record$2(context.origin);
+	const legacy = record$1(context.origin);
 	return normalizeSessionTurnOrigin({
 		...legacy,
 		spaceId,
@@ -1775,9 +1926,9 @@ const KINDS = [
 	"background_task",
 	"hook"
 ];
-const record$1 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
+const record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
 const normalizeSentTurnRef = (value) => {
-	const input = record$1(value);
+	const input = record(value);
 	if (!input) return null;
 	if (!isUuidLike(input.sessionId) || !isUuidLike(input.turnId)) return null;
 	const kind = String(input.kind);
@@ -1796,7 +1947,7 @@ const normalizeSentTurnRef = (value) => {
 };
 /** Deduplicates by child Turn, so a retried request cannot render one twice. */
 const readSentTurns = (meta) => {
-	const raw = record$1(meta)?.messagesSent;
+	const raw = record(meta)?.messagesSent;
 	if (!Array.isArray(raw)) return [];
 	const seen = /* @__PURE__ */ new Set();
 	const refs = [];
@@ -2030,6 +2181,102 @@ function compileDisplayActions(actions, width, height) {
 	if (events.length === 0) throw new DisplayActionError("no action touches the display");
 	return events;
 }
+z.object({
+	urls: z.union([z.string().min(1).max(512), z.array(z.string().min(1).max(512)).min(1).max(16)]),
+	username: z.string().max(512).optional(),
+	credential: z.string().max(512).optional()
+});
+const sessionDescriptionSchema = z.object({
+	type: z.enum(["offer", "answer"]),
+	sdp: z.string().min(1).max(65536)
+});
+const APP_RTC_DELIVERIES = ["reliable", "latest"];
+const APP_RTC_PUBLICATION_KINDS = [
+	"data",
+	"audio",
+	"video"
+];
+const APP_RTC_NAME_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,63}$/;
+const isAppRtcName = (value) => typeof value === "string" && APP_RTC_NAME_PATTERN.test(value) && !value.toLowerCase().startsWith("cohub.");
+const APP_RTC_LIMITS = {
+	channelsPerMember: 16,
+	tracksPerMember: 4,
+	dataSubscriptions: 512,
+	mediaSubscriptions: 16,
+	messageBytes: 65536,
+	operationsPerSecond: 10,
+	opensPerSecond: 2,
+	batch: 64
+};
+const APP_RTC_QUALITIES = [
+	"high",
+	"medium",
+	"low"
+];
+const APP_RTC_SIMULCAST_LAYERS = [
+	{
+		rid: "f",
+		quality: "high",
+		scaleResolutionDownBy: 1
+	},
+	{
+		rid: "h",
+		quality: "medium",
+		scaleResolutionDownBy: 2
+	},
+	{
+		rid: "q",
+		quality: "low",
+		scaleResolutionDownBy: 4
+	}
+];
+z.object({
+	id: z.string().min(1).max(32),
+	name: z.string().regex(APP_RTC_NAME_PATTERN),
+	kind: z.enum(APP_RTC_PUBLICATION_KINDS),
+	delivery: z.enum(APP_RTC_DELIVERIES).optional(),
+	simulcast: z.boolean().optional()
+});
+const nameSchema = z.string().refine(isAppRtcName, "invalid name");
+const participantIdSchema = z.string().uuid();
+z.object({
+	ticket: z.string().min(1).max(4096),
+	participantId: participantIdSchema
+});
+z.object({ answer: sessionDescriptionSchema.refine((value) => value.type === "answer", "expected an answer") });
+z.union([z.object({ channels: z.array(z.object({
+	name: nameSchema,
+	delivery: z.enum(APP_RTC_DELIVERIES)
+})).min(1).max(APP_RTC_LIMITS.channelsPerMember) }), z.object({
+	offer: sessionDescriptionSchema.refine((value) => value.type === "offer", "expected an offer"),
+	tracks: z.array(z.object({
+		name: nameSchema,
+		kind: z.enum(["audio", "video"]),
+		mid: z.string().min(1).max(32),
+		simulcast: z.boolean().optional()
+	})).min(1).max(APP_RTC_LIMITS.tracksPerMember)
+})]);
+z.object({
+	ids: z.array(z.string().min(1).max(32)).min(1).max(APP_RTC_LIMITS.channelsPerMember + APP_RTC_LIMITS.tracksPerMember),
+	offer: sessionDescriptionSchema.refine((value) => value.type === "offer", "expected an offer").optional()
+});
+const subscriptionRefSchema = z.object({
+	participantId: participantIdSchema,
+	publicationId: z.string().min(1).max(32)
+});
+const qualitySchema = z.enum(APP_RTC_QUALITIES);
+z.object({
+	kind: z.enum(["data", "media"]),
+	items: z.array(subscriptionRefSchema.extend({ quality: qualitySchema.optional() })).min(1).max(APP_RTC_LIMITS.batch)
+});
+z.object({ items: z.array(subscriptionRefSchema.extend({
+	mid: z.string().min(1).max(32),
+	quality: qualitySchema.optional()
+})).min(1).max(APP_RTC_LIMITS.mediaSubscriptions) });
+z.object({
+	items: z.array(subscriptionRefSchema).min(1).max(APP_RTC_LIMITS.batch),
+	offer: sessionDescriptionSchema.refine((value) => value.type === "offer", "expected an offer").optional()
+});
 //#endregion
 //#region ../protocol/dist/generation/catalog.js
 function isGenerationModelHidden(model) {
@@ -3727,6 +3974,11 @@ const APP_APPEARANCE_TOKENS = [
 	"brand-ring",
 	"brand-contrast-fg",
 	"error-fg",
+	"success",
+	"warning",
+	"error",
+	"info",
+	"status-running",
 	"selection-bg",
 	"overlay-scrim",
 	"shadow-subtle",
@@ -3821,6 +4073,33 @@ const buildAppEmbedShellChanged = (input) => ({
 	...input
 });
 //#endregion
+//#region ../protocol/dist/app-devices.js
+const APP_DEVICES = [
+	"camera",
+	"microphone",
+	"screen"
+];
+const isAppDevice = (value) => typeof value === "string" && APP_DEVICES.includes(value);
+function parseAppDevices(value) {
+	const items = typeof value === "string" ? value.split(/[\s,]+/) : Array.isArray(value) ? value : [];
+	const wanted = new Set(items.map((item) => typeof item === "string" ? item.trim().toLowerCase() : item).filter(isAppDevice));
+	return APP_DEVICES.filter((device) => wanted.has(device));
+}
+const APP_DEVICES_REQUEST_TYPE = "cohub.app.devices.request";
+const APP_DEVICES_RESULT_TYPE = "cohub.app.devices.result";
+function parseAppDevicesResult(value) {
+	if (!value || typeof value !== "object") return null;
+	const record = value;
+	if (record.type !== "cohub.app.devices.result" || typeof record.requestId !== "string") return null;
+	const status = record.status;
+	if (status !== "granted" && status !== "denied" && status !== "unavailable") return null;
+	return {
+		type: APP_DEVICES_RESULT_TYPE,
+		requestId: record.requestId,
+		status
+	};
+}
+//#endregion
 //#region src/apis/billing.ts
 var BillingApi = class {
 	transport;
@@ -3842,64 +4121,1018 @@ var BillingApi = class {
 	async getCatalog() {
 		return this.transport.request("/api/billing/catalog");
 	}
-	async getFeatureEntitlement(featureKey) {
-		return this.transport.request(`/api/billing/features/${encodeURIComponent(featureKey)}`);
+	async getFeatureEntitlement(featureKey) {
+		return this.transport.request(`/api/billing/features/${encodeURIComponent(featureKey)}`);
+	}
+	async getSubscriptions(input) {
+		const params = new URLSearchParams();
+		if (input?.page) params.set("page", String(input.page));
+		if (input?.limit) params.set("limit", String(input.limit));
+		const query = params.toString();
+		return this.transport.request(`/api/billing/subscriptions${query ? `?${query}` : ""}`);
+	}
+	/** Confirms a returned checkout against the provider's order/subscription state. */
+	async confirmCheckout(productKey, checkoutId) {
+		return this.transport.request("/api/billing/checkout-confirmation", {
+			method: "POST",
+			body: JSON.stringify({
+				productKey,
+				checkoutId
+			})
+		});
+	}
+	async previewPromotionCode(input) {
+		return this.transport.request("/api/billing/promotion-code-preview", {
+			method: "POST",
+			body: JSON.stringify(input)
+		});
+	}
+	async createOrder(productKey, input) {
+		return this.transport.request("/api/billing/orders", {
+			method: "POST",
+			body: JSON.stringify({
+				...input ?? {},
+				productKey
+			})
+		});
+	}
+	async createSubscription(productKey, input) {
+		return this.transport.request("/api/billing/subscriptions", {
+			method: "POST",
+			body: JSON.stringify({
+				...input ?? {},
+				productKey
+			})
+		});
+	}
+	async cancelSubscriptionCheckout(subscriptionId) {
+		return this.transport.request(`/api/billing/subscriptions/${encodeURIComponent(subscriptionId)}/checkout`, { method: "DELETE" });
+	}
+	async cancelSubscriptionAutoRenew(subscriptionId) {
+		return this.transport.request(`/api/billing/subscriptions/${encodeURIComponent(subscriptionId)}`, {
+			method: "PATCH",
+			body: JSON.stringify({ cancelAtPeriodEnd: true })
+		});
+	}
+	async createRedemption(input) {
+		return this.transport.request("/api/billing/redemptions", {
+			method: "POST",
+			body: JSON.stringify(input)
+		});
+	}
+};
+//#endregion
+//#region src/apis/app-room-rtc.ts
+var AppRtcError = class extends Error {
+	code;
+	constructor(code, message) {
+		super(message);
+		this.code = code;
+		this.name = "AppRtcError";
+	}
+};
+const SERVER_CODES = /* @__PURE__ */ new Set([
+	"RTC_UNAVAILABLE",
+	"RTC_FORBIDDEN",
+	"RTC_LIMIT_EXCEEDED",
+	"RTC_RATE_LIMITED",
+	"ROOM_NOT_FOUND",
+	"ROOM_EXPIRED"
+]);
+const toAppRtcError = (error) => {
+	if (error instanceof AppRtcError) return error;
+	if (error instanceof HttpError && SERVER_CODES.has(error.code)) return new AppRtcError(error.code, error.message);
+	return new AppRtcError("RTC_FAILED", error instanceof Error ? error.message : String(error));
+};
+const HEADER_BYTES = 5;
+const FLAG_BINARY = 1;
+const encoder = new TextEncoder();
+const decoder = new TextDecoder();
+function encodeAppRtcFrame(data, sequence) {
+	let payload;
+	let flags = 0;
+	if (data instanceof ArrayBuffer) {
+		payload = new Uint8Array(data);
+		flags = FLAG_BINARY;
+	} else if (ArrayBuffer.isView(data)) {
+		payload = new Uint8Array(data.buffer, data.byteOffset, data.byteLength);
+		flags = FLAG_BINARY;
+	} else {
+		const json = JSON.stringify(data);
+		if (json === void 0) throw new TypeError("RTC message is not serializable");
+		payload = encoder.encode(json);
+	}
+	if (payload.byteLength > APP_RTC_LIMITS.messageBytes) throw new RangeError(`RTC message exceeds ${APP_RTC_LIMITS.messageBytes} bytes`);
+	const frame = new Uint8Array(HEADER_BYTES + payload.byteLength);
+	frame[0] = flags;
+	new DataView(frame.buffer).setUint32(1, sequence >>> 0);
+	frame.set(payload, HEADER_BYTES);
+	return frame;
+}
+function decodeAppRtcFrame(frame) {
+	if (frame.byteLength < HEADER_BYTES) return null;
+	const view = new DataView(frame);
+	const flags = view.getUint8(0);
+	const sequence = view.getUint32(1);
+	const payload = new Uint8Array(frame, HEADER_BYTES);
+	if (flags & FLAG_BINARY) return {
+		data: payload.slice().buffer,
+		sequence
+	};
+	try {
+		return {
+			data: JSON.parse(decoder.decode(payload)),
+			sequence
+		};
+	} catch {
+		return null;
+	}
+}
+const isNewerSequence = (next, last) => last === null || next !== last && next - last >>> 0 < 2147483648;
+const publicationsKey = (members) => members.map((member) => `${member.participantId}:${member.publications?.map((item) => item.id).join(",") ?? ""}`).join(";");
+const GATHER_TIMEOUT_MS = 2e3;
+const CONNECT_TIMEOUT_MS = 15e3;
+const PENDING_RELIABLE_FRAMES = 256;
+const LATEST_BACKLOG_BYTES = 65536;
+const RECONNECT_DELAYS_MS = [
+	500,
+	1e3,
+	2e3,
+	5e3,
+	1e4,
+	3e4
+];
+const RATE_LIMIT_RETRY_MS = 1e3;
+var ConnectionReplacedError = class extends Error {
+	constructor() {
+		super("RTC connection was replaced");
+		this.name = "ConnectionReplacedError";
+	}
+};
+const policyOf = (delivery) => delivery === "latest" ? {
+	ordered: false,
+	maxRetransmits: 0
+} : { ordered: true };
+const isSessionLost = (error) => error instanceof HttpError && (error.code === "RTC_STALE" || error.code === "RTC_SESSION_NOT_FOUND");
+const isRoomGone = (error) => error instanceof HttpError && (error.code === "ROOM_NOT_FOUND" || error.code === "ROOM_EXPIRED");
+const chunk = (items, size) => {
+	const chunks = [];
+	for (let index = 0; index < items.length; index += size) chunks.push(items.slice(index, index + size));
+	return chunks;
+};
+const mediaKey = (participantId, publicationId) => `${participantId}:${publicationId}`;
+var AppRtcChannel = class {
+	rtc;
+	name;
+	delivery;
+	handlers = /* @__PURE__ */ new Set();
+	peerHandlers = /* @__PURE__ */ new Set();
+	openPeers = /* @__PURE__ */ new Set();
+	publication = null;
+	pending = [];
+	sequence = 0;
+	closed = false;
+	constructor(rtc, name, delivery) {
+		this.rtc = rtc;
+		this.name = name;
+		this.delivery = delivery;
+	}
+	get peers() {
+		return [...this.openPeers];
+	}
+	send(data) {
+		if (this.closed || this.rtc.state === "closed") return false;
+		this.sequence = this.sequence + 1 >>> 0;
+		const frame = encodeAppRtcFrame(data, this.sequence);
+		const channel = this.publication?.channel;
+		if (channel?.readyState === "open") return this.write(channel, frame);
+		if (this.delivery === "latest") this.pending = [frame];
+		else if (this.pending.length >= PENDING_RELIABLE_FRAMES) return false;
+		else this.pending.push(frame);
+		return true;
+	}
+	onMessage(handler) {
+		this.handlers.add(handler);
+		return () => this.handlers.delete(handler);
+	}
+	/** Reports when this client starts or stops receiving a peer's channel. */
+	onPeer(handler) {
+		this.peerHandlers.add(handler);
+		return () => this.peerHandlers.delete(handler);
+	}
+	close() {
+		if (this.closed) return;
+		this.closed = true;
+		this.handlers.clear();
+		this.peerHandlers.clear();
+		this.openPeers.clear();
+		this.pending = [];
+		this.rtc.closeChannel(this);
+	}
+	/** @internal */
+	get isOpen() {
+		return !this.closed;
+	}
+	/** @internal */
+	get publicationId() {
+		return this.publication?.id ?? null;
+	}
+	/** @internal */
+	attach(id, channel) {
+		this.publication = {
+			id,
+			channel
+		};
+		channel.binaryType = "arraybuffer";
+		const flush = () => {
+			const frames = this.pending;
+			this.pending = [];
+			for (const frame of frames) this.write(channel, frame);
+		};
+		if (channel.readyState === "open") flush();
+		else channel.addEventListener("open", flush, { once: true });
+	}
+	/** @internal */
+	detach() {
+		this.publication = null;
+	}
+	/** @internal */
+	fail() {
+		this.close();
+	}
+	/** @internal */
+	deliver(from, data) {
+		for (const handler of this.handlers) handler({
+			from,
+			data
+		});
+	}
+	/** @internal */
+	setPeer(participantId, open) {
+		if (open ? this.openPeers.has(participantId) : !this.openPeers.delete(participantId)) return;
+		if (open) this.openPeers.add(participantId);
+		for (const handler of this.peerHandlers) handler({
+			participantId,
+			open
+		});
+	}
+	write(channel, frame) {
+		if (this.delivery === "latest" && channel.bufferedAmount > LATEST_BACKLOG_BYTES) return false;
+		try {
+			channel.send(frame);
+			return true;
+		} catch {
+			return false;
+		}
+	}
+};
+var AppRoomRtc = class {
+	host;
+	_state = "connecting";
+	pc = null;
+	sessionId = null;
+	queue = Promise.resolve();
+	reconcileQueued = false;
+	reconcileFailures = 0;
+	reconnectAttempt = 0;
+	reconnectTimer = null;
+	generation = 0;
+	filter = null;
+	channels = /* @__PURE__ */ new Map();
+	channelsToPublish = /* @__PURE__ */ new Set();
+	remoteData = /* @__PURE__ */ new Map();
+	localTracks = /* @__PURE__ */ new Map();
+	remoteMedia = /* @__PURE__ */ new Map();
+	mediaByMid = /* @__PURE__ */ new Map();
+	stateHandlers = /* @__PURE__ */ new Set();
+	trackHandlers = /* @__PURE__ */ new Set();
+	offMembers;
+	constructor(host) {
+		this.host = host;
+		let published = "";
+		this.offMembers = host.onMembersChanged((members) => {
+			const next = publicationsKey(members);
+			if (next === published) return;
+			published = next;
+			this.scheduleReconcile();
+		});
+	}
+	get state() {
+		return this._state;
+	}
+	get tracks() {
+		const tracks = [];
+		for (const [key, item] of this.remoteMedia) {
+			if (!item.track) continue;
+			tracks.push({
+				participantId: item.participantId,
+				name: item.name,
+				kind: item.kind,
+				track: item.track,
+				quality: item.quality ?? null,
+				setQuality: (quality) => this.setQuality(key, quality)
+			});
+		}
+		return tracks;
+	}
+	get candidates() {
+		return this.mediaCandidates().map(({ candidate }) => candidate);
+	}
+	onStateChange(handler) {
+		this.stateHandlers.add(handler);
+		return () => this.stateHandlers.delete(handler);
+	}
+	onTracksChanged(handler) {
+		this.trackHandlers.add(handler);
+		return () => this.trackHandlers.delete(handler);
+	}
+	select(filter) {
+		this.filter = filter;
+		this.scheduleReconcile();
+	}
+	channel(name, options = {}) {
+		if (!isAppRtcName(name)) throw new AppRtcError("RTC_FAILED", `invalid RTC channel name: ${name}`);
+		const delivery = options.delivery ?? "reliable";
+		const existing = this.channels.get(name);
+		if (existing?.isOpen) {
+			if (existing.delivery !== delivery) throw new AppRtcError("RTC_FAILED", `RTC channel ${name} is already open with ${existing.delivery} delivery`);
+			return existing;
+		}
+		if (this._state === "closed") throw new AppRtcError("RTC_CLOSED", "RTC connection is closed");
+		const channel = new AppRtcChannel(this, name, delivery);
+		this.channels.set(name, channel);
+		this.publishChannel(channel);
+		this.scheduleReconcile();
+		return channel;
+	}
+	async publish(tracks) {
+		if (this._state === "closed") throw new AppRtcError("RTC_CLOSED", "RTC connection is closed");
+		const inputs = Object.entries(tracks);
+		for (const [name] of inputs) {
+			if (!isAppRtcName(name)) throw new AppRtcError("RTC_FAILED", `invalid RTC track name: ${name}`);
+			if (this.localTracks.has(name)) throw new AppRtcError("RTC_FAILED", `RTC track ${name} is already published`);
+		}
+		if (this.localTracks.size + inputs.length > APP_RTC_LIMITS.tracksPerMember) throw new AppRtcError("RTC_LIMIT_EXCEEDED", `at most ${APP_RTC_LIMITS.tracksPerMember} tracks per member`);
+		const entries = inputs.map(([name, input]) => {
+			const { track, simulcast } = "track" in input ? input : {
+				track: input,
+				simulcast: false
+			};
+			const kind = track.kind === "audio" ? "audio" : "video";
+			return this.localEntry(name, kind, track, simulcast === true && kind === "video");
+		});
+		for (const entry of entries) this.localTracks.set(entry.name, entry);
+		try {
+			await this.enqueue(() => this.publishTracks(entries.map((entry) => entry.name)));
+		} catch (error) {
+			if (!(error instanceof ConnectionReplacedError)) {
+				for (const entry of entries) this.dropLocal(entry);
+				throw toAppRtcError(error);
+			}
+		}
+		return Object.fromEntries(entries.map((entry) => [entry.name, this.localHandle(entry)]));
+	}
+	async stats() {
+		return this.pc ? readRtcTransportStats(await this.pc.getStats()) : {
+			path: null,
+			relayProtocol: null,
+			rttMs: null
+		};
+	}
+	close() {
+		if (this._state === "closed") return;
+		this.setState("closed");
+		this.offMembers();
+		if (this.reconnectTimer) clearTimeout(this.reconnectTimer);
+		for (const channel of this.channels.values()) channel.close();
+		for (const entry of this.localTracks.values()) entry.track.removeEventListener("ended", entry.onEnded);
+		this.teardown(true);
+	}
+	/** @internal */
+	async start() {
+		try {
+			await this.connect();
+		} catch (error) {
+			throw toAppRtcError(error);
+		}
+	}
+	/** @internal */
+	async verify() {
+		if (this._state === "closed" || !this.sessionId) return;
+		try {
+			await this.request("GET", `/${this.sessionId}`);
+		} catch (error) {
+			if (isSessionLost(error)) this.reconnect();
+		}
+	}
+	/** @internal */
+	closeChannel(channel) {
+		if (this.channels.get(channel.name) === channel) this.channels.delete(channel.name);
+		const id = channel.publicationId;
+		channel.detach();
+		if (id) this.enqueue(() => this.unpublishData([id])).catch(() => void 0);
+		this.scheduleReconcile();
+	}
+	localEntry(name, kind, track, simulcast) {
+		const entry = {
+			name,
+			kind,
+			track,
+			simulcast,
+			transceiver: null,
+			id: null,
+			ended: /* @__PURE__ */ new Set(),
+			onEnded: () => void 0
+		};
+		entry.onEnded = () => {
+			if (this.localTracks.get(name) !== entry) return;
+			for (const handler of entry.ended) handler();
+			this.stopLocal(entry).catch(() => void 0);
+		};
+		track.addEventListener("ended", entry.onEnded);
+		return entry;
+	}
+	localHandle(entry) {
+		return {
+			name: entry.name,
+			kind: entry.kind,
+			simulcast: entry.simulcast,
+			get track() {
+				return entry.track;
+			},
+			replace: async (track) => {
+				if (track.kind !== entry.kind) throw new AppRtcError("RTC_FAILED", `replace ${entry.name} with another ${entry.kind} track`);
+				if (this.localTracks.get(entry.name) !== entry) throw new AppRtcError("RTC_CLOSED", `RTC track ${entry.name} has stopped`);
+				entry.track.removeEventListener("ended", entry.onEnded);
+				entry.track = track;
+				track.addEventListener("ended", entry.onEnded);
+				await entry.transceiver?.sender.replaceTrack(track);
+			},
+			onEnded: (handler) => {
+				entry.ended.add(handler);
+				return () => entry.ended.delete(handler);
+			},
+			stop: () => this.stopLocal(entry)
+		};
+	}
+	dropLocal(entry) {
+		entry.track.removeEventListener("ended", entry.onEnded);
+		if (this.localTracks.get(entry.name) === entry) this.localTracks.delete(entry.name);
+	}
+	stopLocal(entry) {
+		if (this.localTracks.get(entry.name) !== entry) return Promise.resolve();
+		this.dropLocal(entry);
+		return this.enqueue(() => this.unpublishTrack(entry)).catch((error) => {
+			if (error instanceof ConnectionReplacedError) return;
+			throw toAppRtcError(error);
+		});
+	}
+	async publishTracks(names) {
+		const pc = this.requirePc();
+		const entries = names.flatMap((name) => {
+			const entry = this.localTracks.get(name);
+			return entry && !entry.id ? [entry] : [];
+		});
+		if (entries.length === 0) return;
+		for (const entry of entries) entry.transceiver = pc.addTransceiver(entry.track, {
+			direction: "sendonly",
+			...entry.simulcast ? { sendEncodings: APP_RTC_SIMULCAST_LAYERS.map(({ rid, scaleResolutionDownBy }) => ({
+				rid,
+				scaleResolutionDownBy
+			})) } : {}
+		});
+		const offer = await this.localOffer(pc);
+		let result;
+		try {
+			result = await this.request("POST", `/${this.sessionId}/publish`, {
+				offer,
+				tracks: entries.map((entry) => ({
+					name: entry.name,
+					kind: entry.kind,
+					mid: entry.transceiver?.mid ?? "",
+					...entry.simulcast ? { simulcast: true } : {}
+				}))
+			});
+		} catch (error) {
+			if (error instanceof ConnectionReplacedError) throw error;
+			await this.settleOffer(pc, void 0).catch(() => void 0);
+			for (const entry of entries) {
+				entry.transceiver?.stop();
+				entry.transceiver = null;
+			}
+			throw error;
+		}
+		await this.settleOffer(pc, result.answer);
+		for (const publication of result.publications) {
+			const entry = entries.find((candidate) => candidate.name === publication.name);
+			if (entry) entry.id = publication.id;
+		}
+	}
+	async unpublishTrack(entry) {
+		if (!entry.id || !entry.transceiver || !this.pc) return;
+		const id = entry.id;
+		entry.transceiver.stop();
+		await this.offerExchange(this.pc, (offer) => this.request("POST", `/${this.sessionId}/unpublish`, {
+			ids: [id],
+			offer
+		}));
+		entry.id = null;
+	}
+	publishChannel(channel) {
+		this.channelsToPublish.add(channel);
+		if (this.channelsToPublish.size > 1 || !this.pc) return;
+		this.enqueue(async () => {
+			const batch = [...this.channelsToPublish];
+			this.channelsToPublish.clear();
+			try {
+				await this.publishChannels(batch);
+			} catch (error) {
+				if (isSessionLost(error) || error instanceof ConnectionReplacedError) throw error;
+				if (error instanceof HttpError && error.code === "RTC_RATE_LIMITED") {
+					setTimeout(() => {
+						for (const item of batch) if (item.isOpen) this.publishChannel(item);
+					}, RATE_LIMIT_RETRY_MS);
+					return;
+				}
+				for (const item of batch) item.fail();
+				console.warn("[Cohub AppRtc] failed to publish channels", error);
+			}
+		}).catch(() => void 0);
+	}
+	async connect() {
+		const generation = ++this.generation;
+		const opened = await this.send("POST", "", {
+			ticket: this.host.ticket,
+			participantId: this.host.participantId()
+		});
+		if (generation !== this.generation || this._state === "closed") {
+			this.send("DELETE", `/${opened.sessionId}`).catch(() => void 0);
+			return;
+		}
+		const pc = new RTCPeerConnection({
+			iceServers: opened.iceServers,
+			bundlePolicy: "max-bundle"
+		});
+		this.pc = pc;
+		this.sessionId = opened.sessionId;
+		pc.addEventListener("connectionstatechange", () => {
+			if (this.pc !== pc) return;
+			if (pc.connectionState === "connected") {
+				this.reconnectAttempt = 0;
+				this.setState("connected");
+			} else if (pc.connectionState === "failed") this.reconnect();
+		});
+		pc.addEventListener("track", (event) => this.onTrack(event));
+		const ready = (async () => {
+			await this.answerOffer(opened.offer);
+			await this.connected(pc);
+		})();
+		this.queue = ready.catch(() => void 0);
+		try {
+			await ready;
+		} catch (error) {
+			if (generation === this.generation) this.reconnect();
+			throw error;
+		}
+		this.channelsToPublish.clear();
+		const republish = [...this.channels.values()].filter((channel) => channel.isOpen);
+		const tracks = [...this.localTracks.keys()];
+		await Promise.all([republish.length ? this.enqueue(() => this.publishChannels(republish)).catch((error) => {
+			if (error instanceof ConnectionReplacedError || isSessionLost(error)) return;
+			for (const channel of republish) channel.fail();
+			console.warn("[Cohub AppRtc] failed to publish channels on the new connection", error);
+		}) : null, tracks.length ? this.enqueue(() => this.publishTracks(tracks)).catch((error) => {
+			if (error instanceof ConnectionReplacedError || isSessionLost(error)) return;
+			console.warn("[Cohub AppRtc] failed to publish tracks on the new connection", error);
+		}) : null]);
+		this.scheduleReconcile();
+	}
+	connected(pc) {
+		if (pc.connectionState === "connected") return Promise.resolve();
+		return new Promise((resolve, reject) => {
+			const timer = setTimeout(() => done(/* @__PURE__ */ new Error("RTC connection timed out")), CONNECT_TIMEOUT_MS);
+			const done = (error) => {
+				clearTimeout(timer);
+				pc.removeEventListener("connectionstatechange", check);
+				if (error) reject(error);
+				else resolve();
+			};
+			const check = () => {
+				if (pc.connectionState === "connected") done();
+				else if (pc.connectionState === "failed" || pc.connectionState === "closed") done(/* @__PURE__ */ new Error("RTC connection failed"));
+			};
+			pc.addEventListener("connectionstatechange", check);
+		});
+	}
+	reconnect() {
+		if (this._state === "closed" || this.reconnectTimer) return;
+		this.setState(this._state === "connecting" ? "connecting" : "reconnecting");
+		this.teardown(true);
+		const delay = RECONNECT_DELAYS_MS[Math.min(this.reconnectAttempt, RECONNECT_DELAYS_MS.length - 1)] ?? 3e4;
+		this.reconnectAttempt += 1;
+		this.reconnectTimer = setTimeout(() => {
+			this.reconnectTimer = null;
+			this.connect().catch((error) => {
+				if (isRoomGone(error) || error instanceof HttpError && (error.status === 403 || error.status === 503)) this.close();
+				else this.reconnect();
+			});
+		}, delay);
+	}
+	teardown(release) {
+		this.generation += 1;
+		const sessionId = this.sessionId;
+		this.sessionId = null;
+		this.queue = Promise.resolve();
+		for (const channel of this.channels.values()) channel.detach();
+		for (const item of this.remoteData.values()) this.dropRemoteData(item);
+		this.remoteData.clear();
+		for (const item of this.localTracks.values()) {
+			item.transceiver = null;
+			item.id = null;
+		}
+		const hadTracks = this.remoteMedia.size > 0;
+		this.remoteMedia.clear();
+		this.mediaByMid.clear();
+		this.pc?.close();
+		this.pc = null;
+		if (hadTracks) this.notifyTracks();
+		if (release && sessionId) this.send("DELETE", `/${sessionId}`).catch(() => void 0);
+	}
+	enqueue(operation) {
+		const generation = this.generation;
+		const run = async () => {
+			if (generation !== this.generation || !this.pc || !this.sessionId) throw new ConnectionReplacedError();
+			try {
+				return await operation();
+			} catch (error) {
+				if (isSessionLost(error)) this.reconnect();
+				throw error;
+			}
+		};
+		const next = this.queue.then(run, run);
+		this.queue = next.catch(() => void 0);
+		return next;
+	}
+	async publishChannels(channels) {
+		const pc = this.requirePc();
+		const open = channels.filter((channel) => channel.isOpen && !channel.publicationId);
+		if (open.length === 0) return;
+		const result = await this.request("POST", `/${this.sessionId}/publish`, { channels: open.map((channel) => ({
+			name: channel.name,
+			delivery: channel.delivery
+		})) });
+		for (const publication of result.publications) {
+			const channel = open.find((item) => item.name === publication.name);
+			const id = result.channelIds?.[publication.id];
+			if (!channel || id === void 0) continue;
+			const dataChannel = pc.createDataChannel(publication.name, {
+				negotiated: true,
+				id,
+				...policyOf(channel.delivery)
+			});
+			channel.attach(publication.id, dataChannel);
+			if (!channel.isOpen) await this.unpublishData([publication.id]);
+		}
+	}
+	async unpublishData(ids) {
+		await this.request("POST", `/${this.sessionId}/unpublish`, { ids });
 	}
-	async getSubscriptions(input) {
-		const params = new URLSearchParams();
-		if (input?.page) params.set("page", String(input.page));
-		if (input?.limit) params.set("limit", String(input.limit));
-		const query = params.toString();
-		return this.transport.request(`/api/billing/subscriptions${query ? `?${query}` : ""}`);
+	async settleOffer(pc, answer) {
+		if (answer) await pc.setRemoteDescription(answer);
+		else if (pc.signalingState === "have-local-offer") await pc.setLocalDescription({ type: "rollback" });
 	}
-	/** Confirms a returned checkout against the provider's order/subscription state. */
-	async confirmCheckout(productKey, checkoutId) {
-		return this.transport.request("/api/billing/checkout-confirmation", {
-			method: "POST",
-			body: JSON.stringify({
-				productKey,
-				checkoutId
-			})
+	async offerExchange(pc, send) {
+		const offer = await this.localOffer(pc);
+		let answer;
+		try {
+			({answer} = await send(offer));
+		} catch (error) {
+			if (!(error instanceof ConnectionReplacedError)) await this.settleOffer(pc, void 0).catch(() => void 0);
+			throw error;
+		}
+		await this.settleOffer(pc, answer);
+	}
+	scheduleReconcile() {
+		if (this.reconcileQueued || !this.pc || this._state === "closed") return;
+		this.reconcileQueued = true;
+		this.enqueue(async () => {
+			this.reconcileQueued = false;
+			await this.reconcile();
+			this.reconcileFailures = 0;
+		}).catch((error) => {
+			this.reconcileQueued = false;
+			if (isSessionLost(error) || error instanceof ConnectionReplacedError) return;
+			console.warn("[Cohub AppRtc] failed to update subscriptions", error);
+			if (error instanceof HttpError && error.code === "RTC_LIMIT_EXCEEDED") return;
+			const delay = RECONNECT_DELAYS_MS[Math.min(this.reconcileFailures, RECONNECT_DELAYS_MS.length - 1)] ?? 3e4;
+			this.reconcileFailures += 1;
+			const generation = this.generation;
+			setTimeout(() => {
+				if (generation === this.generation) this.scheduleReconcile();
+			}, delay);
 		});
 	}
-	async previewPromotionCode(input) {
-		return this.transport.request("/api/billing/promotion-code-preview", {
-			method: "POST",
-			body: JSON.stringify(input)
-		});
+	mediaCandidates() {
+		const self = this.host.participantId();
+		const candidates = [];
+		for (const member of this.host.members()) {
+			if (member.participantId === self) continue;
+			for (const publication of member.publications ?? []) {
+				if (publication.kind === "data") continue;
+				candidates.push({
+					publication,
+					candidate: {
+						participantId: member.participantId,
+						name: publication.name,
+						kind: publication.kind,
+						simulcast: publication.simulcast === true,
+						subscribed: this.remoteMedia.has(mediaKey(member.participantId, publication.id))
+					}
+				});
+			}
+		}
+		return candidates;
+	}
+	async reconcile() {
+		const self = this.host.participantId();
+		const wantedData = /* @__PURE__ */ new Map();
+		for (const member of this.host.members()) {
+			if (member.participantId === self) continue;
+			for (const publication of member.publications ?? []) {
+				if (publication.kind !== "data") continue;
+				const channel = this.channels.get(publication.name);
+				if (channel?.isOpen && channel.delivery === (publication.delivery ?? "reliable")) wantedData.set(mediaKey(member.participantId, publication.id), {
+					participantId: member.participantId,
+					publicationId: publication.id,
+					name: publication.name,
+					delivery: channel.delivery
+				});
+			}
+		}
+		const wantedMedia = /* @__PURE__ */ new Map();
+		for (const { candidate, publication } of this.mediaCandidates()) {
+			if (wantedMedia.size >= APP_RTC_LIMITS.mediaSubscriptions) break;
+			if (this.filter && !this.filter(candidate)) continue;
+			const key = mediaKey(candidate.participantId, publication.id);
+			const quality = this.remoteMedia.get(key)?.quality ?? (candidate.simulcast ? "high" : void 0);
+			wantedMedia.set(key, {
+				participantId: candidate.participantId,
+				publicationId: publication.id,
+				name: candidate.name,
+				kind: candidate.kind,
+				...quality ? { quality } : {}
+			});
+		}
+		await this.reconcileData(wantedData);
+		await this.reconcileMedia(wantedMedia);
+		if ([...wantedData.keys()].some((key) => !this.remoteData.has(key)) || [...wantedMedia.keys()].some((key) => !this.remoteMedia.has(key))) throw new AppRtcError("RTC_FAILED", "Some RTC subscriptions could not be established");
+	}
+	dropRemoteData(item) {
+		item.channel.close();
+		this.channels.get(item.name)?.setPeer(item.participantId, false);
+	}
+	async reconcileData(wanted) {
+		const pc = this.requirePc();
+		const stale = [...this.remoteData].filter(([key]) => !wanted.has(key));
+		for (const batch of chunk(stale, APP_RTC_LIMITS.batch)) {
+			await this.request("POST", `/${this.sessionId}/unsubscribe`, { items: batch.map(([, item]) => ({
+				participantId: item.participantId,
+				publicationId: item.publicationId
+			})) });
+			for (const [key, item] of batch) {
+				this.dropRemoteData(item);
+				this.remoteData.delete(key);
+			}
+		}
+		const missing = [...wanted].filter(([key]) => !this.remoteData.has(key)).map(([, item]) => item);
+		for (const batch of chunk(missing, APP_RTC_LIMITS.batch)) {
+			const result = await this.request("POST", `/${this.sessionId}/subscribe`, {
+				kind: "data",
+				items: batch.map(({ participantId, publicationId }) => ({
+					participantId,
+					publicationId
+				}))
+			});
+			for (const subscription of result.subscriptions) {
+				const item = batch.find((entry) => entry.participantId === subscription.participantId && entry.publicationId === subscription.publicationId);
+				if (!item || subscription.channelId === void 0) continue;
+				const channel = pc.createDataChannel(item.name, {
+					negotiated: true,
+					id: subscription.channelId,
+					...policyOf(item.delivery)
+				});
+				channel.binaryType = "arraybuffer";
+				const remote = {
+					name: item.name,
+					participantId: item.participantId,
+					publicationId: item.publicationId,
+					channel,
+					last: null
+				};
+				channel.addEventListener("message", (event) => this.onData(remote, event.data));
+				channel.addEventListener("open", () => {
+					if (this.remoteData.get(mediaKey(remote.participantId, remote.publicationId)) === remote) this.channels.get(remote.name)?.setPeer(remote.participantId, true);
+				});
+				this.remoteData.set(mediaKey(item.participantId, item.publicationId), remote);
+			}
+		}
 	}
-	async createOrder(productKey, input) {
-		return this.transport.request("/api/billing/orders", {
-			method: "POST",
-			body: JSON.stringify({
-				...input ?? {},
-				productKey
-			})
+	async reconcileMedia(wanted) {
+		const stale = [...this.remoteMedia].filter(([key]) => !wanted.has(key));
+		const missing = [...wanted].filter(([key]) => !this.remoteMedia.has(key)).map(([, item]) => item);
+		const moves = [];
+		for (const to of [...missing]) {
+			const index = stale.findIndex(([, receiver]) => receiver.kind === to.kind);
+			const found = index >= 0 ? stale.splice(index, 1)[0] : void 0;
+			if (!found) continue;
+			moves.push({
+				from: found[0],
+				receiver: found[1],
+				to
+			});
+			missing.splice(missing.indexOf(to), 1);
+		}
+		if (moves.length) {
+			const moved = await this.retarget(moves.map(({ receiver, to }) => ({
+				...to,
+				mid: receiver.mid
+			})));
+			for (const { from, receiver, to } of moves) if (moved.has(receiver.mid)) {
+				this.remoteMedia.delete(from);
+				this.remoteMedia.set(mediaKey(to.participantId, to.publicationId), {
+					...to,
+					mid: receiver.mid,
+					track: receiver.track
+				});
+				this.mediaByMid.set(receiver.mid, mediaKey(to.participantId, to.publicationId));
+			} else {
+				stale.push([from, receiver]);
+				missing.push(to);
+			}
+			if (moved.size) this.notifyTracks();
+		}
+		await this.unsubscribeMedia(stale);
+		await this.subscribeMedia(missing);
+	}
+	async retarget(items) {
+		try {
+			const result = await this.request("PATCH", `/${this.sessionId}/media`, { items: items.map(({ participantId, publicationId, mid, quality }) => ({
+				participantId,
+				publicationId,
+				mid,
+				...quality ? { quality } : {}
+			})) });
+			if (result.offer) await this.answerOffer(result.offer);
+			return new Set(result.updated.map((item) => item.mid));
+		} catch (error) {
+			if (error instanceof ConnectionReplacedError || isSessionLost(error)) throw error;
+			return /* @__PURE__ */ new Set();
+		}
+	}
+	async setQuality(key, quality) {
+		await this.enqueue(async () => {
+			const item = this.remoteMedia.get(key);
+			if (!item || item.quality === void 0 || item.quality === quality) return;
+			if ((await this.retarget([{
+				...item,
+				quality
+			}])).has(item.mid)) {
+				item.quality = quality;
+				this.notifyTracks();
+			}
+		}).catch((error) => {
+			if (error instanceof ConnectionReplacedError) return;
+			throw toAppRtcError(error);
 		});
 	}
-	async createSubscription(productKey, input) {
-		return this.transport.request("/api/billing/subscriptions", {
-			method: "POST",
-			body: JSON.stringify({
-				...input ?? {},
-				productKey
-			})
+	async unsubscribeMedia(stale) {
+		if (stale.length === 0) return;
+		const pc = this.requirePc();
+		for (const [, item] of stale) {
+			pc.getTransceivers().find((transceiver) => transceiver.mid === item.mid)?.stop();
+			item.track = null;
+		}
+		this.notifyTracks();
+		await this.offerExchange(pc, (offer) => this.request("POST", `/${this.sessionId}/unsubscribe`, {
+			items: stale.map(([, item]) => ({
+				participantId: item.participantId,
+				publicationId: item.publicationId
+			})),
+			offer
+		}));
+		for (const [key, item] of stale) {
+			this.remoteMedia.delete(key);
+			this.mediaByMid.delete(item.mid);
+		}
+	}
+	async subscribeMedia(missing) {
+		if (missing.length === 0) return;
+		const result = await this.request("POST", `/${this.sessionId}/subscribe`, {
+			kind: "media",
+			items: missing.map(({ participantId, publicationId, quality }) => ({
+				participantId,
+				publicationId,
+				...quality ? { quality } : {}
+			}))
 		});
+		for (const subscription of result.subscriptions) {
+			const item = missing.find((entry) => entry.participantId === subscription.participantId && entry.publicationId === subscription.publicationId);
+			if (!item || !subscription.mid) continue;
+			const key = mediaKey(item.participantId, item.publicationId);
+			this.remoteMedia.set(key, {
+				...item,
+				mid: subscription.mid,
+				track: null
+			});
+			this.mediaByMid.set(subscription.mid, key);
+		}
+		if (!result.offer) return;
+		try {
+			await this.answerOffer(result.offer);
+		} catch (error) {
+			if (!(error instanceof ConnectionReplacedError)) this.reconnect();
+			throw error;
+		}
 	}
-	async cancelSubscriptionCheckout(subscriptionId) {
-		return this.transport.request(`/api/billing/subscriptions/${encodeURIComponent(subscriptionId)}/checkout`, { method: "DELETE" });
+	async answerOffer(offer) {
+		const pc = this.requirePc();
+		await pc.setRemoteDescription(offer);
+		await pc.setLocalDescription(await pc.createAnswer());
+		await waitForIceGathering(pc, GATHER_TIMEOUT_MS);
+		const answer = pc.localDescription;
+		if (!answer) throw new Error("the browser produced no answer");
+		await this.request("PUT", `/${this.sessionId}`, { answer: {
+			type: "answer",
+			sdp: answer.sdp
+		} });
+	}
+	async localOffer(pc) {
+		await pc.setLocalDescription(await pc.createOffer());
+		await waitForIceGathering(pc, GATHER_TIMEOUT_MS);
+		const offer = pc.localDescription;
+		if (!offer) throw new Error("the browser produced no offer");
+		return {
+			type: "offer",
+			sdp: offer.sdp
+		};
 	}
-	async cancelSubscriptionAutoRenew(subscriptionId) {
-		return this.transport.request(`/api/billing/subscriptions/${encodeURIComponent(subscriptionId)}`, {
-			method: "PATCH",
-			body: JSON.stringify({ cancelAtPeriodEnd: true })
+	async request(method, path, body) {
+		const generation = this.generation;
+		const settled = await this.send(method, path, body).then((value) => ({ value }), (error) => ({ error }));
+		if (generation !== this.generation) throw new ConnectionReplacedError();
+		if ("error" in settled) throw settled.error;
+		return settled.value;
+	}
+	send(method, path, body) {
+		const url = `/api/apps/${encodeURIComponent(this.host.appId)}/realtime/rooms/${encodeURIComponent(this.host.roomId)}/rtc${path}`;
+		return this.host.transport.request(url, {
+			method,
+			...body === void 0 ? {} : {
+				headers: { "Content-Type": "application/json" },
+				body: JSON.stringify(body)
+			}
 		});
 	}
-	async createRedemption(input) {
-		return this.transport.request("/api/billing/redemptions", {
-			method: "POST",
-			body: JSON.stringify(input)
+	requirePc() {
+		if (!this.pc || !this.sessionId) throw new ConnectionReplacedError();
+		return this.pc;
+	}
+	onData(remote, raw) {
+		if (!(raw instanceof ArrayBuffer)) return;
+		const frame = decodeAppRtcFrame(raw);
+		if (!frame) return;
+		const channel = this.channels.get(remote.name);
+		if (!channel?.isOpen) return;
+		if (channel.delivery === "latest") {
+			if (!isNewerSequence(frame.sequence, remote.last)) return;
+			remote.last = frame.sequence;
+		}
+		channel.deliver(remote.participantId, frame.data);
+	}
+	onTrack(event) {
+		const mid = event.transceiver.mid;
+		const key = mid ? this.mediaByMid.get(mid) : void 0;
+		const item = key ? this.remoteMedia.get(key) : void 0;
+		if (!item || !mid) return;
+		item.track = event.track;
+		event.track.addEventListener("ended", () => {
+			const current = this.mediaByMid.get(mid);
+			const owner = current ? this.remoteMedia.get(current) : void 0;
+			if (owner?.track === event.track) {
+				owner.track = null;
+				this.notifyTracks();
+			}
 		});
+		this.notifyTracks();
+	}
+	notifyTracks() {
+		const tracks = this.tracks;
+		for (const handler of this.trackHandlers) handler(tracks);
+	}
+	setState(state) {
+		if (this._state === state) return;
+		this._state = state;
+		for (const handler of this.stateHandlers) handler(state);
 	}
 };
 //#endregion
@@ -3911,13 +5144,20 @@ const byteLength = (text) => textEncoder.encode(text).byteLength;
 * Ceiling on deltas held during a join, so a stalled handshake cannot buffer without
 * limit. Dropping the tail needs no extra signal: the gap detection below reports it.
 */
-const WORK_ROOM_MAX_JOIN_BUFFER = 512;
+const APP_ROOM_MAX_JOIN_BUFFER = 512;
 /** Room events that mutate state, so they must not be applied before the join snapshot. */
-const WORK_ROOM_DELTA_EVENTS = /* @__PURE__ */ new Set([
+const APP_ROOM_DELTA_EVENTS = /* @__PURE__ */ new Set([
 	"realtime.room.event",
 	"realtime.room.member.joined",
 	"realtime.room.member.left",
-	"realtime.room.presence.updated"
+	"realtime.room.presence.updated",
+	"realtime.room.publications.updated"
+]);
+const APP_ROOM_MEMBER_EVENTS = /* @__PURE__ */ new Set([
+	"realtime.room.member.joined",
+	"realtime.room.member.left",
+	"realtime.room.presence.updated",
+	"realtime.room.publications.updated"
 ]);
 const requestError = (event) => {
 	const payload = event.payload;
@@ -3930,6 +5170,7 @@ const isRoomEvent = (event, roomId) => {
 var AppRoom = class {
 	websocket;
 	admission;
+	appContext;
 	id;
 	code;
 	createdAt;
@@ -3957,9 +5198,12 @@ var AppRoom = class {
 	offOpen;
 	offClose;
 	offReconnecting;
-	constructor(websocket, admission) {
+	instanceId = randomId().replace(/[^A-Za-z0-9_-]/g, "");
+	rtcConnection = null;
+	constructor(websocket, admission, appContext) {
 		this.websocket = websocket;
 		this.admission = admission;
+		this.appContext = appContext;
 		this.id = admission.room.id;
 		this.code = admission.room.code;
 		this.createdAt = admission.room.createdAt;
@@ -4085,6 +5329,66 @@ var AppRoom = class {
 			clientEventId: typeof payload.clientEventId === "string" ? payload.clientEventId : null
 		};
 	}
+	/** Published events after `after`, oldest first; without it, the newest ones. */
+	async history(input = {}) {
+		this.assertJoined();
+		if (!this.websocket.supportsCapability("realtime.room.history.v1")) throw new Error("Room history is not supported by the Gateway");
+		const requestId = randomId();
+		const response = await this.request(requestId, /* @__PURE__ */ new Set(["realtime.room.history"]), () => this.websocket.readRealtimeRoomHistory({
+			roomId: this.id,
+			...input,
+			requestId
+		}));
+		return this.toHistory(response.payload);
+	}
+	/** An invite for someone outside the App, e.g. an Agent: `cohub rooms join <invite>`. */
+	async invite(input = {}) {
+		this.assertJoined();
+		const context = this.appContext;
+		if (!context) throw new Error("Invites are only available inside a published App");
+		return context.transport.request(`/api/apps/${encodeURIComponent(context.appId)}/realtime/rooms/${encodeURIComponent(this.id)}/invites`, {
+			method: "POST",
+			headers: { "Content-Type": "application/json" },
+			body: JSON.stringify({
+				ticket: this.admission.ticket,
+				...input
+			})
+		});
+	}
+	rtc() {
+		this.assertJoined();
+		if (this.rtcConnection) {
+			const current = this.rtcConnection;
+			return current.then((rtc) => {
+				if (rtc.state !== "closed") return rtc;
+				return (this.rtcConnection === current ? this.openRtc() : this.rtcConnection) ?? this.openRtc();
+			});
+		}
+		return this.openRtc();
+	}
+	openRtc() {
+		this.assertJoined();
+		const context = this.appContext;
+		if (!context) return Promise.reject(new AppRtcError("RTC_UNSUPPORTED", "RTC is only available inside a published App"));
+		if (typeof RTCPeerConnection === "undefined") return Promise.reject(new AppRtcError("RTC_UNSUPPORTED", "RTC needs a browser with WebRTC"));
+		if (!this.websocket.supportsCapability("realtime.room.rtc.v1")) return Promise.reject(new AppRtcError("RTC_UNSUPPORTED", "RTC is not supported by the Gateway"));
+		const rtc = new AppRoomRtc({
+			roomId: this.id,
+			appId: context.appId,
+			ticket: this.admission.ticket,
+			transport: context.transport,
+			participantId: () => this._participantId,
+			members: () => this._members,
+			onMembersChanged: (handler) => this.onMembersChanged(handler)
+		});
+		const opening = rtc.start().then(() => rtc, (error) => {
+			rtc.close();
+			if (this.rtcConnection === opening) this.rtcConnection = null;
+			throw error;
+		});
+		this.rtcConnection = opening;
+		return opening;
+	}
 	async setPresence(presence) {
 		this.assertJoined();
 		const requestId = randomId();
@@ -4126,17 +5430,23 @@ var AppRoom = class {
 		if (!this.websocket.supportsCapability("realtime.room.v1") && this.websocket.state === "open") throw new Error("Realtime rooms are not supported by the Gateway");
 		this.setState(isReconnect ? "reconnecting" : "connecting");
 		const requestId = randomId();
+		const after = isReconnect && this.lastSequence > 0 && this.websocket.supportsCapability("realtime.room.history.v1") ? this.lastSequence : void 0;
+		let missed = null;
 		this.joinBuffer = [];
 		try {
 			const payload = (await this.request(requestId, /* @__PURE__ */ new Set(["realtime.room.joined"]), () => this.websocket.joinRealtimeRoom({
 				roomId: this.id,
 				ticket: this.admission.ticket,
+				instanceId: this.instanceId,
+				after,
 				requestId
 			}))).payload;
 			if (typeof payload.participantId !== "string" || !Array.isArray(payload.members)) throw new Error("invalid room join response");
 			this._participantId = payload.participantId;
 			this._members = payload.members;
-			this.lastSequence = typeof payload.sequence === "number" ? payload.sequence : 0;
+			const sequence = typeof payload.sequence === "number" ? payload.sequence : 0;
+			if (after !== void 0 && sequence > after) missed = await this.catchUp(payload.missed, after, sequence);
+			this.lastSequence = sequence;
 		} catch (error) {
 			this.joinBuffer = null;
 			throw error;
@@ -4144,6 +5454,11 @@ var AppRoom = class {
 		this.hasJoined = true;
 		this.setState("joined");
 		this.notifyMembers();
+		if (missed) {
+			const { lost } = missed;
+			if (lost) for (const handler of this.outOfSyncHandlers) handler(lost[0], lost[1]);
+			for (const event of missed.events) this.emit(event);
+		}
 		const buffered = this.joinBuffer ?? [];
 		this.joinBuffer = null;
 		for (const item of buffered) {
@@ -4151,6 +5466,7 @@ var AppRoom = class {
 			if (typeof sequence === "number" && sequence <= this.lastSequence) continue;
 			this.handleEvent(item);
 		}
+		if (isReconnect) this.rtcConnection?.then((rtc) => rtc.verify()).catch(() => void 0);
 	}
 	request(requestId, expected, send) {
 		return new Promise((resolve, reject) => {
@@ -4198,14 +5514,13 @@ var AppRoom = class {
 			this.takePending(event.requestId);
 			awaiting.resolve(event);
 		}
-		if (this.joinBuffer && WORK_ROOM_DELTA_EVENTS.has(event.type)) {
-			if (this.joinBuffer.length < WORK_ROOM_MAX_JOIN_BUFFER) this.joinBuffer.push(event);
+		if (this.joinBuffer && APP_ROOM_DELTA_EVENTS.has(event.type)) {
+			if (this.joinBuffer.length < APP_ROOM_MAX_JOIN_BUFFER) this.joinBuffer.push(event);
 			return;
 		}
 		const payload = event.payload;
-		const sequence = typeof payload.sequence === "number" ? payload.sequence : null;
-		if (sequence !== null) this.observeSequence(sequence);
-		if (event.type === "realtime.room.member.joined" || event.type === "realtime.room.member.left" || event.type === "realtime.room.presence.updated") {
+		if (APP_ROOM_DELTA_EVENTS.has(event.type) && typeof payload.sequence === "number") this.observeSequence(payload.sequence);
+		if (APP_ROOM_MEMBER_EVENTS.has(event.type)) {
 			const member = payload.member;
 			if (member?.participantId) {
 				const members = new Map(this._members.map((item) => [item.participantId, item]));
@@ -4225,11 +5540,10 @@ var AppRoom = class {
 			return;
 		}
 		if (event.type !== "realtime.room.event") return;
-		const roomEvent = event;
-		const roomPayload = roomEvent.payload;
-		const item = {
-			id: roomEvent.id,
-			timestamp: roomEvent.timestamp,
+		const { id, timestamp, payload: roomPayload } = event;
+		this.emit({
+			id,
+			timestamp,
 			roomId: roomPayload.roomId,
 			sequence: roomPayload.sequence,
 			type: roomPayload.event,
@@ -4237,7 +5551,35 @@ var AppRoom = class {
 			clientEventId: roomPayload.clientEventId,
 			sender: roomPayload.sender,
 			self: roomPayload.sender.participantId === this.participantId
+		});
+	}
+	async catchUp(first, after, sequence) {
+		if (!first) return {
+			events: [],
+			lost: [after + 1, sequence]
+		};
+		const events = this.toHistory(first).events;
+		const { truncated } = first;
+		let { cursor } = first;
+		while (cursor < sequence) {
+			const requestId = randomId();
+			const page = (await this.request(requestId, /* @__PURE__ */ new Set(["realtime.room.history"]), () => this.websocket.readRealtimeRoomHistory({
+				roomId: this.id,
+				after: cursor,
+				requestId
+			})).catch(() => null))?.payload;
+			if (!page || page.cursor <= cursor) break;
+			events.push(...this.toHistory(page).events);
+			cursor = page.cursor;
+		}
+		const kept = events.filter((event) => event.sequence <= sequence);
+		const lost = truncated ? [after + 1, kept[0]?.sequence ?? sequence] : cursor < sequence ? [cursor + 1, sequence] : null;
+		return {
+			events: kept,
+			lost: lost && lost[1] > lost[0] ? lost : null
 		};
+	}
+	emit(item) {
 		this.handlers.get(item.type)?.forEach((handler) => {
 			handler(item);
 		});
@@ -4245,6 +5587,18 @@ var AppRoom = class {
 			handler(item);
 		});
 	}
+	toHistory(history) {
+		return {
+			events: history.events.map((event) => ({
+				...event,
+				data: event.data,
+				roomId: this.id,
+				self: event.sender.participantId === this.participantId
+			})),
+			cursor: history.cursor,
+			truncated: history.truncated
+		};
+	}
 	observeSequence(sequence) {
 		if (this.lastSequence > 0 && sequence > this.lastSequence + 1) for (const handler of this.outOfSyncHandlers) handler(this.lastSequence + 1, sequence);
 		if (sequence > this.lastSequence) this.lastSequence = sequence;
@@ -4276,6 +5630,9 @@ var AppRoom = class {
 		this.dispose();
 	}
 	dispose() {
+		const rtc = this.rtcConnection;
+		this.rtcConnection = null;
+		rtc?.then((connection) => connection.close()).catch(() => void 0);
 		this.offEvent();
 		this.offOpen();
 		this.offClose();
@@ -4294,28 +5651,33 @@ var AppRealtimeApi = class {
 		this.getContext = getContext;
 	}
 	async createRoom(input = {}) {
-		const admission = await this.transport.request(`/api/apps/${encodeURIComponent(await this.requireAppId())}/realtime/rooms`, {
+		const appId = await this.requireAppId();
+		const admission = await this.transport.request(`/api/apps/${encodeURIComponent(appId)}/realtime/rooms`, {
 			method: "POST",
 			headers: { "Content-Type": "application/json" },
 			body: JSON.stringify(input)
 		});
-		return this.openRoom(admission);
+		return this.openRoom(appId, admission);
 	}
 	async joinRoom(input) {
-		const admission = await this.transport.request(`/api/apps/${encodeURIComponent(await this.requireAppId())}/realtime/rooms/join`, {
+		const appId = await this.requireAppId();
+		const admission = await this.transport.request(`/api/apps/${encodeURIComponent(appId)}/realtime/rooms/join`, {
 			method: "POST",
 			headers: { "Content-Type": "application/json" },
 			body: JSON.stringify(input)
 		});
-		return this.openRoom(admission);
+		return this.openRoom(appId, admission);
 	}
 	async requireAppId() {
 		const context = await this.getContext();
 		if (!context?.app?.id) throw new Error("App context is unavailable — not running inside a published app runtime.");
 		return context.app.id;
 	}
-	async openRoom(admission) {
-		const room = new AppRoom(this.websocket, admission);
+	async openRoom(appId, admission) {
+		const room = new AppRoom(this.websocket, admission, {
+			transport: this.transport,
+			appId
+		});
 		try {
 			await room.connect();
 			return room;
@@ -4582,10 +5944,12 @@ var AppWindowApi = class {
 	}
 	/** Report the tab title, save status, and whether work is still unsaved. */
 	setState(patch) {
-		this.state = {
+		const next = {
 			...this.state,
 			...patch
 		};
+		if (this.stateReported && next.title === this.state.title && next.status === this.state.status && next.dirty === this.state.dirty) return;
+		this.state = next;
 		this.stateReported = true;
 		this.listen();
 		this.transport.notify?.(buildAppRuntimeWindowState(this.state));
@@ -5392,6 +6756,18 @@ var AppRuntimeApi = class {
 			reason: response === null ? "timeout" : "unsupported"
 		};
 	}
+	/** Asks for devices declared with `<meta name="cohub:devices">`; allowing the camera or microphone reloads the App once. */
+	async requestDevices(devices) {
+		const wanted = parseAppDevices(devices);
+		if (wanted.length === 0) throw new AppRuntimeError("invalid_request", `Request at least one of: ${APP_DEVICES.join(", ")}.`);
+		const context = await this.context().catch(() => null);
+		if (!context || context.mode === "broker") return "granted";
+		if (!context.capabilities?.devices) return "unavailable";
+		return parseAppDevicesResult(await this.transport.request({
+			type: APP_DEVICES_REQUEST_TYPE,
+			devices: wanted
+		}, { timeoutMs: 6e5 }))?.status ?? "unavailable";
+	}
 	/**
 	* Asks the host to close this App: a workspace tab closes, an embedded page
 	* forwards the request to its embedder, a standalone page closes the tab.
@@ -5756,6 +7132,7 @@ var CohubClient = class {
 	voice;
 	apps;
 	appCommerce;
+	rooms;
 	navigation;
 	/** @deprecated Use `client.desktop`. */
 	get ui() {
@@ -5786,7 +7163,10 @@ var CohubClient = class {
 		const appTransport = resolveAppTransport(appRuntime, appIdResolver, createOriginAppResolver({
 			apiBaseUrl,
 			fetch: options.fetch
-		}), resolveWebBaseUrl({ env: options.env }));
+		}), resolveWebBaseUrl({
+			env: options.env,
+			url: options.webBaseUrl
+		}));
 		this.appRuntime = createAppRuntime(appTransport, appRuntime?.appId, appIdResolver);
 		this.appWindow = new AppWindowApi(appTransport, {
 			context: () => this.appRuntime.context(),
@@ -5835,6 +7215,7 @@ var CohubClient = class {
 		this.referrals = new ReferralsApi(this.transport);
 		this.apps = new AppsApi(this.transport);
 		this.appCommerce = new AppCommerceApi(this.transport);
+		this.rooms = new RoomsApi(this.transport);
 		this.navigation = { open: (target, options) => this.appRuntime.navigationOpen(typeof target === "string" ? {
 			kind: "app",
 			ref: target
@@ -5891,6 +7272,7 @@ sync: (root) => {
 		} },
 		/** Ask the host to close this App's surface. */
 		requestClose: () => this.appRuntime.requestClose(),
+		devices: { request: (devices) => this.appRuntime.requestDevices(devices) },
 		/**
 		* Request that the host update this overlay's geometry or pointer hit
 		* regions.  Only meaningful for `overlay` surfaces; ignored otherwise.
@@ -6564,7 +7946,8 @@ function createAppBridgeCore(config) {
 		return {
 			capabilities: {
 				authorization: 2,
-				serverGrants: true
+				serverGrants: true,
+				...config.devices ? { devices: true } : {}
 			},
 			mode: authorizationContext.surface === "broker" ? "broker" : "bridge",
 			app: {
@@ -7623,129 +9006,6 @@ function createAppBridgeCore(config) {
 	};
 }
 //#endregion
-//#region src/generation-blocks.ts
-/** Tolerant readers for generation payloads, shared by every task projection. */
-const EXCERPT_LIMIT = 240;
-function record(value) {
-	return value && typeof value === "object" && !Array.isArray(value) ? value : null;
-}
-function cleanExcerpt(value, limit = EXCERPT_LIMIT) {
-	if (typeof value !== "string") return void 0;
-	const clean = value.replace(/\s+/g, " ").trim();
-	if (!clean) return void 0;
-	return clean.length > limit ? `${clean.slice(0, limit - 3).trimEnd()}...` : clean;
-}
-function blockText(block) {
-	return cleanExcerpt(block.text ?? block.content ?? block.value);
-}
-function blockUrl(block) {
-	const source = record(block.source);
-	return normalizeBoardRemoteUrl(source?.url ?? source?.src ?? block.url ?? block.src);
-}
-function blockMimeType(block) {
-	const source = record(block.source);
-	const value = source?.mediaType ?? source?.media_type ?? source?.mimeType ?? block.mediaType ?? block.media_type ?? block.mimeType;
-	return typeof value === "string" ? value : void 0;
-}
-function positiveNumber(value) {
-	return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : void 0;
-}
-function blockNaturalSize(block) {
-	const source = record(block.source);
-	const naturalWidth = positiveNumber(source?.width ?? source?.naturalWidth ?? block.width ?? block.naturalWidth);
-	const naturalHeight = positiveNumber(source?.height ?? source?.naturalHeight ?? block.height ?? block.naturalHeight);
-	return {
-		...naturalWidth ? { naturalWidth } : {},
-		...naturalHeight ? { naturalHeight } : {}
-	};
-}
-function contentBlocks(value) {
-	return Array.isArray(value) ? value.filter((item) => record(item)) : [];
-}
-function taskData(run) {
-	const payload = record(run.payload);
-	return record(payload?.data) ?? payload;
-}
-function generationOutput(run) {
-	return contentBlocks(record(run.result)?.output);
-}
-function generationPrompt(run) {
-	for (const block of contentBlocks(taskData(run)?.content)) {
-		const text = blockText(block);
-		if (text) return text;
-	}
-}
-function blockMeta(block) {
-	return record(block.meta);
-}
-function blockIdentity(block) {
-	const meta = blockMeta(block);
-	const value = meta?.id ?? meta?.clip_id ?? meta?.clipId ?? block.id ?? block.clip_id ?? block.clipId;
-	if (typeof value !== "string" && typeof value !== "number") return void 0;
-	return cleanExcerpt(String(value), 220);
-}
-function blockTitle(block) {
-	return cleanExcerpt(blockMeta(block)?.title ?? block.title ?? block.name, 240);
-}
-function blockDurationMs(block) {
-	const source = record(block.source);
-	const meta = blockMeta(block);
-	const milliseconds = positiveNumber(source?.durationMs ?? meta?.durationMs ?? block.durationMs);
-	if (milliseconds) return Math.round(milliseconds);
-	const seconds = positiveNumber(source?.duration ?? meta?.duration ?? block.duration);
-	return seconds ? Math.round(seconds * 1e3) : void 0;
-}
-function blockPreviewUrl(block) {
-	const source = record(block.source);
-	return normalizeBoardRemoteUrl(source?.poster ?? source?.thumbnail ?? source?.previewUrl ?? block.poster ?? block.thumbnail ?? block.previewUrl);
-}
-/**
-* Image roles that depict playable media, by the media types they may cover;
-* `last_frame` stays a result of its own.
-*/
-const COVER_ROLES = /* @__PURE__ */ new Map([
-	["first_frame", /* @__PURE__ */ new Set(["video"])],
-	["cover", /* @__PURE__ */ new Set(["video", "audio"])],
-	["poster", /* @__PURE__ */ new Set(["video", "audio"])],
-	["thumbnail", /* @__PURE__ */ new Set(["video", "audio"])]
-]);
-function isPlayable(block) {
-	return block.type === "video" || block.type === "audio";
-}
-/**
-* Pair playable media with its cover image, returning media index → cover
-* index. An image sharing the provider id wins (music tracks and their art,
-* shared by every media of that id); otherwise cover-role images pair in
-* order with remaining media their role fits (a video and its `first_frame`).
-* Covers need a remote URL, so an inline image is never folded away.
-*/
-function generationCovers(blocks) {
-	const covers = /* @__PURE__ */ new Map();
-	const isCover = (block) => block.type === "image" && blockUrl(block) !== void 0 && blockMeta(block)?.role !== "last_frame";
-	blocks.forEach((block, index) => {
-		const id = blockIdentity(block);
-		if (!isPlayable(block) || id === void 0) return;
-		const cover = blocks.findIndex((candidate) => isCover(candidate) && blockIdentity(candidate) === id);
-		if (cover >= 0) covers.set(index, cover);
-	});
-	const paired = new Set(covers.values());
-	const roleCovers = blocks.flatMap((block, index) => {
-		const role = blockMeta(block)?.role;
-		const types = typeof role === "string" ? COVER_ROLES.get(role) : void 0;
-		return isCover(block) && !paired.has(index) && types ? [{
-			index,
-			types
-		}] : [];
-	});
-	blocks.forEach((block, index) => {
-		if (!isPlayable(block) || covers.has(index)) return;
-		const at = roleCovers.findIndex(({ types }) => types.has(String(block.type)));
-		const [cover] = at < 0 ? [] : roleCovers.splice(at, 1);
-		if (cover) covers.set(index, cover.index);
-	});
-	return covers;
-}
-//#endregion
 //#region src/generation-task.ts
 const INLINE_KEYS = [
 	"data",
@@ -7753,7 +9013,7 @@ const INLINE_KEYS = [
 	"contentBase64"
 ];
 function isDeferred(block) {
-	return block.deferredBase64 === true || record(block.source)?.deferredBase64 === true;
+	return block.deferredBase64 === true || asRecord(block.source)?.deferredBase64 === true;
 }
 const MEDIA_TYPE_PATTERN = /^(image|video|audio)\/[\w.+-]+$/;
 const DEFAULT_MEDIA_TYPES = {
@@ -7796,7 +9056,7 @@ function projectOutputs(run) {
 }
 function toGenerationTaskView(run) {
 	const data = taskData(run);
-	const result = record(run.result);
+	const result = asRecord(run.result);
 	const model = data?.model ?? result?.model;
 	return {
 		id: run.id,
@@ -7819,15 +9079,15 @@ function isActiveGenerationTask(task) {
 }
 /** Playable source of an output: its URL, or a data URL for inline payloads. */
 function generationOutputSource(result, outputIndex) {
-	const block = contentBlocks(record(result)?.output)[outputIndex];
+	const block = contentBlocks(asRecord(result)?.output)[outputIndex];
 	if (!block) return null;
 	const url = blockUrl(block);
 	if (url) return url;
-	const source = record(block.source);
+	const source = asRecord(block.source);
 	const data = INLINE_KEYS.map((key) => source?.[key] ?? block[key]).find((value) => typeof value === "string" && value !== "");
 	if (!data) return null;
 	const declared = blockMimeType(block);
 	return `data:${declared && MEDIA_TYPE_PATTERN.test(declared) ? declared : DEFAULT_MEDIA_TYPES[String(block.type)] ?? "application/octet-stream"};base64,${data}`;
 }
 //#endregion
-export { APP_APPEARANCE_TOKENS, APP_COMPOSER_CHIP_CONTENT_MAX_BYTES, APP_COMPOSER_CHIP_KEY_MAX_LENGTH, APP_COMPOSER_CHIP_LABEL_MAX_LENGTH, APP_SURFACE_READY_TIMEOUT_MS, APP_SURFACE_REQUEST_TIMEOUT_MS, AppCommerceApi, AppRealtimeApi, AppRefParseError, AppRoom, AppRuntimeApi, AppRuntimeApi as WorkRuntimeApi, AppRuntimeError, AppSurfaceApi, AppWindowApi, AppsApi, BILLING_ACCESS_BLOCKED_ERROR_CODE, BOARD_COLOR_TOKENS, BOARD_ITEM_TYPES, BillingApi, BoardAnimationSchema, BoardClient, BoardPatchSchema, BoardTrackSchema, COHUB_ENVIRONMENTS, COHUB_SOURCE_HEADER, COHUB_SOURCE_HEADER_NAMES, CohubClient, CohubHttpClient, DESKTOP_COMMAND_ACCEPT_TIMEOUT_MS, DESKTOP_COMMAND_DEFAULT_TIMEOUT_MS, DESKTOP_COMMAND_MAX_TIMEOUT_MS, DESKTOP_COMMAND_OPEN_TIMEOUT_MS, DESKTOP_COMMAND_PAYLOAD_MAX_BYTES, DESKTOP_COMMAND_PENDING_TTL_SECONDS, DESKTOP_COMMAND_SETTLEMENT_GRACE_SECONDS, DESKTOP_COMMAND_TERMINAL_TTL_SECONDS, DESKTOP_COMMAND_VERSION, DISPLAY_ACTION_TYPES, DISPLAY_ELEMENT_REF_PATTERN, DISPLAY_SYSTEM_ACTIONS, DesktopCommandsApi, DisplayActionError, DisplayConnection, FEATURE_NOT_ENTITLED_ERROR_CODE, GenerationPolicyError, HOME_SPACE_SLUG, HttpError, NATIVE_INGEST_MAX_TURNS, NATIVE_SYNC_SOURCE, OriginBrokerTransport, PERMISSIONS, ParentBridgeTransport, PopupBrokerTransport, REQUEST_SOURCE_VIA_MAX_LENGTH, RUNTIME_ARCHIVE_SEGMENT_BYTES, RUNTIME_MAX_FRAME_BYTES, RUNTIME_PROTOCOL_VERSION, RUNTIME_RECOVERY_BATCH_SIZE, ReferencesApi, ReferralsApi, SETTLED_TURN_STATUSES, SessionGenerationStreamClient, SessionPatchReducer, SpaceDisplaysApi, SpacePublicFilesApi, SpaceWebhooksApi, UPLOAD_MAX_BATCH_BYTES, UPLOAD_MAX_BATCH_FILES, UPLOAD_MAX_FILE_BYTES, USER_LEVEL_PERMISSIONS, UiCommandsApi, UsersApi, VoiceApi, VoiceInputClient, WebsocketClient, WorkCommerceApi, WorkRealtimeApi, WorkRefParseError, WorkRoom, WorkSurfaceApi, appAppearanceVar, applyAppAppearance, assertGenerationRequestAllowedByPolicy, attachAppEmbed, buildAppSurfaceRequest, buildSpaceInvitePath, buildSpacePath, clearGrantedAppScopes, compileDisplayActions, connectDisplay, contextToPiMessages, createAppBridgeCore, createAppBridgeCore as createWorkBridgeCore, createAppRuntime, createAppRuntime as createWorkRuntime, createCohubClient, createHttpClient, createOriginAppResolver, createSessionGenerationStreamClient, createSessionPatchReducer, createSlugAppIdResolver, createSlugAppIdResolver as createSlugWorkIdResolver, createVoiceInputClient, createWebsocketClient, decodeGenerationPolicy, defaultDesktopCommandTimeoutMs, encodeGenerationPolicy, extractBillingPayload, filterDiscoverableGenerationModels, filterGenerationDeclarationsByPolicy, filterSpacePickerItems, findGenerationModelPolicy, fingerprintProjectionTurns, formatAppRef, formatWorkRef, generationOutputSource, getAllowedGenerationModelIds, getCohubContext, harnessArchiveIndexSchema, hasGrantedAppScopes, hasRequestSourceIdentity, isActiveGenerationTask, isAppId, isBillingAccessBlockedCode, isBillingAccessBlockedError, isDesktopCallMethod, isFeatureNotEntitledError, isGenerationModelHidden, isHttpErrorCode, isLocalHarness, isNativeClientTurn, isProjectionCompaction, isRequestSourceClientId, isRequestSourceEmpty, isRequestSourceUuid, isTerminalDesktopCommandStatus, isUserLevelPermission, isUuid, isWorkId, joinApiUrl, matchesUnauthorizedErrorToken, mergeRequestSourceIntoMeta, nativeIngestTurnSchema, nativeRuntimeEventSchema, nativeTurnCompleteSchema, nativeTurnProgressSchema, normalizeBaseUrl, normalizeDisplayPoint, normalizeGenerationPolicy, normalizeRequestSource, normalizeSessionTurnOrigin, normalizeSpacePickerQuery, normalizeVoiceInputWebsocketUrl, normalizeWebsocketUrl, orderSpacePickerItems, parseAppRef, parseAppSurfaceReady, parseAppSurfaceResponse, parseAssistantMessageCommit, parseBoardDocument, parseBoardItem, parseDesktopCommand, parseGenerationPolicyFromEnv, parseRequestSourceFromHeaders, parseSpaceRef, parseWorkRef, projectNativeMessageMeta, projectNativeSession, readRequestSourceFromEnv, readSentTurns, readSessionTurnOrigin, requestSourceToHeaders, resolveApiBaseUrl, resolveAppTransport, resolveAppTransport as resolveWorkTransport, resolveCohubEnvironment, resolveExecutionAppId, resolveExecutionToken, resolveHarness, resolveOpenSurface, resolveRequestSourceChannel, resolveVoiceInputWebsocketUrl, resolveWebBaseUrl, resolveWebsocketUrl, runtimeCommandSchema, runtimeEventSchema, runtimeNativeStopSchema, runtimeReadySchema, sanitizeAccessToken, scopeListHasPermission, selectRuntimeContextMessages, selectSpacePickerItems, serializeProjection, serializeProjectionRecords, setGrantedAppScopes, toGenerationTaskView, trimProjectionTurnsToCompaction, validateArchiveBoundary };
+export { APP_APPEARANCE_TOKENS, APP_COMPOSER_CHIP_CONTENT_MAX_BYTES, APP_COMPOSER_CHIP_KEY_MAX_LENGTH, APP_COMPOSER_CHIP_LABEL_MAX_LENGTH, APP_DEVICES, APP_SURFACE_READY_TIMEOUT_MS, APP_SURFACE_REQUEST_TIMEOUT_MS, AppCommerceApi, AppRealtimeApi, AppRefParseError, AppRoom, AppRoomRtc, AppRtcChannel, AppRtcError, AppRuntimeApi, AppRuntimeApi as WorkRuntimeApi, AppRuntimeError, AppSurfaceApi, AppWindowApi, AppsApi, BILLING_ACCESS_BLOCKED_ERROR_CODE, BOARD_COLOR_TOKENS, BOARD_ITEM_TYPES, BillingApi, BoardAnimationSchema, BoardClient, BoardPatchSchema, BoardTrackSchema, COHUB_ENVIRONMENTS, COHUB_SOURCE_HEADER, COHUB_SOURCE_HEADER_NAMES, CohubClient, CohubHttpClient, DESKTOP_COMMAND_ACCEPT_TIMEOUT_MS, DESKTOP_COMMAND_DEFAULT_TIMEOUT_MS, DESKTOP_COMMAND_MAX_TIMEOUT_MS, DESKTOP_COMMAND_OPEN_TIMEOUT_MS, DESKTOP_COMMAND_PAYLOAD_MAX_BYTES, DESKTOP_COMMAND_PENDING_TTL_SECONDS, DESKTOP_COMMAND_SETTLEMENT_GRACE_SECONDS, DESKTOP_COMMAND_TERMINAL_TTL_SECONDS, DESKTOP_COMMAND_VERSION, DISPLAY_ACTION_TYPES, DISPLAY_ELEMENT_REF_PATTERN, DISPLAY_SYSTEM_ACTIONS, DesktopCommandsApi, DisplayActionError, DisplayConnection, FEATURE_NOT_ENTITLED_ERROR_CODE, GenerationPolicyError, HOME_SPACE_SLUG, HttpError, NATIVE_INGEST_MAX_TURNS, NATIVE_SYNC_SOURCE, OriginBrokerTransport, PERMISSIONS, ParentBridgeTransport, PopupBrokerTransport, REQUEST_SOURCE_VIA_MAX_LENGTH, RUNTIME_ARCHIVE_SEGMENT_BYTES, RUNTIME_MAX_FRAME_BYTES, RUNTIME_PROTOCOL_VERSION, RUNTIME_RECOVERY_BATCH_SIZE, ReferencesApi, ReferralsApi, RoomsApi, SETTLED_TURN_STATUSES, SessionGenerationStreamClient, SessionPatchReducer, SpaceDisplaysApi, SpacePublicFilesApi, SpaceWebhooksApi, UPLOAD_MAX_BATCH_BYTES, UPLOAD_MAX_BATCH_FILES, UPLOAD_MAX_FILE_BYTES, USER_LEVEL_PERMISSIONS, UiCommandsApi, UsersApi, VoiceApi, VoiceInputClient, WebsocketClient, WorkCommerceApi, WorkRealtimeApi, WorkRefParseError, WorkRoom, WorkSurfaceApi, appAppearanceVar, applyAppAppearance, assertGenerationRequestAllowedByPolicy, attachAppEmbed, buildAppSurfaceRequest, buildSpaceInvitePath, buildSpacePath, clearGrantedAppScopes, compileDisplayActions, connectDisplay, contextToPiMessages, createAppBridgeCore, createAppBridgeCore as createWorkBridgeCore, createAppRuntime, createAppRuntime as createWorkRuntime, createCohubClient, createHttpClient, createOriginAppResolver, createSessionGenerationStreamClient, createSessionPatchReducer, createSlugAppIdResolver, createSlugAppIdResolver as createSlugWorkIdResolver, createVoiceInputClient, createWebsocketClient, decodeGenerationPolicy, defaultDesktopCommandTimeoutMs, encodeGenerationPolicy, extractBillingPayload, filterDiscoverableGenerationModels, filterGenerationDeclarationsByPolicy, filterSpacePickerItems, findGenerationModelPolicy, fingerprintProjectionTurns, formatAppRef, formatWorkRef, generationOutputSource, getAllowedGenerationModelIds, getCohubContext, harnessArchiveIndexSchema, hasGrantedAppScopes, hasRequestSourceIdentity, isActiveGenerationTask, isAppId, isBillingAccessBlockedCode, isBillingAccessBlockedError, isDesktopCallMethod, isFeatureNotEntitledError, isGenerationModelHidden, isHttpErrorCode, isLocalHarness, isNativeClientTurn, isProjectionCompaction, isRequestSourceClientId, isRequestSourceEmpty, isRequestSourceUuid, isTerminalDesktopCommandStatus, isUserLevelPermission, isUuid, isWorkId, joinApiUrl, matchesUnauthorizedErrorToken, mergeRequestSourceIntoMeta, nativeIngestTurnSchema, nativeRuntimeEventSchema, nativeTurnCompleteSchema, nativeTurnProgressSchema, normalizeBaseUrl, normalizeDisplayPoint, normalizeGenerationPolicy, normalizeRequestSource, normalizeSessionTurnOrigin, normalizeSpacePickerQuery, normalizeVoiceInputWebsocketUrl, normalizeWebsocketUrl, orderSpacePickerItems, parseAppRef, parseAppSurfaceReady, parseAppSurfaceResponse, parseAssistantMessageCommit, parseBoardDocument, parseBoardItem, parseDesktopCommand, parseGenerationPolicyFromEnv, parseRequestSourceFromHeaders, parseSpaceRef, parseWorkRef, projectNativeMessageMeta, projectNativeSession, readRequestSourceFromEnv, readSentTurns, readSessionTurnOrigin, requestSourceToHeaders, resolveApiBaseUrl, resolveAppTransport, resolveAppTransport as resolveWorkTransport, resolveCohubEnvironment, resolveExecutionAppId, resolveExecutionToken, resolveHarness, resolveOpenSurface, resolveRequestSourceChannel, resolveVoiceInputWebsocketUrl, resolveWebBaseUrl, resolveWebsocketUrl, runtimeCommandSchema, runtimeEventSchema, runtimeNativeStopSchema, runtimeReadySchema, sanitizeAccessToken, scopeListHasPermission, selectRuntimeContextMessages, selectSpacePickerItems, serializeProjection, serializeProjectionRecords, setGrantedAppScopes, toGenerationTaskView, trimProjectionTurnsToCompaction, validateArchiveBoundary };