@neta-art/cohub 6.0.0 → 7.0.0

package/dist/index.js

@@ -1,9 +1,880 @@
-import { $ as BOARD_GEO_KINDS, A as buildWorkComposerChipSet, B as UI_COMMAND_MAX_TIMEOUT_MS, C as ensureRealtimeConnected, Ct as SkillsApi, D as WORK_SURFACE_READY_TIMEOUT_MS, Dt as CronJobsApi, E as WORK_COMPOSER_CHIP_LABEL_MAX_LENGTH, Et as GenerationsApi, F as parseWorkComposerChipSet, G as UI_COMMAND_VERSION, H as UI_COMMAND_PENDING_TTL_SECONDS, I as parseWorkSurfaceReady, J as parseUiCommand, K as isTerminalUiCommandStatus, L as parseWorkSurfaceRequest, M as buildWorkSurfaceRequest, N as buildWorkSurfaceResponse, O as WORK_SURFACE_REQUEST_TIMEOUT_MS, Ot as ChannelsApi, P as parseWorkComposerChipClear, Q as BOARD_COLOR_IDS, R as parseWorkSurfaceResponse, S as createSessionPatchReducer, St as PublicAssetsApi, T as WORK_COMPOSER_CHIP_KEY_MAX_LENGTH, Tt as ModelsApi, U as UI_COMMAND_SETTLEMENT_GRACE_SECONDS, V as UI_COMMAND_PAYLOAD_MAX_BYTES, W as UI_COMMAND_TERMINAL_TTL_SECONDS, X as parseUsername, Y as parseSpaceSlug, Z as BoardAwarenessClientPayloadSchema, _ as buildSpacePath, _t as BOARD_BUILTIN_CAPABILITIES, a as ReferralsApi, at as BoardEffectSchema, b as parseAssistantMessageCommit, bt as ReferencesApi, c as UiCommandsApi, ct as BoardAuthoringItemSchema, d as BoardTransactionError, dt as BOARD_ANIMATION_CHANNEL_CAPABILITIES, et as BOARD_NATIVE_NODE_TYPES, f as SpaceClient, ft as BoardCompositionInputSchema, g as buildSpaceInvitePath, gt as parseBoardCompositionInput, h as PublicInviteApi, ht as BoardTrackSchema, i as WorksApi, it as validateBuiltinBoardClip, j as buildWorkSurfaceReady, k as buildWorkComposerChipClear, l as TasksApi, lt as BoardItemPatchSchema, m as SpacesApi, mt as BoardProceduralClipSchema, n as createHttpClient, nt as validateBoardNodeInput, o as UsersApi, ot as BoardPlaybackPolicySchema, p as SpacePublicFilesApi, pt as BoardCompositionSchema, q as isUiSurfaceMethod, r as WorkCommerceApi, rt as estimateBuiltinBoardClipCost, s as UserApi, st as parseBoardPlaybackPolicy, t as CohubHttpClient, tt as BOARD_NODE_CONTRACT, u as BoardClient, ut as BOARD_ANIMATION_CHANNELS, v as SessionGenerationStreamClient, vt as DEFAULT_BOARD_RENDER_LIMITS, w as WORK_COMPOSER_CHIP_CONTENT_MAX_BYTES, wt as PromptsApi, x as SessionPatchReducer, xt as SearchApi, y as createSessionGenerationStreamClient, yt as SessionAccessApi, z as UI_COMMAND_DEFAULT_TIMEOUT_MS } from "./chunks/http.js";
-import { _ as requestSourceToHeaders, a as sanitizeAccessToken, b as REALTIME_DOMAINS, c as REQUEST_SOURCE_VIA_MAX_LENGTH, d as isRequestSourceEmpty, f as isRequestSourceUuid, g as readRequestSourceFromEnv, h as parseRequestSourceFromHeaders, i as matchesUnauthorizedErrorToken, l as hasRequestSourceIdentity, m as normalizeRequestSource, n as HttpTransport, o as COHUB_SOURCE_HEADER, p as mergeRequestSourceIntoMeta, r as joinApiUrl, s as COHUB_SOURCE_HEADER_NAMES, t as HttpError, u as isRequestSourceClientId, v as resolveRequestSourceChannel, x as REALTIME_ROOM_EVENT_NAME_PATTERN, y as isUuid } from "./chunks/transport.js";
+import { $ as SessionAccessApi, A as isTerminalUiCommandStatus, B as BOARD_ANIMATION_CHANNELS, C as UI_COMMAND_DEFAULT_TIMEOUT_MS, D as UI_COMMAND_SETTLEMENT_GRACE_SECONDS, E as UI_COMMAND_PENDING_TTL_SECONDS, F as BoardItemPatchSchema, G as BoardTrackSchema, H as BoardCompositionInputSchema, I as BoardSemanticMutationSchema, J as BOARD_ARROW_STROKE_SIZE, K as parseBoardCompositionInput, L as BoardEffectInputSchema, M as parseUiCommand, N as parseUiCommandId, O as UI_COMMAND_TERMINAL_TTL_SECONDS, P as BoardAuthoringItemSchema, Q as DEFAULT_BOARD_RENDER_LIMITS, R as BoardEffectSchema, S as ensureRealtimeConnected, T as UI_COMMAND_PAYLOAD_MAX_BYTES, U as BoardCompositionSchema, V as BOARD_ANIMATION_CHANNEL_CAPABILITIES, W as BoardProceduralClipSchema, X as BOARD_BUILTIN_CLIP_KINDS, Y as BOARD_BUILTIN_CAPABILITIES, Z as BOARD_BUILTIN_EFFECT_KINDS, _ as SessionGenerationStreamClient, a as ReferralsApi, at as ModelsApi, b as SessionPatchReducer, c as UiCommandsApi, ct as ChannelsApi, d as SpaceClient, et as ReferencesApi, f as SpacePublicFilesApi, g as buildSpacePath, h as buildSpaceInvitePath, i as WorksApi, it as PromptsApi, j as isUiSurfaceMethod, k as UI_COMMAND_VERSION, l as TasksApi, m as PublicInviteApi, n as createHttpClient, nt as PublicAssetsApi, o as UsersApi, ot as GenerationsApi, p as SpacesApi, q as BoardConnectionSchema, r as WorkCommerceApi, rt as SkillsApi, s as UserApi, st as CronJobsApi, t as CohubHttpClient, tt as SearchApi, u as BoardClient, v as createSessionGenerationStreamClient, w as UI_COMMAND_MAX_TIMEOUT_MS, x as createSessionPatchReducer, y as parseAssistantMessageCommit, z as parseBoardEffectInput } from "./chunks/http.js";
+import { _ as requestSourceToHeaders, a as sanitizeAccessToken, b as REALTIME_ROOM_EVENT_NAME_PATTERN, c as REQUEST_SOURCE_VIA_MAX_LENGTH, d as isRequestSourceEmpty, f as isRequestSourceUuid, g as readRequestSourceFromEnv, h as parseRequestSourceFromHeaders, i as matchesUnauthorizedErrorToken, l as hasRequestSourceIdentity, m as normalizeRequestSource, n as HttpTransport, o as COHUB_SOURCE_HEADER, p as mergeRequestSourceIntoMeta, r as joinApiUrl, s as COHUB_SOURCE_HEADER_NAMES, t as HttpError, u as isRequestSourceClientId, v as resolveRequestSourceChannel, y as isUuid } from "./chunks/transport.js";
 import { a as resolveApiBaseUrl, c as resolveWebsocketUrl, i as normalizeWebsocketUrl, n as normalizeBaseUrl, o as resolveCohubEnvironment, r as normalizeVoiceInputWebsocketUrl, s as resolveVoiceInputWebsocketUrl, t as COHUB_ENVIRONMENTS } from "./chunks/environment.js";
 import { a as extractBillingPayload, c as isFeatureNotEntitledError, i as FEATURE_NOT_ENTITLED_ERROR_CODE, l as isHttpErrorCode, n as createWebsocketClient, o as isBillingAccessBlockedCode, r as BILLING_ACCESS_BLOCKED_ERROR_CODE, s as isBillingAccessBlockedError, t as WebsocketClient } from "./chunks/websocket.js";
 import { VoiceApi, VoiceInputClient, createVoiceInputClient } from "./voice-input.js";
 import { z } from "zod";
+//#region ../protocol/dist/board.js
+const BOARD_DOCUMENT_KIND = "cohub.board";
+const BOARD_MANIFEST_KIND = "cohub.board.manifest";
+const idSchema = z.string().min(1).max(160);
+const jsonObjectSchema = z.record(z.string(), z.unknown());
+const finiteSchema = z.number().finite();
+z.object({
+	kind: z.literal(BOARD_MANIFEST_KIND),
+	version: z.literal(1),
+	boardId: z.string().uuid(),
+	title: z.string().min(1).max(255)
+});
+z.object({
+	centerX: finiteSchema,
+	centerY: finiteSchema,
+	zoom: finiteSchema.positive()
+});
+const BoardCameraFocusSchema = z.discriminatedUnion("type", [
+	z.object({
+		type: z.literal("rect"),
+		rect: z.object({
+			x: finiteSchema,
+			y: finiteSchema,
+			width: finiteSchema.positive(),
+			height: finiteSchema.positive()
+		})
+	}),
+	z.object({
+		type: z.literal("item"),
+		itemId: idSchema
+	}),
+	z.object({
+		type: z.literal("items"),
+		itemIds: z.array(idSchema).min(1).max(1e3)
+	}),
+	z.object({
+		type: z.literal("frame"),
+		frameId: idSchema
+	})
+]);
+const BoardCameraFocusParamsSchema = z.object({
+	focus: BoardCameraFocusSchema,
+	fit: z.enum(["contain", "cover"]).default("contain"),
+	padding: finiteSchema.nonnegative().default(32),
+	minZoom: finiteSchema.positive().optional(),
+	maxZoom: finiteSchema.positive().optional()
+}).superRefine((value, context) => {
+	if (value.minZoom !== void 0 && value.maxZoom !== void 0 && value.minZoom > value.maxZoom) context.addIssue({
+		code: "custom",
+		message: "minZoom must not exceed maxZoom",
+		path: ["minZoom"]
+	});
+});
+z.object({
+	nodeId: idSchema,
+	type: z.string().min(1).max(40),
+	parentId: idSchema.nullable(),
+	orderKey: z.string().max(4096).nullable(),
+	x: finiteSchema,
+	y: finiteSchema,
+	width: finiteSchema.positive(),
+	height: finiteSchema.positive(),
+	rotation: finiteSchema,
+	refKind: z.string().max(40).nullable(),
+	refPath: z.string().max(4096).nullable(),
+	refUrl: z.string().max(4096).nullable(),
+	view: jsonObjectSchema,
+	style: jsonObjectSchema,
+	data: jsonObjectSchema
+});
+const stripBoardServerFields = (value) => {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return value;
+	const { boardId: _boardId, revision: _revision, ...input } = value;
+	return input;
+};
+const BoardCreateEffectInputSchema = z.preprocess(stripBoardServerFields, BoardEffectInputSchema);
+const BoardCreateCompositionInputSchema = z.preprocess(stripBoardServerFields, BoardCompositionInputSchema);
+const BoardCreateInputSchema = z.object({
+	path: z.string().min(1),
+	/** Reused by clients when board creation is interrupted and retried. */
+	mutationId: z.string().max(128).optional(),
+	title: z.string().min(1).max(255).optional(),
+	metadata: jsonObjectSchema.optional(),
+	items: z.array(BoardAuthoringItemSchema).max(5e4).optional(),
+	connections: z.array(BoardConnectionSchema).max(5e4).optional(),
+	effects: z.array(BoardCreateEffectInputSchema).max(5e4).optional(),
+	compositions: z.array(BoardCreateCompositionInputSchema).max(5e4).optional()
+});
+const jsonSchema$1 = (schema) => z.toJSONSchema(schema);
+const authoringSchemaFactories = {
+	item: () => jsonSchema$1(BoardAuthoringItemSchema),
+	itemPatch: () => jsonSchema$1(BoardItemPatchSchema),
+	mutation: () => jsonSchema$1(BoardSemanticMutationSchema),
+	composition: () => jsonSchema$1(BoardCompositionInputSchema),
+	effect: () => jsonSchema$1(BoardEffectInputSchema),
+	create: () => jsonSchema$1(BoardCreateInputSchema)
+};
+/**
+* JSON Schemas for the semantic authoring surface. Each property is enumerable
+* for Object.keys/JSON.stringify, but generated only when that property is
+* requested. This keeps protocol imports cheap while capabilities still returns
+* the complete machine-readable schema object.
+*/
+const BOARD_AUTHORING_SCHEMAS = {};
+for (const key of Object.keys(authoringSchemaFactories)) {
+	let cached;
+	Object.defineProperty(BOARD_AUTHORING_SCHEMAS, key, {
+		enumerable: true,
+		configurable: false,
+		get() {
+			cached ??= authoringSchemaFactories[key]();
+			return cached;
+		}
+	});
+}
+z.object({
+	include: z.array(z.enum([
+		"nodes",
+		"connections",
+		"effects",
+		"compositions",
+		"playback"
+	])).optional(),
+	nodeIds: z.array(idSchema).max(5e4).optional(),
+	connectionIds: z.array(idSchema).max(5e4).optional(),
+	effectIds: z.array(idSchema).max(5e4).optional(),
+	compositionIds: z.array(idSchema).max(5e4).optional(),
+	viewport: z.object({
+		x: finiteSchema,
+		y: finiteSchema,
+		width: finiteSchema.positive(),
+		height: finiteSchema.positive()
+	}).optional()
+});
+/** Persisted on `boards.metadata.playback`: how a Board plays when opened. */
+const BoardPlaybackPolicySchema = z.object({
+	compositionId: idSchema,
+	/** Delay before the first local playback after opening the Board, in milliseconds. */
+	delayMs: finiteSchema.nonnegative().default(0)
+});
+function parseBoardPlaybackPolicy(metadata) {
+	const parsed = BoardPlaybackPolicySchema.safeParse(metadata.playback);
+	return parsed.success ? parsed.data : null;
+}
+z.discriminatedUnion("type", [
+	z.object({
+		commandId: idSchema,
+		type: z.literal("play"),
+		compositionId: idSchema,
+		position: finiteSchema.nonnegative().optional(),
+		timeScale: finiteSchema.positive().max(4).optional(),
+		shared: z.boolean().optional(),
+		seed: idSchema.optional()
+	}),
+	z.object({
+		commandId: idSchema,
+		type: z.literal("pause"),
+		playbackId: z.string().uuid()
+	}),
+	z.object({
+		commandId: idSchema,
+		type: z.literal("seek"),
+		playbackId: z.string().uuid(),
+		position: finiteSchema.nonnegative()
+	}),
+	z.object({
+		commandId: idSchema,
+		type: z.literal("stop"),
+		playbackId: z.string().uuid()
+	})
+]);
+//#endregion
+//#region ../protocol/dist/board-capability-registry.js
+const CLIPS = new Set(BOARD_BUILTIN_CLIP_KINDS);
+new Set(BOARD_BUILTIN_EFFECT_KINDS);
+const record = (value) => Boolean(value && typeof value === "object" && !Array.isArray(value));
+const finite = (value) => typeof value === "number" && Number.isFinite(value);
+function validateBuiltinBoardClip(clip, path = "clip") {
+	if (!CLIPS.has(clip.kind)) return [];
+	const errors = [];
+	const error = (message, suffix, coordinateSpace, code = "INVALID_BOARD_CLIP") => {
+		errors.push({
+			severity: "error",
+			code,
+			message,
+			path: `${path}.${suffix}`,
+			...coordinateSpace ? { coordinateSpace } : {}
+		});
+	};
+	if ((clip.kind.startsWith("motion.") || clip.kind.startsWith("draw.") || clip.kind === "text.reveal" || clip.kind === "effects.trail") && clip.target.type !== "item") error(`${clip.kind} must target an item`, "target");
+	if (clip.kind.startsWith("camera.") && clip.target.type !== "camera") error(`${clip.kind} must target the camera`, "target");
+	if (clip.kind === "motion.path") {
+		const points = clip.params.points;
+		if (!Array.isArray(points) || points.length < 2 || points.length > 1e4) error("motion path must contain 2 to 10000 world-offset points", "params.points", "world-offset");
+		else for (const [index, point] of points.entries()) if (!record(point) || !finite(point.x) || !finite(point.y)) error("motion path point must contain finite x and y", `params.points.${index}`, "world-offset");
+	}
+	if (clip.kind === "effects.particles") {
+		const count = clip.params.count;
+		if (!Number.isSafeInteger(count) || count < 1 || count > DEFAULT_BOARD_RENDER_LIMITS.particles) error(`particle count must be an integer from 1 to ${DEFAULT_BOARD_RENDER_LIMITS.particles}`, "params.count", void 0, "INVALID_PARTICLE_COUNT");
+		const bounds = clip.params.bounds;
+		if (!record(bounds) || !finite(bounds.x) || !finite(bounds.y) || !finite(bounds.width) || !finite(bounds.height) || bounds.width <= 0 || bounds.height <= 0) error("particles require positive finite world bounds", "params.bounds", "world", "PARTICLE_BOUNDS_REQUIRED");
+	}
+	if (clip.kind === "camera.focus") {
+		const parsed = BoardCameraFocusParamsSchema.safeParse(clip.params);
+		if (!parsed.success) error(parsed.error.issues[0]?.message ?? "invalid camera focus", "params", "world");
+	}
+	return errors;
+}
+function estimateBuiltinBoardClipCost(clip) {
+	switch (clip.kind) {
+		case "effects.particles": {
+			const count = Number.isSafeInteger(clip.params.count) ? Math.max(0, clip.params.count) : 0;
+			return {
+				particles: count,
+				vertices: count * 4,
+				dynamicVertices: count * 4,
+				drawCalls: 1,
+				bufferBytes: count * 48,
+				simulationSteps: count
+			};
+		}
+		case "effects.trail": return {
+			vertices: 32,
+			dynamicVertices: 32,
+			drawCalls: 1,
+			bufferBytes: 1024,
+			simulationSteps: 16
+		};
+		case "effects.impact":
+		case "effects.flash": return {
+			vertices: 64,
+			drawCalls: 1
+		};
+		case "draw.reveal":
+		case "draw.handwrite": return {
+			drawCalls: 1,
+			dynamicVertices: 1
+		};
+		case "motion.path": return { simulationSteps: Array.isArray(clip.params.points) ? clip.params.points.length : 0 };
+		default: return {};
+	}
+}
+//#endregion
+//#region ../protocol/dist/board-url.js
+const BOARD_REMOTE_URL_MAX_LENGTH = 4096;
+function parseIpv4(host) {
+	const parts = host.split(".").map(Number);
+	return parts.length === 4 && parts.every((part) => Number.isInteger(part) && part >= 0 && part <= 255) ? parts : null;
+}
+function isBlockedIpv4(host) {
+	const parts = parseIpv4(host);
+	if (!parts) return false;
+	const [first, second, third] = parts;
+	if (first === 0 || first === 10 || first === 127) return true;
+	if (first === 100 && second >= 64 && second <= 127) return true;
+	if (first === 169 && second === 254) return true;
+	if (first === 172 && second >= 16 && second <= 31) return true;
+	if (first === 192 && second === 168) return true;
+	if (first === 192 && second === 0 && (third === 0 || third === 2)) return true;
+	if (first === 192 && second === 88 && third === 99) return true;
+	if (first === 198 && (second === 18 || second === 19)) return true;
+	if (first === 198 && second === 51 && third === 100) return true;
+	if (first === 203 && second === 0 && third === 113) return true;
+	return first >= 224;
+}
+function expandIpv6(host) {
+	const [head, tail, extra] = host.toLowerCase().split("::");
+	if (extra !== void 0) return null;
+	const headParts = head ? head.split(":").filter(Boolean) : [];
+	const tailParts = tail ? tail.split(":").filter(Boolean) : [];
+	const missing = 8 - headParts.length - tailParts.length;
+	if (missing < 0 || tail === void 0 && missing !== 0) return null;
+	const parts = [
+		...headParts,
+		...Array.from({ length: missing }, () => "0"),
+		...tailParts
+	];
+	if (parts.length !== 8 || parts.some((part) => !/^[0-9a-f]{1,4}$/.test(part))) return null;
+	return parts.map((part) => part.padStart(4, "0"));
+}
+function isBlockedIpv6(host) {
+	const parts = expandIpv6(host);
+	if (!parts) return true;
+	if (parts.every((part) => part === "0000")) return true;
+	if (parts.slice(0, 7).every((part) => part === "0000") && parts[7] === "0001") return true;
+	if (parts.slice(0, 5).every((part) => part === "0000") && parts[5] === "ffff") {
+		const high = Number.parseInt(parts[6] ?? "0", 16);
+		const low = Number.parseInt(parts[7] ?? "0", 16);
+		return isBlockedIpv4(`${high >> 8}.${high & 255}.${low >> 8}.${low & 255}`);
+	}
+	if (parts.slice(0, 6).every((part) => part === "0000")) return true;
+	const first = Number.parseInt(parts[0] ?? "0", 16);
+	if ((first & 65024) === 64512) return true;
+	if ((first & 65472) === 65152 || (first & 65472) === 65216) return true;
+	if ((first & 65280) === 65280) return true;
+	return parts[0] === "2001" && parts[1] === "0db8";
+}
+function isPublicBoardRemoteAddress(value) {
+	const address = value.toLowerCase().replace(/^\[|\]$/g, "").replace(/\.$/, "");
+	if (parseIpv4(address)) return !isBlockedIpv4(address);
+	return address.includes(":") && !isBlockedIpv6(address);
+}
+function isBlockedHost(hostname) {
+	const host = hostname.toLowerCase().replace(/^\[|\]$/g, "").replace(/\.$/, "");
+	if (host === "localhost" || host.endsWith(".localhost") || host.endsWith(".local") || host.endsWith(".internal")) return true;
+	if (parseIpv4(host) || host.includes(":")) return !isPublicBoardRemoteAddress(host);
+	return false;
+}
+/**
+* Normalize a browser-loadable public HTTP(S) URL. This blocks explicit local
+* addresses; any future server-side fetcher must additionally validate DNS
+* resolution to defend against rebinding.
+*/
+function normalizeBoardRemoteUrl(value) {
+	if (typeof value !== "string") return void 0;
+	const input = value.trim();
+	if (!input || input.length > 4096) return void 0;
+	try {
+		const url = new URL(input);
+		if (url.protocol !== "https:" && url.protocol !== "http:") return void 0;
+		if (url.username || url.password || isBlockedHost(url.hostname)) return;
+		const normalized = url.toString();
+		return normalized.length <= 4096 ? normalized : void 0;
+	} catch {
+		return;
+	}
+}
+const BoardRemoteUrlSchema = z.string().max(BOARD_REMOTE_URL_MAX_LENGTH).refine((value) => normalizeBoardRemoteUrl(value) !== void 0, { message: "URL must be a public HTTP(S) URL without credentials" });
+//#endregion
+//#region ../protocol/dist/board-document.js
+const BoardFrameSchema = z.object({
+	x: z.number().finite(),
+	y: z.number().finite(),
+	width: z.number().finite().positive(),
+	height: z.number().finite().positive(),
+	rotation: z.number().finite().default(0)
+});
+/**
+* The board camera. This is local UI state, not synced content: semantic ops
+* (see diffBoardDocuments) never describe the viewport, and the editor holds
+* the live camera separately from the persisted document. Here it only serves
+* as an initial camera hint when a document is first loaded.
+*/
+const BoardViewportSchema = z.object({
+	x: z.number().finite(),
+	y: z.number().finite(),
+	zoom: z.number().finite().min(.05).max(8)
+});
+const BoardAppearanceSchema = z.object({
+	theme: z.string().min(1).default("clean"),
+	background: z.object({
+		kind: z.enum([
+			"solid",
+			"dots",
+			"grid",
+			"image",
+			"shader",
+			"custom"
+		]).default("dots"),
+		color: z.string().optional(),
+		imageUrl: BoardRemoteUrlSchema.optional(),
+		fit: z.enum([
+			"cover",
+			"contain",
+			"repeat"
+		]).optional(),
+		position: z.enum([
+			"center",
+			"top",
+			"bottom",
+			"left",
+			"right"
+		]).optional(),
+		opacity: z.number().finite().min(0).max(1).optional()
+	}).default({ kind: "solid" }),
+	grid: z.object({
+		visible: z.boolean().default(false),
+		size: z.number().finite().min(4).default(24),
+		opacity: z.number().finite().min(0).max(1).default(.12)
+	}).default({
+		visible: false,
+		size: 24,
+		opacity: .12
+	}),
+	mood: z.enum([
+		"clean",
+		"playful",
+		"arcane",
+		"cyber",
+		"natural"
+	]).default("clean")
+});
+/** Optional visual chrome still carried by a few older shapes. */
+const BoardItemStyleSchema = z.object({
+	variant: z.string().min(1).default("default"),
+	theme: z.string().min(1).optional(),
+	accentColor: z.string().optional(),
+	size: z.enum([
+		"sm",
+		"md",
+		"lg"
+	]).default("md"),
+	emphasis: z.enum([
+		"normal",
+		"rare",
+		"epic",
+		"legendary"
+	]).default("normal"),
+	effects: z.array(z.string().min(1)).default([])
+});
+const SpaceFileRefSchema = z.object({
+	kind: z.literal("space-file"),
+	path: z.string().min(1)
+});
+const BoardMediaSnapshotSchema = z.object({
+	title: z.string().optional(),
+	mimeType: z.string().optional(),
+	size: z.number().finite().nonnegative().optional(),
+	mtimeMs: z.number().finite().nonnegative().optional(),
+	/** Intrinsic pixel size once known. */
+	naturalWidth: z.number().finite().positive().optional(),
+	naturalHeight: z.number().finite().positive().optional()
+});
+const BoardItemBaseSchema = z.object({
+	id: z.string().min(1),
+	frame: BoardFrameSchema,
+	parentId: z.string().min(1).nullable().optional(),
+	/** When true the shape cannot be moved, resized, or deleted. */
+	locked: z.boolean().optional(),
+	style: BoardItemStyleSchema.optional(),
+	metadata: z.record(z.string(), z.unknown()).optional()
+});
+/** Freestanding text — no card chrome; its frame always follows the glyphs. */
+const BoardTextItemSchema = BoardItemBaseSchema.extend({
+	type: z.literal("text"),
+	text: z.string().default(""),
+	color: z.string().min(1).default("neutral"),
+	fontSize: z.number().finite().min(2).max(512).default(24)
+});
+const BoardGeoItemSchema = BoardItemBaseSchema.extend({
+	type: z.literal("geo"),
+	geo: z.string().min(1).default("rectangle"),
+	text: z.string().default(""),
+	color: z.string().min(1).default("brand"),
+	fillOpacity: z.number().finite().min(0).max(1).default(0)
+});
+/** A raw freehand sample. Pressure defaults to 0.5 (mouse) when absent. */
+const DrawPointSchema = z.object({
+	x: z.number().finite(),
+	y: z.number().finite(),
+	p: z.number().finite().min(0).max(1).default(.5)
+});
+/** A world-space point. */
+const BoardPointSchema = z.object({
+	x: z.number().finite(),
+	y: z.number().finite()
+});
+const BoardDrawItemSchema = BoardItemBaseSchema.extend({
+	type: z.literal("draw"),
+	points: z.array(DrawPointSchema).default([]),
+	color: z.string().min(1).default("brand"),
+	size: z.number().finite().positive().default(4)
+});
+/**
+* A free arrow — a standalone annotation stroke between two world points.
+*
+* Arrows do not relate nodes. A relation between two nodes is a
+* `BoardConnection`, which is stored separately and resolves its geometry from
+* the live node frames. Keeping the two apart is what lets an arrow be a plain
+* shape (its own frame, freely movable) while a connection stays purely
+* semantic — neither has to pretend to be the other.
+*/
+const BoardArrowItemSchema = BoardItemBaseSchema.extend({
+	type: z.literal("arrow"),
+	start: BoardPointSchema,
+	end: BoardPointSchema,
+	bend: z.number().finite().min(-.85).max(.85).default(0),
+	color: z.string().min(1).default("brand"),
+	size: z.number().finite().positive().default(BOARD_ARROW_STROKE_SIZE),
+	arrowStart: z.boolean().default(false),
+	arrowEnd: z.boolean().default(true),
+	label: z.string().default("")
+});
+/** A frame container for organising shapes. */
+const BoardFrameItemSchema = BoardItemBaseSchema.extend({
+	type: z.literal("frame"),
+	label: z.string().default("Frame"),
+	color: z.string().min(1).default("neutral")
+});
+/** Image node — space file only, natural aspect, no chrome. */
+const BoardImageItemSchema = BoardItemBaseSchema.extend({
+	type: z.literal("image"),
+	ref: SpaceFileRefSchema,
+	snapshot: BoardMediaSnapshotSchema.optional(),
+	/** Optional normalized crop in source image space (0..1). */
+	crop: z.object({
+		x: z.number().finite().min(0).max(1).default(0),
+		y: z.number().finite().min(0).max(1).default(0),
+		w: z.number().finite().min(0).max(1).default(1),
+		h: z.number().finite().min(0).max(1).default(1)
+	}).optional()
+});
+/** Video node — space file only. Playback state is local UI, never synced. */
+const BoardVideoItemSchema = BoardItemBaseSchema.extend({
+	type: z.literal("video"),
+	ref: SpaceFileRefSchema,
+	snapshot: BoardMediaSnapshotSchema.optional()
+});
+/** Audio node — space file only. Playback state is local UI, never synced. */
+const BoardAudioItemSchema = BoardItemBaseSchema.extend({
+	type: z.literal("audio"),
+	ref: SpaceFileRefSchema,
+	snapshot: BoardMediaSnapshotSchema.extend({ durationMs: z.number().finite().nonnegative().optional() }).optional()
+});
+/**
+* Cached display facts for a file card.
+*
+* Purely derived from the referenced file and versioned by `mtimeMs`, so it is a
+* cache and never a second source of truth: the workspace file remains
+* authoritative, and a stale snapshot is detectable rather than silently wrong.
+* It is stored so that opening a board renders complete cards immediately, with
+* no per-node file read on the first paint.
+*/
+const BoardFileSnapshotSchema = z.object({
+	title: z.string().optional(),
+	mimeType: z.string().optional(),
+	size: z.number().finite().nonnegative().optional(),
+	mtimeMs: z.number().finite().nonnegative().optional(),
+	/** Cleaned leading prose. Capped when written (see FILE_EXCERPT_MAX_CHARS). */
+	excerpt: z.string().optional(),
+	/** Cover image inside the space, already resolved to a workspace path. */
+	coverPath: z.string().optional(),
+	/** Cover image at an absolute https URL, as declared by the file itself. */
+	coverUrl: z.string().optional()
+});
+/**
+* File node — a thumbnail entry point to any workspace file.
+*
+* This is the fallback for every dropped file that is not natively an image or
+* video, including binaries and unknown extensions: a board should never refuse
+* a file, only present it with less detail. Presentation tiers are derived from
+* the snapshot (see filePreviewKind), not stored, so there is no display state
+* to drift from the facts.
+*/
+const BoardFileItemSchema = BoardItemBaseSchema.extend({
+	type: z.literal("file"),
+	ref: SpaceFileRefSchema,
+	snapshot: BoardFileSnapshotSchema.optional()
+});
+const BoardTaskMediaArtifactFields = {
+	id: z.string().min(1).max(240),
+	title: z.string().max(240).optional(),
+	url: BoardRemoteUrlSchema,
+	mimeType: z.string().max(160).optional()
+};
+const BoardTaskArtifactSchema = z.discriminatedUnion("type", [
+	z.object({
+		...BoardTaskMediaArtifactFields,
+		type: z.literal("image"),
+		naturalWidth: z.number().positive().optional(),
+		naturalHeight: z.number().positive().optional()
+	}).strict(),
+	z.object({
+		...BoardTaskMediaArtifactFields,
+		type: z.literal("video"),
+		previewUrl: BoardRemoteUrlSchema.optional(),
+		durationMs: z.number().int().positive().optional(),
+		naturalWidth: z.number().positive().optional(),
+		naturalHeight: z.number().positive().optional()
+	}).strict(),
+	z.object({
+		...BoardTaskMediaArtifactFields,
+		type: z.literal("audio"),
+		previewUrl: BoardRemoteUrlSchema.optional(),
+		durationMs: z.number().int().positive().optional()
+	}).strict(),
+	z.object({
+		id: z.string().min(1).max(240),
+		type: z.literal("text"),
+		title: z.string().max(240).optional(),
+		textExcerpt: z.string().min(1).max(480)
+	}).strict()
+]);
+/**
+* Cached task facts used for an immediate first paint. The task run remains the
+* source of truth and live clients refresh this projection by `taskRunId`.
+*/
+const BoardTaskSnapshotSchema = z.object({
+	taskType: z.string().min(1).max(120),
+	status: z.enum([
+		"pending",
+		"running",
+		"completed",
+		"failed"
+	]),
+	title: z.string().min(1).max(240),
+	model: z.string().max(160).optional(),
+	promptExcerpt: z.string().max(480).optional(),
+	artifactCount: z.number().int().nonnegative(),
+	artifacts: z.array(BoardTaskArtifactSchema).max(6).default([]),
+	updatedAt: z.string().optional()
+}).strict();
+/** A stable reference to a task run with a small, replaceable display cache. */
+const BoardTaskItemSchema = BoardItemBaseSchema.extend({
+	type: z.literal("task"),
+	taskRunId: z.string().min(1),
+	snapshot: BoardTaskSnapshotSchema
+});
+/**
+* A forward-compatible carrier for shape types this client does not recognise.
+* Its discriminant is the literal `"unknown"` so the item union still narrows
+* cleanly on `type`. The real type string and every original field are preserved
+* verbatim in `raw`.
+*/
+const UNKNOWN_BOARD_ITEM_TYPE = "unknown";
+const BoardItemSchema = z.any().transform((raw) => parseBoardItemLoose(raw));
+/**
+* Parse a single item leniently: known types are validated and normalised;
+* anything else becomes a lossless unknown item. Never throws on shape data —
+* a malformed known item degrades to unknown rather than failing the document.
+*/
+function parseBoardItemLoose(raw) {
+	if (!raw || typeof raw !== "object") return makeUnknownItem(raw);
+	switch (raw.type) {
+		case "image": {
+			const parsed = BoardImageItemSchema.safeParse(raw);
+			return parsed.success ? parsed.data : makeUnknownItem(raw);
+		}
+		case "video": {
+			const parsed = BoardVideoItemSchema.safeParse(raw);
+			return parsed.success ? parsed.data : makeUnknownItem(raw);
+		}
+		case "audio": {
+			const parsed = BoardAudioItemSchema.safeParse(raw);
+			return parsed.success ? parsed.data : makeUnknownItem(raw);
+		}
+		case "file": {
+			const parsed = BoardFileItemSchema.safeParse(raw);
+			return parsed.success ? parsed.data : makeUnknownItem(raw);
+		}
+		case "task": {
+			const parsed = BoardTaskItemSchema.safeParse(raw);
+			return parsed.success ? parsed.data : makeUnknownItem(raw);
+		}
+		case "text": {
+			const parsed = BoardTextItemSchema.safeParse(raw);
+			return parsed.success ? parsed.data : makeUnknownItem(raw);
+		}
+		case "geo": {
+			const parsed = BoardGeoItemSchema.safeParse(raw);
+			return parsed.success ? parsed.data : makeUnknownItem(raw);
+		}
+		case "draw": {
+			const parsed = BoardDrawItemSchema.safeParse(raw);
+			return parsed.success ? parsed.data : makeUnknownItem(raw);
+		}
+		case "arrow": {
+			const parsed = BoardArrowItemSchema.safeParse(raw);
+			return parsed.success ? parsed.data : makeUnknownItem(raw);
+		}
+		case "frame": {
+			const parsed = BoardFrameItemSchema.safeParse(raw);
+			return parsed.success ? parsed.data : makeUnknownItem(raw);
+		}
+		default: return makeUnknownItem(raw);
+	}
+}
+function makeUnknownItem(raw) {
+	const record = raw && typeof raw === "object" ? raw : {};
+	const frameParsed = BoardFrameSchema.safeParse(record.frame);
+	const styleParsed = BoardItemStyleSchema.safeParse(record.style);
+	return {
+		id: typeof record.id === "string" && record.id ? record.id : "unknown",
+		type: UNKNOWN_BOARD_ITEM_TYPE,
+		frame: frameParsed.success ? frameParsed.data : {
+			x: 0,
+			y: 0,
+			width: 120,
+			height: 80,
+			rotation: 0
+		},
+		...typeof record.parentId === "string" || record.parentId === null ? { parentId: record.parentId } : {},
+		...record.locked === true ? { locked: true } : {},
+		...styleParsed.success && record.style ? { style: styleParsed.data } : {},
+		...record.metadata && typeof record.metadata === "object" ? { metadata: record.metadata } : {},
+		raw: record
+	};
+}
+z.object({
+	kind: z.literal(BOARD_DOCUMENT_KIND),
+	version: z.literal(1),
+	appearance: BoardAppearanceSchema.default({
+		theme: "clean",
+		background: { kind: "solid" },
+		grid: {
+			visible: false,
+			size: 24,
+			opacity: .12
+		},
+		mood: "clean"
+	}),
+	viewport: BoardViewportSchema,
+	items: z.array(BoardItemSchema),
+	/**
+	* Node relations. Separate from `items` because a connection has no frame of
+	* its own — its geometry is derived from the nodes it joins, so it is a
+	* relation over the item set rather than a member of it.
+	*
+	* Connections referencing a missing node are dropped on parse: a relation to
+	* nothing is not a relation, and keeping one would let an invisible dangling
+	* edge accumulate silently. Callers that need to know write through the
+	* transaction API, which reports the reference error instead.
+	*/
+	connections: z.array(BoardConnectionSchema).default([])
+});
+//#endregion
+//#region ../protocol/dist/board-node.js
+const BOARD_COLOR_IDS = [
+	"brand",
+	"neutral",
+	"black",
+	"white",
+	"blue",
+	"green",
+	"amber",
+	"violet",
+	"rose"
+];
+const BoardColorIdSchema = z.enum(BOARD_COLOR_IDS);
+const BOARD_GEO_KINDS = [
+	"rectangle",
+	"rounded",
+	"ellipse",
+	"diamond",
+	"triangle"
+];
+const BoardGeoKindSchema = z.enum(BOARD_GEO_KINDS);
+const BOARD_NATIVE_NODE_TYPES = [
+	"image",
+	"video",
+	"audio",
+	"file",
+	"task",
+	"text",
+	"geo",
+	"draw",
+	"arrow",
+	"frame"
+];
+const metadataSchema = z.record(z.string(), z.unknown());
+const commonData = {
+	locked: z.boolean().optional(),
+	metadata: metadataSchema.optional()
+};
+const pointSchema = z.object({
+	x: z.number().finite(),
+	y: z.number().finite(),
+	p: z.number().finite().min(0).max(1).default(.5)
+}).strict();
+const worldPointSchema = z.object({
+	x: z.number().finite(),
+	y: z.number().finite()
+}).strict();
+const strokeSizeSchema = z.number().finite().min(1).max(64);
+const mediaViewSchema = z.object({
+	title: z.string().optional(),
+	mimeType: z.string().optional(),
+	size: z.number().finite().nonnegative().optional(),
+	mtimeMs: z.number().finite().nonnegative().optional(),
+	naturalWidth: z.number().finite().positive().optional(),
+	naturalHeight: z.number().finite().positive().optional()
+}).strict();
+const audioViewSchema = mediaViewSchema.extend({ durationMs: z.number().finite().nonnegative().optional() });
+const dataSchemas = {
+	text: z.object({
+		...commonData,
+		text: z.string().default(""),
+		color: BoardColorIdSchema.default("neutral"),
+		fontSize: z.number().finite().min(2).max(512).default(24)
+	}).strict(),
+	geo: z.object({
+		...commonData,
+		geo: BoardGeoKindSchema.default("rectangle"),
+		text: z.string().default(""),
+		color: BoardColorIdSchema.default("brand"),
+		fillOpacity: z.number().finite().min(0).max(1).default(0)
+	}).strict(),
+	draw: z.object({
+		...commonData,
+		points: z.array(pointSchema).min(1),
+		color: BoardColorIdSchema.default("brand"),
+		size: strokeSizeSchema.default(4)
+	}).strict(),
+	arrow: z.object({
+		...commonData,
+		start: worldPointSchema,
+		end: worldPointSchema,
+		bend: z.number().finite().min(-.85).max(.85).default(0),
+		color: BoardColorIdSchema.default("brand"),
+		size: strokeSizeSchema.default(BOARD_ARROW_STROKE_SIZE),
+		arrowStart: z.boolean().default(false),
+		arrowEnd: z.boolean().default(true),
+		label: z.string().default("")
+	}).strict(),
+	frame: z.object({
+		...commonData,
+		label: z.string().default("Frame"),
+		color: BoardColorIdSchema.default("neutral")
+	}).strict(),
+	image: z.object({
+		...commonData,
+		crop: z.object({
+			x: z.number().finite().min(0).max(1),
+			y: z.number().finite().min(0).max(1),
+			w: z.number().finite().min(0).max(1),
+			h: z.number().finite().min(0).max(1)
+		}).strict().optional()
+	}).strict(),
+	video: z.object(commonData).strict(),
+	audio: z.object(commonData).strict(),
+	file: z.object(commonData).strict(),
+	task: z.object({
+		...commonData,
+		taskRunId: z.string().min(1)
+	}).strict()
+};
+const fileViewSchema = z.object({
+	title: z.string().optional(),
+	mimeType: z.string().optional(),
+	size: z.number().finite().nonnegative().optional(),
+	mtimeMs: z.number().finite().nonnegative().optional(),
+	excerpt: z.string().optional(),
+	coverPath: z.string().optional(),
+	coverUrl: z.string().url().optional()
+}).strict();
+const taskViewSchema = BoardTaskSnapshotSchema;
+const emptyViewSchema = z.object({}).strict();
+const viewSchemas = {
+	image: mediaViewSchema,
+	video: mediaViewSchema,
+	audio: audioViewSchema,
+	file: fileViewSchema,
+	task: taskViewSchema,
+	text: emptyViewSchema,
+	geo: emptyViewSchema,
+	draw: emptyViewSchema,
+	arrow: emptyViewSchema,
+	frame: emptyViewSchema
+};
+const nodeEnvelopeSchema = z.object({
+	nodeId: z.string().min(1).max(160),
+	type: z.string().min(1).max(40),
+	parentId: z.string().min(1).max(160).nullable(),
+	orderKey: z.string().max(4096).nullable(),
+	x: z.number().finite(),
+	y: z.number().finite(),
+	width: z.number().finite().positive(),
+	height: z.number().finite().positive(),
+	rotation: z.number().finite(),
+	refKind: z.string().max(40).nullable(),
+	refPath: z.string().max(4096).nullable(),
+	refUrl: z.string().max(4096).nullable(),
+	view: z.record(z.string(), z.unknown()),
+	style: z.record(z.string(), z.unknown()),
+	data: z.record(z.string(), z.unknown())
+}).strict();
+function jsonSchema(schema) {
+	return z.toJSONSchema(schema);
+}
+jsonSchema(nodeEnvelopeSchema), Object.fromEntries(BOARD_NATIVE_NODE_TYPES.map((type) => [type, jsonSchema(dataSchemas[type])])), Object.fromEntries(BOARD_NATIVE_NODE_TYPES.map((type) => [type, jsonSchema(viewSchemas[type])]));
+//#endregion
 //#region ../protocol/dist/generation/catalog.js
 function isGenerationModelHidden(model) {
 	return model.hidden === true;
@@ -21,14 +892,14 @@ var GenerationPolicyError = class extends Error {
 		this.name = "GenerationPolicyError";
 	}
 };
-function isRecord(value) {
+function isRecord$1(value) {
 	return !!value && typeof value === "object" && !Array.isArray(value);
 }
 function isPrimitiveEnumValue(value) {
 	return typeof value === "string" || typeof value === "number" || typeof value === "boolean";
 }
 function normalizeConstraint(value) {
-	if (!isRecord(value) || typeof value.kind !== "string") return null;
+	if (!isRecord$1(value) || typeof value.kind !== "string") return null;
 	if (value.kind === "enum") {
 		if (!Array.isArray(value.values) || value.values.length === 0 || !value.values.every(isPrimitiveEnumValue)) return null;
 		return {
@@ -58,7 +929,7 @@ function normalizeConstraint(value) {
 	return null;
 }
 function normalizeGenerationPolicy(value) {
-	if (!isRecord(value) || value.version !== 1) return null;
+	if (!isRecord$1(value) || value.version !== 1) return null;
 	if (value.mode === "auto") return {
 		version: 1,
 		mode: "auto"
@@ -66,10 +937,10 @@ function normalizeGenerationPolicy(value) {
 	if (value.mode !== "limited" || !Array.isArray(value.models) || value.models.length === 0) return null;
 	const models = [];
 	for (const item of value.models) {
-		if (!isRecord(item) || typeof item.model !== "string" || !item.model.trim()) return null;
+		if (!isRecord$1(item) || typeof item.model !== "string" || !item.model.trim()) return null;
 		const modelPolicy = { model: item.model.trim() };
 		if (item.parameters !== void 0) {
-			if (!isRecord(item.parameters)) return null;
+			if (!isRecord$1(item.parameters)) return null;
 			const parameters = {};
 			for (const [key, rawConstraint] of Object.entries(item.parameters)) {
 				if (!key.trim()) return null;
@@ -244,6 +1115,172 @@ function filterGenerationDeclarationsByPolicy(declarations, policy) {
 	});
 }
 //#endregion
+//#region ../protocol/dist/public-identifiers.js
+const USERNAME_PATTERN = /^(?!-)(?!.*--)[a-z0-9-]{1,39}(?<!-)$/;
+const SPACE_SLUG_PATTERN = /^[a-z0-9](?:[a-z0-9_-]{0,78}[a-z0-9])?$/;
+/**
+* Platform-owned path segments that must not be newly assigned to public
+* identities. Existing stored values remain readable through parse helpers.
+*/
+const RESERVED_PLATFORM_PATH_SEGMENTS = Object.freeze([
+	"admin",
+	"api",
+	"assets",
+	"auth",
+	"callback",
+	"changelog",
+	"docs",
+	"explore",
+	"invite",
+	"landing",
+	"login",
+	"logout",
+	"new",
+	"org",
+	"pricing",
+	"pwa",
+	"referrals",
+	"sessions",
+	"settings",
+	"spaces",
+	"static",
+	"teams",
+	"trending",
+	"u",
+	"user",
+	"users",
+	"work-auth"
+]);
+new Set(RESERVED_PLATFORM_PATH_SEGMENTS);
+[...RESERVED_PLATFORM_PATH_SEGMENTS];
+function parseUsername(value) {
+	if (value === null || value === void 0) return null;
+	const normalized = value.trim().toLowerCase();
+	return USERNAME_PATTERN.test(normalized) ? normalized : null;
+}
+function parseSpaceSlug(value) {
+	if (value === null || value === void 0) return null;
+	const normalized = value.trim();
+	return SPACE_SLUG_PATTERN.test(normalized) ? normalized : null;
+}
+//#endregion
+//#region ../protocol/dist/work-surface.js
+const WORK_SURFACE_PROTOCOL = "cohub.surface";
+const WORK_SURFACE_READY_TIMEOUT_MS = 1e4;
+const WORK_SURFACE_REQUEST_TIMEOUT_MS = 15e3;
+const WORK_COMPOSER_CHIP_KEY_MAX_LENGTH = 80;
+const WORK_COMPOSER_CHIP_LABEL_MAX_LENGTH = 120;
+const WORK_COMPOSER_CHIP_CONTENT_MAX_BYTES = 32 * 1024;
+const isRecord = (value) => Boolean(value && typeof value === "object" && !Array.isArray(value));
+const isSurfaceEnvelope = (value) => isRecord(value) && value.protocol === "cohub.surface" && value.version === 1;
+const parseWorkSurfaceReady = (value) => {
+	if (!isSurfaceEnvelope(value) || value.type !== "ready") return null;
+	const methods = Array.isArray(value.methods) ? value.methods.filter((method) => typeof method === "string" && Boolean(method)) : [];
+	return {
+		protocol: WORK_SURFACE_PROTOCOL,
+		version: 1,
+		type: "ready",
+		methods
+	};
+};
+const parseWorkSurfaceResponse = (value) => {
+	if (!isSurfaceEnvelope(value) || value.type !== "response") return null;
+	if (typeof value.requestId !== "string" || !value.requestId) return null;
+	const error = isRecord(value.error) ? {
+		code: typeof value.error.code === "string" && value.error.code ? value.error.code : "surface_error",
+		message: typeof value.error.message === "string" ? value.error.message : "Work surface call failed"
+	} : void 0;
+	return {
+		protocol: WORK_SURFACE_PROTOCOL,
+		version: 1,
+		type: "response",
+		requestId: value.requestId,
+		ok: value.ok === true,
+		...error ? { error } : {}
+	};
+};
+const parseComposerChipKey = (value) => {
+	if (typeof value !== "string") return null;
+	const key = value.trim();
+	if (!key || key.length > 80) return null;
+	return key;
+};
+const parseWorkComposerChipSet = (value) => {
+	if (!isSurfaceEnvelope(value) || value.type !== "composer.chip.set" || !isRecord(value.chip)) return null;
+	const key = parseComposerChipKey(value.chip.key);
+	if (!key || typeof value.chip.label !== "string" || typeof value.chip.content !== "string") return null;
+	const label = value.chip.label.trim();
+	if (!label || label.length > 120) return null;
+	if (!value.chip.content.trim()) return null;
+	if (new TextEncoder().encode(value.chip.content).length > 32768) return null;
+	return {
+		protocol: WORK_SURFACE_PROTOCOL,
+		version: 1,
+		type: "composer.chip.set",
+		chip: {
+			key,
+			label,
+			content: value.chip.content
+		}
+	};
+};
+const parseWorkComposerChipClear = (value) => {
+	if (!isSurfaceEnvelope(value) || value.type !== "composer.chip.clear") return null;
+	const key = parseComposerChipKey(value.key);
+	return key ? {
+		protocol: WORK_SURFACE_PROTOCOL,
+		version: 1,
+		type: "composer.chip.clear",
+		key
+	} : null;
+};
+const parseWorkSurfaceRequest = (value) => {
+	if (!isSurfaceEnvelope(value) || value.type !== "request") return null;
+	if (typeof value.requestId !== "string" || !value.requestId) return null;
+	if (typeof value.method !== "string" || !value.method) return null;
+	const commandId = parseUiCommandId(value.commandId);
+	if (!commandId) return null;
+	return {
+		protocol: WORK_SURFACE_PROTOCOL,
+		version: 1,
+		type: "request",
+		requestId: value.requestId,
+		method: value.method,
+		...value.input === void 0 ? {} : { input: value.input },
+		commandId
+	};
+};
+const buildWorkSurfaceReady = (methods) => ({
+	protocol: WORK_SURFACE_PROTOCOL,
+	version: 1,
+	type: "ready",
+	methods: [...methods]
+});
+const buildWorkSurfaceRequest = (input) => ({
+	protocol: WORK_SURFACE_PROTOCOL,
+	version: 1,
+	type: "request",
+	...input
+});
+const buildWorkSurfaceResponse = (input) => ({
+	protocol: WORK_SURFACE_PROTOCOL,
+	version: 1,
+	type: "response",
+	...input
+});
+const buildWorkComposerChipSet = (chip) => ({
+	protocol: WORK_SURFACE_PROTOCOL,
+	version: 1,
+	type: "composer.chip.set",
+	chip
+});
+const buildWorkComposerChipClear = (key) => ({
+	protocol: WORK_SURFACE_PROTOCOL,
+	version: 1,
+	type: "composer.chip.clear",
+	key
+});
+//#endregion
 //#region src/apis/billing.ts
 var BillingApi = class {
 	transport;
@@ -316,193 +1353,6 @@ var BillingApi = class {
 	}
 };
 //#endregion
-//#region ../protocol/dist/realtime/schema.js
-const contentBlockMetaSchema = z.record(z.string(), z.unknown());
-const realtimeRoomSchema = z.string().regex(/^(space|user|board|room):[^:]+$/);
-const contentBlockSchema = z.discriminatedUnion("type", [
-	z.object({
-		type: z.literal("text"),
-		text: z.string(),
-		_meta: contentBlockMetaSchema.optional()
-	}),
-	z.object({
-		type: z.literal("thinking"),
-		thinking: z.string(),
-		signature: z.string().optional(),
-		_meta: contentBlockMetaSchema.optional()
-	}),
-	z.object({
-		type: z.literal("image"),
-		source: z.union([z.object({
-			type: z.literal("url"),
-			url: z.string().url()
-		}), z.object({
-			type: z.literal("base64"),
-			media_type: z.string(),
-			data: z.string()
-		})]),
-		_meta: contentBlockMetaSchema.optional()
-	}),
-	z.object({
-		type: z.literal("shell_command"),
-		command: z.string(),
-		rawText: z.string(),
-		_meta: contentBlockMetaSchema.optional()
-	}),
-	z.object({
-		type: z.literal("tool_use"),
-		id: z.string(),
-		name: z.string(),
-		input: z.record(z.string(), z.unknown()),
-		_meta: contentBlockMetaSchema.optional()
-	}),
-	z.object({
-		type: z.literal("tool_result"),
-		tool_use_id: z.string(),
-		content: z.union([z.string(), z.array(z.unknown())]),
-		is_error: z.boolean().optional(),
-		_meta: contentBlockMetaSchema.optional()
-	}),
-	z.object({
-		type: z.literal("system_note"),
-		note_type: z.enum([
-			"session_created",
-			"forked",
-			"compacted",
-			"info"
-		]),
-		text: z.string(),
-		_meta: contentBlockMetaSchema.optional()
-	})
-]);
-z.discriminatedUnion("type", [
-	z.object({
-		type: z.literal("auth"),
-		requestId: z.string().optional(),
-		payload: z.object({
-			token: z.string().min(1),
-			capabilities: z.array(z.string().min(1)).optional()
-		})
-	}),
-	z.object({
-		type: z.literal("subscribe"),
-		requestId: z.string().optional(),
-		payload: z.object({ rooms: z.array(realtimeRoomSchema).min(1) })
-	}),
-	z.object({
-		type: z.literal("unsubscribe"),
-		requestId: z.string().optional(),
-		payload: z.object({ rooms: z.array(realtimeRoomSchema).min(1) })
-	}),
-	z.object({
-		type: z.literal("session.message.create"),
-		requestId: z.string().optional(),
-		payload: z.object({
-			spaceId: z.string().uuid(),
-			sessionId: z.string().uuid(),
-			clientMessageId: z.string().optional(),
-			content: z.array(contentBlockSchema).min(1),
-			model: z.string().optional(),
-			provider: z.string().optional(),
-			thinkingLevel: z.enum([
-				"off",
-				"minimal",
-				"low",
-				"medium",
-				"high",
-				"xhigh",
-				"max"
-			]).optional()
-		})
-	}),
-	z.object({
-		type: z.literal("presence.update"),
-		requestId: z.string().optional(),
-		payload: z.object({
-			spaceId: z.string().uuid(),
-			meta: z.record(z.string(), z.unknown()).nullable().optional()
-		})
-	}),
-	z.object({
-		type: z.literal("board.awareness.update"),
-		requestId: z.string().optional(),
-		payload: BoardAwarenessClientPayloadSchema
-	}),
-	z.object({
-		type: z.literal("realtime.room.join"),
-		requestId: z.string().optional(),
-		payload: z.object({
-			roomId: z.string().uuid(),
-			ticket: z.string().min(1)
-		})
-	}),
-	z.object({
-		type: z.literal("realtime.room.publish"),
-		requestId: z.string().optional(),
-		payload: z.object({
-			roomId: z.string().uuid(),
-			event: z.string().regex(REALTIME_ROOM_EVENT_NAME_PATTERN),
-			data: z.unknown(),
-			clientEventId: z.string().max(128).optional()
-		})
-	}),
-	z.object({
-		type: z.literal("realtime.room.leave"),
-		requestId: z.string().optional(),
-		payload: z.object({ roomId: z.string().uuid() })
-	}),
-	z.object({
-		type: z.literal("realtime.room.presence.update"),
-		requestId: z.string().optional(),
-		payload: z.object({
-			roomId: z.string().uuid(),
-			presence: z.record(z.string(), z.unknown()).nullable()
-		})
-	}),
-	z.object({
-		type: z.literal("ping"),
-		requestId: z.string().optional(),
-		payload: z.record(z.string(), z.unknown()).optional()
-	}),
-	z.object({
-		type: z.literal("ack"),
-		requestId: z.string().optional(),
-		payload: z.object({ eventId: z.string().optional() }).optional()
-	})
-]);
-z.object({
-	id: z.string(),
-	timestamp: z.number(),
-	domain: z.enum(REALTIME_DOMAINS),
-	type: z.string(),
-	requestId: z.string().nullable().optional(),
-	spaceId: z.string().nullable().optional(),
-	sessionId: z.string().nullable().optional(),
-	rooms: z.array(realtimeRoomSchema).optional(),
-	payload: z.record(z.string(), z.unknown())
-});
-z.discriminatedUnion("t", [z.object({
-	t: z.literal("d"),
-	sid: z.string().min(1),
-	s: z.number().int().nonnegative(),
-	b: z.number().int().nonnegative(),
-	v: z.unknown()
-}), z.object({
-	t: z.literal("p"),
-	sid: z.string().min(1),
-	s: z.number().int().nonnegative(),
-	b: z.number().int().nonnegative(),
-	o: z.enum([
-		"append",
-		"replace",
-		"add",
-		"merge",
-		"remove"
-	]),
-	p: z.string().min(1),
-	v: z.unknown().optional()
-})]);
-//#endregion
 //#region src/apis/work-realtime.ts
 const randomId = () => globalThis.crypto?.randomUUID?.() ?? `${Date.now()}-${Math.random().toString(36).slice(2)}`;
 const textEncoder = new TextEncoder();
@@ -2370,4 +3220,4 @@ function createBoardExtensionRegistry() {
 }
 const BOARD_CHANNELS = BOARD_ANIMATION_CHANNELS;
 //#endregion
-export { BILLING_ACCESS_BLOCKED_ERROR_CODE, BOARD_ANIMATION_CHANNEL_CAPABILITIES, BOARD_CHANNELS, BOARD_COLOR_IDS, BOARD_GEO_KINDS, BOARD_NATIVE_NODE_TYPES, BOARD_NODE_CONTRACT, BillingApi, BoardAuthoringItemSchema, BoardClient, BoardCompositionInputSchema, BoardCompositionSchema, BoardEffectSchema, BoardExtensionRegistry, BoardItemPatchSchema, BoardPlaybackPolicySchema, BoardTransactionError, COHUB_ENVIRONMENTS, COHUB_SOURCE_HEADER, COHUB_SOURCE_HEADER_NAMES, CohubClient, CohubHttpClient, DEFAULT_BOARD_LIMITS, FEATURE_NOT_ENTITLED_ERROR_CODE, GenerationPolicyError, HttpError, ParentBridgeTransport, PopupBrokerTransport, REQUEST_SOURCE_VIA_MAX_LENGTH, ReferencesApi, ReferralsApi, SessionGenerationStreamClient, SessionPatchReducer, SpacePublicFilesApi, UI_COMMAND_DEFAULT_TIMEOUT_MS, UI_COMMAND_MAX_TIMEOUT_MS, UI_COMMAND_PAYLOAD_MAX_BYTES, UI_COMMAND_PENDING_TTL_SECONDS, UI_COMMAND_SETTLEMENT_GRACE_SECONDS, UI_COMMAND_TERMINAL_TTL_SECONDS, UI_COMMAND_VERSION, UiCommandsApi, UsersApi, VoiceApi, VoiceInputClient, WORK_COMPOSER_CHIP_CONTENT_MAX_BYTES, WORK_COMPOSER_CHIP_KEY_MAX_LENGTH, WORK_COMPOSER_CHIP_LABEL_MAX_LENGTH, WORK_SURFACE_READY_TIMEOUT_MS, WORK_SURFACE_REQUEST_TIMEOUT_MS, WebsocketClient, WorkCommerceApi, WorkRealtimeApi, WorkRefParseError, WorkRoom, WorkRuntimeApi, WorkSurfaceApi, WorksApi, assertGenerationRequestAllowedByPolicy, buildSpaceInvitePath, buildSpacePath, buildWorkSurfaceRequest, clearGrantedWorkScopes, compileComposition, composition, createBoardExtensionRegistry, createCohubClient, createHttpClient, createSessionGenerationStreamClient, createSessionPatchReducer, createSlugWorkIdResolver, createVoiceInputClient, createWebsocketClient, createWorkBridgeCore, createWorkRuntime, decodeGenerationPolicy, encodeGenerationPolicy, extractBillingPayload, filterDiscoverableGenerationModels, filterGenerationDeclarationsByPolicy, findGenerationModelPolicy, formatWorkRef, getAllowedGenerationModelIds, hasGrantedWorkScopes, hasRequestSourceIdentity, isBillingAccessBlockedCode, isBillingAccessBlockedError, isFeatureNotEntitledError, isGenerationModelHidden, isHttpErrorCode, isRequestSourceClientId, isRequestSourceEmpty, isRequestSourceUuid, isTerminalUiCommandStatus, isUiSurfaceMethod, isUuid, isWorkId, joinApiUrl, matchesUnauthorizedErrorToken, mergeRequestSourceIntoMeta, normalizeBaseUrl, normalizeGenerationPolicy, normalizeRequestSource, normalizeVoiceInputWebsocketUrl, normalizeWebsocketUrl, parseAssistantMessageCommit, parseBoardCompositionInput, parseBoardPlaybackPolicy, parseGenerationPolicyFromEnv, parseRequestSourceFromHeaders, parseUiCommand, parseWorkRef, parseWorkSurfaceReady, parseWorkSurfaceResponse, proceduralClip, readRequestSourceFromEnv, requestSourceToHeaders, resolveApiBaseUrl, resolveCohubEnvironment, resolveRequestSourceChannel, resolveVoiceInputWebsocketUrl, resolveWebsocketUrl, resolveWorkTransport, sampleCompositionTracks, sampleEasing, sampleTrack, sanitizeAccessToken, setGrantedWorkScopes, track, validateBoardNodeInput };
+export { BILLING_ACCESS_BLOCKED_ERROR_CODE, BOARD_ANIMATION_CHANNEL_CAPABILITIES, BOARD_CHANNELS, BOARD_COLOR_IDS, BOARD_GEO_KINDS, BillingApi, BoardAuthoringItemSchema, BoardClient, BoardCompositionInputSchema, BoardCompositionSchema, BoardEffectInputSchema, BoardEffectSchema, BoardExtensionRegistry, BoardItemPatchSchema, BoardPlaybackPolicySchema, COHUB_ENVIRONMENTS, COHUB_SOURCE_HEADER, COHUB_SOURCE_HEADER_NAMES, CohubClient, CohubHttpClient, DEFAULT_BOARD_LIMITS, FEATURE_NOT_ENTITLED_ERROR_CODE, GenerationPolicyError, HttpError, ParentBridgeTransport, PopupBrokerTransport, REQUEST_SOURCE_VIA_MAX_LENGTH, ReferencesApi, ReferralsApi, SessionGenerationStreamClient, SessionPatchReducer, SpacePublicFilesApi, UI_COMMAND_DEFAULT_TIMEOUT_MS, UI_COMMAND_MAX_TIMEOUT_MS, UI_COMMAND_PAYLOAD_MAX_BYTES, UI_COMMAND_PENDING_TTL_SECONDS, UI_COMMAND_SETTLEMENT_GRACE_SECONDS, UI_COMMAND_TERMINAL_TTL_SECONDS, UI_COMMAND_VERSION, UiCommandsApi, UsersApi, VoiceApi, VoiceInputClient, WORK_COMPOSER_CHIP_CONTENT_MAX_BYTES, WORK_COMPOSER_CHIP_KEY_MAX_LENGTH, WORK_COMPOSER_CHIP_LABEL_MAX_LENGTH, WORK_SURFACE_READY_TIMEOUT_MS, WORK_SURFACE_REQUEST_TIMEOUT_MS, WebsocketClient, WorkCommerceApi, WorkRealtimeApi, WorkRefParseError, WorkRoom, WorkRuntimeApi, WorkSurfaceApi, WorksApi, assertGenerationRequestAllowedByPolicy, buildSpaceInvitePath, buildSpacePath, buildWorkSurfaceRequest, clearGrantedWorkScopes, compileComposition, composition, createBoardExtensionRegistry, createCohubClient, createHttpClient, createSessionGenerationStreamClient, createSessionPatchReducer, createSlugWorkIdResolver, createVoiceInputClient, createWebsocketClient, createWorkBridgeCore, createWorkRuntime, decodeGenerationPolicy, encodeGenerationPolicy, extractBillingPayload, filterDiscoverableGenerationModels, filterGenerationDeclarationsByPolicy, findGenerationModelPolicy, formatWorkRef, getAllowedGenerationModelIds, hasGrantedWorkScopes, hasRequestSourceIdentity, isBillingAccessBlockedCode, isBillingAccessBlockedError, isFeatureNotEntitledError, isGenerationModelHidden, isHttpErrorCode, isRequestSourceClientId, isRequestSourceEmpty, isRequestSourceUuid, isTerminalUiCommandStatus, isUiSurfaceMethod, isUuid, isWorkId, joinApiUrl, matchesUnauthorizedErrorToken, mergeRequestSourceIntoMeta, normalizeBaseUrl, normalizeGenerationPolicy, normalizeRequestSource, normalizeVoiceInputWebsocketUrl, normalizeWebsocketUrl, parseAssistantMessageCommit, parseBoardCompositionInput, parseBoardEffectInput, parseBoardPlaybackPolicy, parseGenerationPolicyFromEnv, parseRequestSourceFromHeaders, parseUiCommand, parseWorkRef, parseWorkSurfaceReady, parseWorkSurfaceResponse, proceduralClip, readRequestSourceFromEnv, requestSourceToHeaders, resolveApiBaseUrl, resolveCohubEnvironment, resolveRequestSourceChannel, resolveVoiceInputWebsocketUrl, resolveWebsocketUrl, resolveWorkTransport, sampleCompositionTracks, sampleEasing, sampleTrack, sanitizeAccessToken, setGrantedWorkScopes, track };