@neta-art/cohub 9.0.1 → 11.0.0

package/dist/index.js

@@ -1,5 +1,5 @@
-import { $ as resolveOpenSurface, A as ReferencesApi, B as DESKTOP_COMMAND_DEFAULT_TIMEOUT_MS, C as SessionPatchReducer, D as connectDisplay, E as DisplayConnection, F as ModelsApi, G as DESKTOP_COMMAND_SETTLEMENT_GRACE_SECONDS, H as DESKTOP_COMMAND_OPEN_TIMEOUT_MS, I as GenerationsApi, J as defaultDesktopCommandTimeoutMs, K as DESKTOP_COMMAND_TERMINAL_TTL_SECONDS, L as CronJobsApi, M as PublicAssetsApi, N as SkillsApi, O as ensureRealtimeConnected, P as PromptsApi, Q as parseDesktopCommandId, R as ChannelsApi, S as parseAssistantMessageCommit, T as SpaceDisplaysApi, U as DESKTOP_COMMAND_PAYLOAD_MAX_BYTES, V as DESKTOP_COMMAND_MAX_TIMEOUT_MS, W as DESKTOP_COMMAND_PENDING_TTL_SECONDS, X as isTerminalDesktopCommandStatus, Y as isDesktopCallMethod, Z as parseDesktopCommand, _ as PublicInviteApi, a as DesktopCommandsApi, at as normalizeDisplayPoint, b as SessionGenerationStreamClient, c as ReferralsApi, d as TasksApi, et as NAVIGATION_ERROR_MESSAGE_MAX_LENGTH, f as BoardClient, g as SpacesApi, h as SpaceWebhooksApi, i as WorkCommerceApi, it as DISPLAY_SYSTEM_ACTIONS, j as SearchApi, k as SessionAccessApi, l as UsersApi, m as SpacePublicFilesApi, n as createHttpClient, o as UiCommandsApi, ot as splitDisplayText, p as SpaceClient, q as DESKTOP_COMMAND_VERSION, r as AppCommerceApi, rt as DISPLAY_INPUT_MAX_TEXT, s as AppsApi, t as CohubHttpClient, tt as DISPLAY_ELEMENT_REF_PATTERN, u as UserApi, v as buildSpaceInvitePath, w as createSessionPatchReducer, x as createSessionGenerationStreamClient, y as buildSpacePath, z as DESKTOP_COMMAND_ACCEPT_TIMEOUT_MS } from "./chunks/http.js";
-import { A as isUuid, C as isRequestSourceUuid, D as readRequestSourceFromEnv, E as parseRequestSourceFromHeaders, M as isUuidOrShortUuid, O as requestSourceToHeaders, S as isRequestSourceEmpty, T as normalizeRequestSource, _ as COHUB_SOURCE_HEADER, a as sanitizeAccessToken, b as hasRequestSourceIdentity, i as matchesUnauthorizedErrorToken, j as isUuidLike, k as resolveRequestSourceChannel, n as HttpTransport, o as REALTIME_ROOM_EVENT_NAME_PATTERN, r as joinApiUrl, t as HttpError, v as COHUB_SOURCE_HEADER_NAMES, w as mergeRequestSourceIntoMeta, x as isRequestSourceClientId, y as REQUEST_SOURCE_VIA_MAX_LENGTH } from "./chunks/transport.js";
+import { $ as isTerminalDesktopCommandStatus, A as BoardClient, B as CronJobsApi, C as SessionPatchReducer, D as connectDisplay, E as DisplayConnection, F as PublicAssetsApi, G as DESKTOP_COMMAND_OPEN_TIMEOUT_MS, H as DESKTOP_COMMAND_ACCEPT_TIMEOUT_MS, I as SkillsApi, J as DESKTOP_COMMAND_SETTLEMENT_GRACE_SECONDS, K as DESKTOP_COMMAND_PAYLOAD_MAX_BYTES, L as PromptsApi, M as SessionAccessApi, N as ReferencesApi, O as readRtcTransportStats, P as SearchApi, Q as isDesktopCallMethod, R as ModelsApi, S as parseAssistantMessageCommit, T as SpaceDisplaysApi, U as DESKTOP_COMMAND_DEFAULT_TIMEOUT_MS, V as ChannelsApi, W as DESKTOP_COMMAND_MAX_TIMEOUT_MS, X as DESKTOP_COMMAND_VERSION, Y as DESKTOP_COMMAND_TERMINAL_TTL_SECONDS, Z as defaultDesktopCommandTimeoutMs, _ as PublicInviteApi, a as WorkCommerceApi, b as SessionGenerationStreamClient, c as AppsApi, ct as normalizeDisplayPoint, d as UserApi, et as parseDesktopCommand, f as TasksApi, g as SpacesApi, h as SpaceWebhooksApi, i as AppCommerceApi, it as DISPLAY_ELEMENT_REF_PATTERN, j as ensureRealtimeConnected, k as waitForIceGathering, l as ReferralsApi, lt as splitDisplayText, m as SpacePublicFilesApi, n as createHttpClient, nt as resolveOpenSurface, o as DesktopCommandsApi, ot as DISPLAY_INPUT_MAX_TEXT, p as SpaceClient, q as DESKTOP_COMMAND_PENDING_TTL_SECONDS, r as RoomsApi, rt as NAVIGATION_ERROR_MESSAGE_MAX_LENGTH, s as UiCommandsApi, st as DISPLAY_SYSTEM_ACTIONS, t as CohubHttpClient, tt as parseDesktopCommandId, u as UsersApi, v as buildSpaceInvitePath, w as createSessionPatchReducer, x as createSessionGenerationStreamClient, y as buildSpacePath, z as GenerationsApi } from "./chunks/http.js";
+import { A as requestSourceToHeaders, C as isRequestSourceClientId, D as normalizeRequestSource, E as mergeRequestSourceIntoMeta, M as isUuid, N as isUuidLike, O as parseRequestSourceFromHeaders, P as isUuidOrShortUuid, S as hasRequestSourceIdentity, T as isRequestSourceUuid, a as sanitizeAccessToken, b as COHUB_SOURCE_HEADER_NAMES, i as matchesUnauthorizedErrorToken, j as resolveRequestSourceChannel, k as readRequestSourceFromEnv, n as HttpTransport, o as REALTIME_ROOM_EVENT_NAME_PATTERN, r as joinApiUrl, t as HttpError, w as isRequestSourceEmpty, x as REQUEST_SOURCE_VIA_MAX_LENGTH, y as COHUB_SOURCE_HEADER } from "./chunks/transport.js";
 import { a as normalizeWebsocketUrl, c as resolveExecutionAppId, d as resolveWebBaseUrl, f as resolveWebsocketUrl, g as scopeListHasPermission, h as isUserLevelPermission, i as normalizeVoiceInputWebsocketUrl, l as resolveExecutionToken, m as USER_LEVEL_PERMISSIONS, n as getCohubContext, o as resolveApiBaseUrl, p as PERMISSIONS, r as normalizeBaseUrl, s as resolveCohubEnvironment, t as COHUB_ENVIRONMENTS, u as resolveVoiceInputWebsocketUrl } from "./chunks/environment.js";
 import { a as extractBillingPayload, c as isFeatureNotEntitledError, i as FEATURE_NOT_ENTITLED_ERROR_CODE, l as isHttpErrorCode, n as createWebsocketClient, o as isBillingAccessBlockedCode, r as BILLING_ACCESS_BLOCKED_ERROR_CODE, s as isBillingAccessBlockedError, t as WebsocketClient } from "./chunks/websocket.js";
 import { VoiceApi, VoiceInputClient, createVoiceInputClient } from "./voice-input.js";
@@ -78,8 +78,95 @@ const UPLOAD_MAX_FILE_BYTES = 1 * GiB;
 const UPLOAD_MAX_BATCH_BYTES = 2 * GiB;
 /** Maximum file count of one upload batch. */
 const UPLOAD_MAX_BATCH_FILES = 2e3;
+//#endregion
+//#region ../protocol/dist/board-url.js
+const BOARD_REMOTE_URL_MAX_LENGTH = 4096;
+function parseIpv4(host) {
+	const parts = host.split(".").map(Number);
+	return parts.length === 4 && parts.every((part) => Number.isInteger(part) && part >= 0 && part <= 255) ? parts : null;
+}
+function isBlockedIpv4(host) {
+	const parts = parseIpv4(host);
+	if (!parts) return false;
+	const [first, second, third] = parts;
+	if (first === 0 || first === 10 || first === 127) return true;
+	if (first === 100 && second >= 64 && second <= 127) return true;
+	if (first === 169 && second === 254) return true;
+	if (first === 172 && second >= 16 && second <= 31) return true;
+	if (first === 192 && second === 168) return true;
+	if (first === 192 && second === 0 && (third === 0 || third === 2)) return true;
+	if (first === 192 && second === 88 && third === 99) return true;
+	if (first === 198 && (second === 18 || second === 19)) return true;
+	if (first === 198 && second === 51 && third === 100) return true;
+	if (first === 203 && second === 0 && third === 113) return true;
+	return first >= 224;
+}
+function expandIpv6(host) {
+	const [head, tail, extra] = host.toLowerCase().split("::");
+	if (extra !== void 0) return null;
+	const headParts = head ? head.split(":").filter(Boolean) : [];
+	const tailParts = tail ? tail.split(":").filter(Boolean) : [];
+	const missing = 8 - headParts.length - tailParts.length;
+	if (missing < 0 || tail === void 0 && missing !== 0) return null;
+	const parts = [
+		...headParts,
+		...Array.from({ length: missing }, () => "0"),
+		...tailParts
+	];
+	if (parts.length !== 8 || parts.some((part) => !/^[0-9a-f]{1,4}$/.test(part))) return null;
+	return parts.map((part) => part.padStart(4, "0"));
+}
+function isBlockedIpv6(host) {
+	const parts = expandIpv6(host);
+	if (!parts) return true;
+	if (parts.every((part) => part === "0000")) return true;
+	if (parts.slice(0, 7).every((part) => part === "0000") && parts[7] === "0001") return true;
+	if (parts.slice(0, 5).every((part) => part === "0000") && parts[5] === "ffff") {
+		const high = Number.parseInt(parts[6] ?? "0", 16);
+		const low = Number.parseInt(parts[7] ?? "0", 16);
+		return isBlockedIpv4(`${high >> 8}.${high & 255}.${low >> 8}.${low & 255}`);
+	}
+	if (parts.slice(0, 6).every((part) => part === "0000")) return true;
+	const first = Number.parseInt(parts[0] ?? "0", 16);
+	if ((first & 65024) === 64512) return true;
+	if ((first & 65472) === 65152 || (first & 65472) === 65216) return true;
+	if ((first & 65280) === 65280) return true;
+	return parts[0] === "2001" && parts[1] === "0db8";
+}
+function isPublicBoardRemoteAddress(value) {
+	const address = value.toLowerCase().replace(/^\[|\]$/g, "").replace(/\.$/, "");
+	if (parseIpv4(address)) return !isBlockedIpv4(address);
+	return address.includes(":") && !isBlockedIpv6(address);
+}
+function isBlockedHost(hostname) {
+	const host = hostname.toLowerCase().replace(/^\[|\]$/g, "").replace(/\.$/, "");
+	if (host === "localhost" || host.endsWith(".localhost") || host.endsWith(".local") || host.endsWith(".internal")) return true;
+	if (parseIpv4(host) || host.includes(":")) return !isPublicBoardRemoteAddress(host);
+	return false;
+}
+/**
+* Normalize a browser-loadable public HTTP(S) URL. This blocks explicit local
+* addresses; any future server-side fetcher must additionally validate DNS
+* resolution to defend against rebinding.
+*/
+function normalizeBoardRemoteUrl(value) {
+	if (typeof value !== "string") return void 0;
+	const input = value.trim();
+	if (!input || input.length > 4096) return void 0;
+	try {
+		const url = new URL(input);
+		if (url.protocol !== "https:" && url.protocol !== "http:") return void 0;
+		if (url.username || url.password || isBlockedHost(url.hostname)) return;
+		const normalized = url.toString();
+		return normalized.length <= 4096 ? normalized : void 0;
+	} catch {
+		return;
+	}
+}
+z.string().max(BOARD_REMOTE_URL_MAX_LENGTH).refine((value) => normalizeBoardRemoteUrl(value) !== void 0, { message: "URL must be a public HTTP(S) URL without credentials" });
 const BOARD_CAMERA_TARGET = "camera";
-const BoardIdSchema = z.string().min(1).max(160).regex(/^[^\s/]+$/, "ids must not contain whitespace or '/'").refine((value) => value !== BOARD_CAMERA_TARGET, "\"camera\" is reserved");
+const BoardKeySchema = z.string().min(1).max(160).regex(/^[^\s/]+$/, "ids must not contain whitespace or '/'");
+const BoardIdSchema = BoardKeySchema.refine((value) => value !== BOARD_CAMERA_TARGET, "\"camera\" is reserved");
 const finite$1 = z.number().finite();
 const nonNegative = finite$1.nonnegative();
 const ratio = finite$1.min(0).max(1);
@@ -126,10 +213,29 @@ const BoardStyleSchema = z.object({
 	trim: ratio.optional()
 }).strict();
 function isSafeBoardSourcePath(value) {
-	return value.length > 0 && value.length <= 4096 && !value.startsWith("/") && !value.includes("\\") && value.split("/").every((part) => part.length > 0 && part !== "." && part !== "..");
+	return value.length > 0 && value.length <= 4096 && !value.startsWith("/") && !/^[a-z][a-z\d+.-]*:/i.test(value.trimStart()) && !value.includes("\\") && value.split("/").every((part) => part.length > 0 && part !== "." && part !== "..");
 }
 const srcSchema = z.string().refine(isSafeBoardSourcePath, "src must be a relative Space file path");
+function parseBoardMediaSource(src) {
+	if (isSafeBoardSourcePath(src)) return {
+		kind: "file",
+		value: src
+	};
+	return normalizeBoardRemoteUrl(src) ? {
+		kind: "url",
+		value: src
+	} : null;
+}
+const BoardMediaSourceSchema = z.string().max(4096).refine((src) => parseBoardMediaSource(src) !== null, "src must be a public HTTP(S) URL or relative Space file path").describe("Prefer a stable public HTTP(S) URL; relative Space file paths remain supported.");
+const BoardScriptSchema = z.object({
+	src: srcSchema.refine((path) => /\.m?js$/.test(path), "script src must be a .js or .mjs module"),
+	params: z.record(z.string(), z.json()).default({}),
+	targets: z.record(z.string().min(1).max(80), BoardIdSchema).default({}),
+	seed: z.string().min(1).max(160).optional(),
+	enabled: z.boolean().default(true)
+}).strict();
 const itemEnvelope = {
+	script: BoardScriptSchema.optional(),
 	parent: BoardIdSchema.optional(),
 	z: finite$1.optional(),
 	position: BoardVec2Schema.default({
@@ -174,6 +280,7 @@ const BoardFrameItemSchema = z.object({
 	type: z.literal("frame"),
 	props: z.object({
 		label: z.string().max(280).default(""),
+		decoration: z.enum(["frame", "none"]).optional(),
 		clip: z.boolean().default(true)
 	}).strict().prefault({})
 }).strict();
@@ -260,7 +367,7 @@ const BoardArrowItemSchema = z.object({
 	}).strict()
 }).strict();
 const fileProps = {
-	src: srcSchema,
+	src: BoardMediaSourceSchema,
 	snapshot: z.object({
 		title: z.string().optional(),
 		mimeType: z.string().optional(),
@@ -389,14 +496,11 @@ const BoardEffectItemSchema = z.object({
 		seed: z.string().min(1).max(160).optional()
 	}).strict()
 }).strict();
-const BoardSketchItemSchema = z.object({
+const BoardCustomItemSchema = z.object({
 	...boxed(480, 320),
-	type: z.literal("sketch"),
-	props: z.object({
-		src: srcSchema.refine((path) => /\.m?js$/.test(path), "sketch src must be a .js or .mjs module"),
-		params: z.record(z.string(), z.unknown()).default({}),
-		seed: z.string().min(1).max(160).optional()
-	}).strict()
+	type: z.literal("custom"),
+	script: BoardScriptSchema,
+	props: z.object({}).strict().default({})
 }).strict();
 const BOARD_EXTENSION_TYPE_PATTERN = /^[a-z][a-z0-9]*(?:\.[a-z0-9-]+)+$/;
 const BoardExtensionItemSchema = z.object({
@@ -420,7 +524,7 @@ const BOARD_ITEM_SCHEMAS = {
 	file: BoardFileItemSchema,
 	task: BoardTaskItemSchema,
 	effect: BoardEffectItemSchema,
-	sketch: BoardSketchItemSchema
+	custom: BoardCustomItemSchema
 };
 const BOARD_ITEM_TYPES = Object.keys(BOARD_ITEM_SCHEMAS);
 function isBuiltinItemType(type) {
@@ -535,7 +639,7 @@ const BoardAnimationHeaderSchema = z.object({
 	end: z.enum(["hold", "reset"]).default("hold"),
 	markers: z.array(BoardMarkerSchema).max(1e4).default([])
 }).strict();
-const BoardAnimationSchema = BoardAnimationHeaderSchema.extend({ tracks: z.record(BoardIdSchema, BoardTrackSchema).default({}) }).strict();
+const BoardAnimationSchema = BoardAnimationHeaderSchema.extend({ tracks: z.record(BoardKeySchema, BoardTrackSchema).default({}) }).strict();
 const BOARD_ENTER_PRESETS = [
 	"fade-in",
 	"rise",
@@ -575,7 +679,7 @@ const patchObject = z.record(z.string(), z.unknown());
 const BoardPatchSchema = z.object({
 	board: patchObject.nullable().optional(),
 	items: z.record(BoardIdSchema, patchObject.nullable()).optional(),
-	animations: z.record(BoardIdSchema, patchObject.and(z.object({ tracks: z.record(BoardIdSchema, patchObject.nullable()).optional() })).nullable()).optional()
+	animations: z.record(BoardIdSchema, patchObject.and(z.object({ tracks: z.record(BoardKeySchema, patchObject.nullable()).optional() })).nullable()).optional()
 }).strict();
 //#endregion
 //#region ../protocol/dist/board-json.js
@@ -1119,7 +1223,8 @@ const NOT_ANIMATABLE = /* @__PURE__ */ new Set([
 	"parent",
 	"z",
 	"locked",
-	"metadata"
+	"metadata",
+	"script"
 ]);
 const CAMERA_PROPERTIES = {
 	focus: {
@@ -1646,92 +1751,6 @@ function parseBoardDocument(input) {
 	} : result;
 }
 //#endregion
-//#region ../protocol/dist/board-url.js
-const BOARD_REMOTE_URL_MAX_LENGTH = 4096;
-function parseIpv4(host) {
-	const parts = host.split(".").map(Number);
-	return parts.length === 4 && parts.every((part) => Number.isInteger(part) && part >= 0 && part <= 255) ? parts : null;
-}
-function isBlockedIpv4(host) {
-	const parts = parseIpv4(host);
-	if (!parts) return false;
-	const [first, second, third] = parts;
-	if (first === 0 || first === 10 || first === 127) return true;
-	if (first === 100 && second >= 64 && second <= 127) return true;
-	if (first === 169 && second === 254) return true;
-	if (first === 172 && second >= 16 && second <= 31) return true;
-	if (first === 192 && second === 168) return true;
-	if (first === 192 && second === 0 && (third === 0 || third === 2)) return true;
-	if (first === 192 && second === 88 && third === 99) return true;
-	if (first === 198 && (second === 18 || second === 19)) return true;
-	if (first === 198 && second === 51 && third === 100) return true;
-	if (first === 203 && second === 0 && third === 113) return true;
-	return first >= 224;
-}
-function expandIpv6(host) {
-	const [head, tail, extra] = host.toLowerCase().split("::");
-	if (extra !== void 0) return null;
-	const headParts = head ? head.split(":").filter(Boolean) : [];
-	const tailParts = tail ? tail.split(":").filter(Boolean) : [];
-	const missing = 8 - headParts.length - tailParts.length;
-	if (missing < 0 || tail === void 0 && missing !== 0) return null;
-	const parts = [
-		...headParts,
-		...Array.from({ length: missing }, () => "0"),
-		...tailParts
-	];
-	if (parts.length !== 8 || parts.some((part) => !/^[0-9a-f]{1,4}$/.test(part))) return null;
-	return parts.map((part) => part.padStart(4, "0"));
-}
-function isBlockedIpv6(host) {
-	const parts = expandIpv6(host);
-	if (!parts) return true;
-	if (parts.every((part) => part === "0000")) return true;
-	if (parts.slice(0, 7).every((part) => part === "0000") && parts[7] === "0001") return true;
-	if (parts.slice(0, 5).every((part) => part === "0000") && parts[5] === "ffff") {
-		const high = Number.parseInt(parts[6] ?? "0", 16);
-		const low = Number.parseInt(parts[7] ?? "0", 16);
-		return isBlockedIpv4(`${high >> 8}.${high & 255}.${low >> 8}.${low & 255}`);
-	}
-	if (parts.slice(0, 6).every((part) => part === "0000")) return true;
-	const first = Number.parseInt(parts[0] ?? "0", 16);
-	if ((first & 65024) === 64512) return true;
-	if ((first & 65472) === 65152 || (first & 65472) === 65216) return true;
-	if ((first & 65280) === 65280) return true;
-	return parts[0] === "2001" && parts[1] === "0db8";
-}
-function isPublicBoardRemoteAddress(value) {
-	const address = value.toLowerCase().replace(/^\[|\]$/g, "").replace(/\.$/, "");
-	if (parseIpv4(address)) return !isBlockedIpv4(address);
-	return address.includes(":") && !isBlockedIpv6(address);
-}
-function isBlockedHost(hostname) {
-	const host = hostname.toLowerCase().replace(/^\[|\]$/g, "").replace(/\.$/, "");
-	if (host === "localhost" || host.endsWith(".localhost") || host.endsWith(".local") || host.endsWith(".internal")) return true;
-	if (parseIpv4(host) || host.includes(":")) return !isPublicBoardRemoteAddress(host);
-	return false;
-}
-/**
-* Normalize a browser-loadable public HTTP(S) URL. This blocks explicit local
-* addresses; any future server-side fetcher must additionally validate DNS
-* resolution to defend against rebinding.
-*/
-function normalizeBoardRemoteUrl(value) {
-	if (typeof value !== "string") return void 0;
-	const input = value.trim();
-	if (!input || input.length > 4096) return void 0;
-	try {
-		const url = new URL(input);
-		if (url.protocol !== "https:" && url.protocol !== "http:") return void 0;
-		if (url.username || url.password || isBlockedHost(url.hostname)) return;
-		const normalized = url.toString();
-		return normalized.length <= 4096 ? normalized : void 0;
-	} catch {
-		return;
-	}
-}
-z.string().max(BOARD_REMOTE_URL_MAX_LENGTH).refine((value) => normalizeBoardRemoteUrl(value) !== void 0, { message: "URL must be a public HTTP(S) URL without credentials" });
-//#endregion
 //#region ../protocol/dist/turn-origin.js
 const record$2 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
 const normalizeSessionTurnOrigin = (value) => {
@@ -2030,6 +2049,102 @@ function compileDisplayActions(actions, width, height) {
 	if (events.length === 0) throw new DisplayActionError("no action touches the display");
 	return events;
 }
+z.object({
+	urls: z.union([z.string().min(1).max(512), z.array(z.string().min(1).max(512)).min(1).max(16)]),
+	username: z.string().max(512).optional(),
+	credential: z.string().max(512).optional()
+});
+const sessionDescriptionSchema = z.object({
+	type: z.enum(["offer", "answer"]),
+	sdp: z.string().min(1).max(65536)
+});
+const APP_RTC_DELIVERIES = ["reliable", "latest"];
+const APP_RTC_PUBLICATION_KINDS = [
+	"data",
+	"audio",
+	"video"
+];
+const APP_RTC_NAME_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,63}$/;
+const isAppRtcName = (value) => typeof value === "string" && APP_RTC_NAME_PATTERN.test(value) && !value.toLowerCase().startsWith("cohub.");
+const APP_RTC_LIMITS = {
+	channelsPerMember: 16,
+	tracksPerMember: 4,
+	dataSubscriptions: 512,
+	mediaSubscriptions: 16,
+	messageBytes: 65536,
+	operationsPerSecond: 10,
+	opensPerSecond: 2,
+	batch: 64
+};
+const APP_RTC_QUALITIES = [
+	"high",
+	"medium",
+	"low"
+];
+const APP_RTC_SIMULCAST_LAYERS = [
+	{
+		rid: "f",
+		quality: "high",
+		scaleResolutionDownBy: 1
+	},
+	{
+		rid: "h",
+		quality: "medium",
+		scaleResolutionDownBy: 2
+	},
+	{
+		rid: "q",
+		quality: "low",
+		scaleResolutionDownBy: 4
+	}
+];
+z.object({
+	id: z.string().min(1).max(32),
+	name: z.string().regex(APP_RTC_NAME_PATTERN),
+	kind: z.enum(APP_RTC_PUBLICATION_KINDS),
+	delivery: z.enum(APP_RTC_DELIVERIES).optional(),
+	simulcast: z.boolean().optional()
+});
+const nameSchema = z.string().refine(isAppRtcName, "invalid name");
+const participantIdSchema = z.string().uuid();
+z.object({
+	ticket: z.string().min(1).max(4096),
+	participantId: participantIdSchema
+});
+z.object({ answer: sessionDescriptionSchema.refine((value) => value.type === "answer", "expected an answer") });
+z.union([z.object({ channels: z.array(z.object({
+	name: nameSchema,
+	delivery: z.enum(APP_RTC_DELIVERIES)
+})).min(1).max(APP_RTC_LIMITS.channelsPerMember) }), z.object({
+	offer: sessionDescriptionSchema.refine((value) => value.type === "offer", "expected an offer"),
+	tracks: z.array(z.object({
+		name: nameSchema,
+		kind: z.enum(["audio", "video"]),
+		mid: z.string().min(1).max(32),
+		simulcast: z.boolean().optional()
+	})).min(1).max(APP_RTC_LIMITS.tracksPerMember)
+})]);
+z.object({
+	ids: z.array(z.string().min(1).max(32)).min(1).max(APP_RTC_LIMITS.channelsPerMember + APP_RTC_LIMITS.tracksPerMember),
+	offer: sessionDescriptionSchema.refine((value) => value.type === "offer", "expected an offer").optional()
+});
+const subscriptionRefSchema = z.object({
+	participantId: participantIdSchema,
+	publicationId: z.string().min(1).max(32)
+});
+const qualitySchema = z.enum(APP_RTC_QUALITIES);
+z.object({
+	kind: z.enum(["data", "media"]),
+	items: z.array(subscriptionRefSchema.extend({ quality: qualitySchema.optional() })).min(1).max(APP_RTC_LIMITS.batch)
+});
+z.object({ items: z.array(subscriptionRefSchema.extend({
+	mid: z.string().min(1).max(32),
+	quality: qualitySchema.optional()
+})).min(1).max(APP_RTC_LIMITS.mediaSubscriptions) });
+z.object({
+	items: z.array(subscriptionRefSchema).min(1).max(APP_RTC_LIMITS.batch),
+	offer: sessionDescriptionSchema.refine((value) => value.type === "offer", "expected an offer").optional()
+});
 //#endregion
 //#region ../protocol/dist/generation/catalog.js
 function isGenerationModelHidden(model) {
@@ -2765,6 +2880,8 @@ function codexOutput(block) {
 		text: block.text
 	}] : [];
 }
+const CODEX_CALL_ID_MAX = 64;
+const codexCallId = (id) => id.length <= CODEX_CALL_ID_MAX ? id : `call_${fingerprint(id)}`;
 function codexMessageRecords(input, message, warnings) {
 	const timestamp = timestampOf(message, input.timestamp ?? DEFAULT_TIMESTAMP);
 	const records = [];
@@ -2818,11 +2935,11 @@ function codexMessageRecords(input, message, warnings) {
 			type: "function_call",
 			name: block.name,
 			arguments: JSON.stringify(block.input),
-			call_id: block.id
+			call_id: codexCallId(block.id)
 		});
 		else if (block.type === "tool_result") push(records.length, {
 			type: "function_call_output",
-			call_id: block.tool_use_id,
+			call_id: codexCallId(block.tool_use_id),
 			output: typeof block.content === "string" ? block.content : block.content.flatMap((item) => item.type === "text" ? [item.text] : []).join("\n")
 		});
 	}
@@ -3134,13 +3251,27 @@ const resolveHarness = (meta) => {
 	const value = meta && typeof meta === "object" ? meta.harness : null;
 	return isLocalHarness(value) ? value : "cohub";
 };
+const runtimeThinkingLevelSchema = z.enum([
+	"off",
+	"minimal",
+	"low",
+	"medium",
+	"high",
+	"xhigh",
+	"max"
+]);
 const runtimeCapabilitiesSchema = z.object({
 	harnesses: z.array(z.enum(["pi", "codex"])).max(2),
 	models: z.array(z.object({
 		harness: z.enum(["pi", "codex"]),
 		provider: z.string().max(100),
 		id: z.string().min(1).max(255),
-		name: z.string().max(255)
+		name: z.string().max(255),
+		/** The model the Harness runs when none is requested; at most one per Harness. */
+		isDefault: z.boolean().optional(),
+		reasoning: z.boolean().optional(),
+		defaultThinkingLevel: runtimeThinkingLevelSchema.optional(),
+		thinkingLevelMap: z.partialRecord(runtimeThinkingLevelSchema, z.string().max(100).nullable()).optional()
 	})).max(2e3)
 });
 const runtimePendingExecutionSchema = z.object({
@@ -3711,6 +3842,11 @@ const APP_APPEARANCE_TOKENS = [
 	"brand-ring",
 	"brand-contrast-fg",
 	"error-fg",
+	"success",
+	"warning",
+	"error",
+	"info",
+	"status-running",
 	"selection-bg",
 	"overlay-scrim",
 	"shadow-subtle",
@@ -3805,6 +3941,33 @@ const buildAppEmbedShellChanged = (input) => ({
 	...input
 });
 //#endregion
+//#region ../protocol/dist/app-devices.js
+const APP_DEVICES = [
+	"camera",
+	"microphone",
+	"screen"
+];
+const isAppDevice = (value) => typeof value === "string" && APP_DEVICES.includes(value);
+function parseAppDevices(value) {
+	const items = typeof value === "string" ? value.split(/[\s,]+/) : Array.isArray(value) ? value : [];
+	const wanted = new Set(items.map((item) => typeof item === "string" ? item.trim().toLowerCase() : item).filter(isAppDevice));
+	return APP_DEVICES.filter((device) => wanted.has(device));
+}
+const APP_DEVICES_REQUEST_TYPE = "cohub.app.devices.request";
+const APP_DEVICES_RESULT_TYPE = "cohub.app.devices.result";
+function parseAppDevicesResult(value) {
+	if (!value || typeof value !== "object") return null;
+	const record = value;
+	if (record.type !== "cohub.app.devices.result" || typeof record.requestId !== "string") return null;
+	const status = record.status;
+	if (status !== "granted" && status !== "denied" && status !== "unavailable") return null;
+	return {
+		type: APP_DEVICES_RESULT_TYPE,
+		requestId: record.requestId,
+		status
+	};
+}
+//#endregion
 //#region src/apis/billing.ts
 var BillingApi = class {
 	transport;
@@ -3887,6 +4050,960 @@ var BillingApi = class {
 	}
 };
 //#endregion
+//#region src/apis/app-room-rtc.ts
+var AppRtcError = class extends Error {
+	code;
+	constructor(code, message) {
+		super(message);
+		this.code = code;
+		this.name = "AppRtcError";
+	}
+};
+const SERVER_CODES = /* @__PURE__ */ new Set([
+	"RTC_UNAVAILABLE",
+	"RTC_FORBIDDEN",
+	"RTC_LIMIT_EXCEEDED",
+	"RTC_RATE_LIMITED",
+	"ROOM_NOT_FOUND",
+	"ROOM_EXPIRED"
+]);
+const toAppRtcError = (error) => {
+	if (error instanceof AppRtcError) return error;
+	if (error instanceof HttpError && SERVER_CODES.has(error.code)) return new AppRtcError(error.code, error.message);
+	return new AppRtcError("RTC_FAILED", error instanceof Error ? error.message : String(error));
+};
+const HEADER_BYTES = 5;
+const FLAG_BINARY = 1;
+const encoder = new TextEncoder();
+const decoder = new TextDecoder();
+function encodeAppRtcFrame(data, sequence) {
+	let payload;
+	let flags = 0;
+	if (data instanceof ArrayBuffer) {
+		payload = new Uint8Array(data);
+		flags = FLAG_BINARY;
+	} else if (ArrayBuffer.isView(data)) {
+		payload = new Uint8Array(data.buffer, data.byteOffset, data.byteLength);
+		flags = FLAG_BINARY;
+	} else {
+		const json = JSON.stringify(data);
+		if (json === void 0) throw new TypeError("RTC message is not serializable");
+		payload = encoder.encode(json);
+	}
+	if (payload.byteLength > APP_RTC_LIMITS.messageBytes) throw new RangeError(`RTC message exceeds ${APP_RTC_LIMITS.messageBytes} bytes`);
+	const frame = new Uint8Array(HEADER_BYTES + payload.byteLength);
+	frame[0] = flags;
+	new DataView(frame.buffer).setUint32(1, sequence >>> 0);
+	frame.set(payload, HEADER_BYTES);
+	return frame;
+}
+function decodeAppRtcFrame(frame) {
+	if (frame.byteLength < HEADER_BYTES) return null;
+	const view = new DataView(frame);
+	const flags = view.getUint8(0);
+	const sequence = view.getUint32(1);
+	const payload = new Uint8Array(frame, HEADER_BYTES);
+	if (flags & FLAG_BINARY) return {
+		data: payload.slice().buffer,
+		sequence
+	};
+	try {
+		return {
+			data: JSON.parse(decoder.decode(payload)),
+			sequence
+		};
+	} catch {
+		return null;
+	}
+}
+const isNewerSequence = (next, last) => last === null || next !== last && next - last >>> 0 < 2147483648;
+const publicationsKey = (members) => members.map((member) => `${member.participantId}:${member.publications?.map((item) => item.id).join(",") ?? ""}`).join(";");
+const GATHER_TIMEOUT_MS = 2e3;
+const CONNECT_TIMEOUT_MS = 15e3;
+const PENDING_RELIABLE_FRAMES = 256;
+const LATEST_BACKLOG_BYTES = 65536;
+const RECONNECT_DELAYS_MS = [
+	500,
+	1e3,
+	2e3,
+	5e3,
+	1e4,
+	3e4
+];
+const RATE_LIMIT_RETRY_MS = 1e3;
+var ConnectionReplacedError = class extends Error {
+	constructor() {
+		super("RTC connection was replaced");
+		this.name = "ConnectionReplacedError";
+	}
+};
+const policyOf = (delivery) => delivery === "latest" ? {
+	ordered: false,
+	maxRetransmits: 0
+} : { ordered: true };
+const isSessionLost = (error) => error instanceof HttpError && (error.code === "RTC_STALE" || error.code === "RTC_SESSION_NOT_FOUND");
+const isRoomGone = (error) => error instanceof HttpError && (error.code === "ROOM_NOT_FOUND" || error.code === "ROOM_EXPIRED");
+const chunk = (items, size) => {
+	const chunks = [];
+	for (let index = 0; index < items.length; index += size) chunks.push(items.slice(index, index + size));
+	return chunks;
+};
+const mediaKey = (participantId, publicationId) => `${participantId}:${publicationId}`;
+var AppRtcChannel = class {
+	rtc;
+	name;
+	delivery;
+	handlers = /* @__PURE__ */ new Set();
+	peerHandlers = /* @__PURE__ */ new Set();
+	openPeers = /* @__PURE__ */ new Set();
+	publication = null;
+	pending = [];
+	sequence = 0;
+	closed = false;
+	constructor(rtc, name, delivery) {
+		this.rtc = rtc;
+		this.name = name;
+		this.delivery = delivery;
+	}
+	get peers() {
+		return [...this.openPeers];
+	}
+	send(data) {
+		if (this.closed || this.rtc.state === "closed") return false;
+		this.sequence = this.sequence + 1 >>> 0;
+		const frame = encodeAppRtcFrame(data, this.sequence);
+		const channel = this.publication?.channel;
+		if (channel?.readyState === "open") return this.write(channel, frame);
+		if (this.delivery === "latest") this.pending = [frame];
+		else if (this.pending.length >= PENDING_RELIABLE_FRAMES) return false;
+		else this.pending.push(frame);
+		return true;
+	}
+	onMessage(handler) {
+		this.handlers.add(handler);
+		return () => this.handlers.delete(handler);
+	}
+	/** Reports when this client starts or stops receiving a peer's channel. */
+	onPeer(handler) {
+		this.peerHandlers.add(handler);
+		return () => this.peerHandlers.delete(handler);
+	}
+	close() {
+		if (this.closed) return;
+		this.closed = true;
+		this.handlers.clear();
+		this.peerHandlers.clear();
+		this.openPeers.clear();
+		this.pending = [];
+		this.rtc.closeChannel(this);
+	}
+	/** @internal */
+	get isOpen() {
+		return !this.closed;
+	}
+	/** @internal */
+	get publicationId() {
+		return this.publication?.id ?? null;
+	}
+	/** @internal */
+	attach(id, channel) {
+		this.publication = {
+			id,
+			channel
+		};
+		channel.binaryType = "arraybuffer";
+		const flush = () => {
+			const frames = this.pending;
+			this.pending = [];
+			for (const frame of frames) this.write(channel, frame);
+		};
+		if (channel.readyState === "open") flush();
+		else channel.addEventListener("open", flush, { once: true });
+	}
+	/** @internal */
+	detach() {
+		this.publication = null;
+	}
+	/** @internal */
+	fail() {
+		this.close();
+	}
+	/** @internal */
+	deliver(from, data) {
+		for (const handler of this.handlers) handler({
+			from,
+			data
+		});
+	}
+	/** @internal */
+	setPeer(participantId, open) {
+		if (open ? this.openPeers.has(participantId) : !this.openPeers.delete(participantId)) return;
+		if (open) this.openPeers.add(participantId);
+		for (const handler of this.peerHandlers) handler({
+			participantId,
+			open
+		});
+	}
+	write(channel, frame) {
+		if (this.delivery === "latest" && channel.bufferedAmount > LATEST_BACKLOG_BYTES) return false;
+		try {
+			channel.send(frame);
+			return true;
+		} catch {
+			return false;
+		}
+	}
+};
+var AppRoomRtc = class {
+	host;
+	_state = "connecting";
+	pc = null;
+	sessionId = null;
+	queue = Promise.resolve();
+	reconcileQueued = false;
+	reconcileFailures = 0;
+	reconnectAttempt = 0;
+	reconnectTimer = null;
+	generation = 0;
+	filter = null;
+	channels = /* @__PURE__ */ new Map();
+	channelsToPublish = /* @__PURE__ */ new Set();
+	remoteData = /* @__PURE__ */ new Map();
+	localTracks = /* @__PURE__ */ new Map();
+	remoteMedia = /* @__PURE__ */ new Map();
+	mediaByMid = /* @__PURE__ */ new Map();
+	stateHandlers = /* @__PURE__ */ new Set();
+	trackHandlers = /* @__PURE__ */ new Set();
+	offMembers;
+	constructor(host) {
+		this.host = host;
+		let published = "";
+		this.offMembers = host.onMembersChanged((members) => {
+			const next = publicationsKey(members);
+			if (next === published) return;
+			published = next;
+			this.scheduleReconcile();
+		});
+	}
+	get state() {
+		return this._state;
+	}
+	get tracks() {
+		const tracks = [];
+		for (const [key, item] of this.remoteMedia) {
+			if (!item.track) continue;
+			tracks.push({
+				participantId: item.participantId,
+				name: item.name,
+				kind: item.kind,
+				track: item.track,
+				quality: item.quality ?? null,
+				setQuality: (quality) => this.setQuality(key, quality)
+			});
+		}
+		return tracks;
+	}
+	get candidates() {
+		return this.mediaCandidates().map(({ candidate }) => candidate);
+	}
+	onStateChange(handler) {
+		this.stateHandlers.add(handler);
+		return () => this.stateHandlers.delete(handler);
+	}
+	onTracksChanged(handler) {
+		this.trackHandlers.add(handler);
+		return () => this.trackHandlers.delete(handler);
+	}
+	select(filter) {
+		this.filter = filter;
+		this.scheduleReconcile();
+	}
+	channel(name, options = {}) {
+		if (!isAppRtcName(name)) throw new AppRtcError("RTC_FAILED", `invalid RTC channel name: ${name}`);
+		const delivery = options.delivery ?? "reliable";
+		const existing = this.channels.get(name);
+		if (existing?.isOpen) {
+			if (existing.delivery !== delivery) throw new AppRtcError("RTC_FAILED", `RTC channel ${name} is already open with ${existing.delivery} delivery`);
+			return existing;
+		}
+		if (this._state === "closed") throw new AppRtcError("RTC_CLOSED", "RTC connection is closed");
+		const channel = new AppRtcChannel(this, name, delivery);
+		this.channels.set(name, channel);
+		this.publishChannel(channel);
+		this.scheduleReconcile();
+		return channel;
+	}
+	async publish(tracks) {
+		if (this._state === "closed") throw new AppRtcError("RTC_CLOSED", "RTC connection is closed");
+		const inputs = Object.entries(tracks);
+		for (const [name] of inputs) {
+			if (!isAppRtcName(name)) throw new AppRtcError("RTC_FAILED", `invalid RTC track name: ${name}`);
+			if (this.localTracks.has(name)) throw new AppRtcError("RTC_FAILED", `RTC track ${name} is already published`);
+		}
+		if (this.localTracks.size + inputs.length > APP_RTC_LIMITS.tracksPerMember) throw new AppRtcError("RTC_LIMIT_EXCEEDED", `at most ${APP_RTC_LIMITS.tracksPerMember} tracks per member`);
+		const entries = inputs.map(([name, input]) => {
+			const { track, simulcast } = "track" in input ? input : {
+				track: input,
+				simulcast: false
+			};
+			const kind = track.kind === "audio" ? "audio" : "video";
+			return this.localEntry(name, kind, track, simulcast === true && kind === "video");
+		});
+		for (const entry of entries) this.localTracks.set(entry.name, entry);
+		try {
+			await this.enqueue(() => this.publishTracks(entries.map((entry) => entry.name)));
+		} catch (error) {
+			if (!(error instanceof ConnectionReplacedError)) {
+				for (const entry of entries) this.dropLocal(entry);
+				throw toAppRtcError(error);
+			}
+		}
+		return Object.fromEntries(entries.map((entry) => [entry.name, this.localHandle(entry)]));
+	}
+	async stats() {
+		return this.pc ? readRtcTransportStats(await this.pc.getStats()) : {
+			path: null,
+			relayProtocol: null,
+			rttMs: null
+		};
+	}
+	close() {
+		if (this._state === "closed") return;
+		this.setState("closed");
+		this.offMembers();
+		if (this.reconnectTimer) clearTimeout(this.reconnectTimer);
+		for (const channel of this.channels.values()) channel.close();
+		for (const entry of this.localTracks.values()) entry.track.removeEventListener("ended", entry.onEnded);
+		this.teardown(true);
+	}
+	/** @internal */
+	async start() {
+		try {
+			await this.connect();
+		} catch (error) {
+			throw toAppRtcError(error);
+		}
+	}
+	/** @internal */
+	async verify() {
+		if (this._state === "closed" || !this.sessionId) return;
+		try {
+			await this.request("GET", `/${this.sessionId}`);
+		} catch (error) {
+			if (isSessionLost(error)) this.reconnect();
+		}
+	}
+	/** @internal */
+	closeChannel(channel) {
+		if (this.channels.get(channel.name) === channel) this.channels.delete(channel.name);
+		const id = channel.publicationId;
+		channel.detach();
+		if (id) this.enqueue(() => this.unpublishData([id])).catch(() => void 0);
+		this.scheduleReconcile();
+	}
+	localEntry(name, kind, track, simulcast) {
+		const entry = {
+			name,
+			kind,
+			track,
+			simulcast,
+			transceiver: null,
+			id: null,
+			ended: /* @__PURE__ */ new Set(),
+			onEnded: () => void 0
+		};
+		entry.onEnded = () => {
+			if (this.localTracks.get(name) !== entry) return;
+			for (const handler of entry.ended) handler();
+			this.stopLocal(entry).catch(() => void 0);
+		};
+		track.addEventListener("ended", entry.onEnded);
+		return entry;
+	}
+	localHandle(entry) {
+		return {
+			name: entry.name,
+			kind: entry.kind,
+			simulcast: entry.simulcast,
+			get track() {
+				return entry.track;
+			},
+			replace: async (track) => {
+				if (track.kind !== entry.kind) throw new AppRtcError("RTC_FAILED", `replace ${entry.name} with another ${entry.kind} track`);
+				if (this.localTracks.get(entry.name) !== entry) throw new AppRtcError("RTC_CLOSED", `RTC track ${entry.name} has stopped`);
+				entry.track.removeEventListener("ended", entry.onEnded);
+				entry.track = track;
+				track.addEventListener("ended", entry.onEnded);
+				await entry.transceiver?.sender.replaceTrack(track);
+			},
+			onEnded: (handler) => {
+				entry.ended.add(handler);
+				return () => entry.ended.delete(handler);
+			},
+			stop: () => this.stopLocal(entry)
+		};
+	}
+	dropLocal(entry) {
+		entry.track.removeEventListener("ended", entry.onEnded);
+		if (this.localTracks.get(entry.name) === entry) this.localTracks.delete(entry.name);
+	}
+	stopLocal(entry) {
+		if (this.localTracks.get(entry.name) !== entry) return Promise.resolve();
+		this.dropLocal(entry);
+		return this.enqueue(() => this.unpublishTrack(entry)).catch((error) => {
+			if (error instanceof ConnectionReplacedError) return;
+			throw toAppRtcError(error);
+		});
+	}
+	async publishTracks(names) {
+		const pc = this.requirePc();
+		const entries = names.flatMap((name) => {
+			const entry = this.localTracks.get(name);
+			return entry && !entry.id ? [entry] : [];
+		});
+		if (entries.length === 0) return;
+		for (const entry of entries) entry.transceiver = pc.addTransceiver(entry.track, {
+			direction: "sendonly",
+			...entry.simulcast ? { sendEncodings: APP_RTC_SIMULCAST_LAYERS.map(({ rid, scaleResolutionDownBy }) => ({
+				rid,
+				scaleResolutionDownBy
+			})) } : {}
+		});
+		const offer = await this.localOffer(pc);
+		let result;
+		try {
+			result = await this.request("POST", `/${this.sessionId}/publish`, {
+				offer,
+				tracks: entries.map((entry) => ({
+					name: entry.name,
+					kind: entry.kind,
+					mid: entry.transceiver?.mid ?? "",
+					...entry.simulcast ? { simulcast: true } : {}
+				}))
+			});
+		} catch (error) {
+			if (error instanceof ConnectionReplacedError) throw error;
+			await this.settleOffer(pc, void 0).catch(() => void 0);
+			for (const entry of entries) {
+				entry.transceiver?.stop();
+				entry.transceiver = null;
+			}
+			throw error;
+		}
+		await this.settleOffer(pc, result.answer);
+		for (const publication of result.publications) {
+			const entry = entries.find((candidate) => candidate.name === publication.name);
+			if (entry) entry.id = publication.id;
+		}
+	}
+	async unpublishTrack(entry) {
+		if (!entry.id || !entry.transceiver || !this.pc) return;
+		const id = entry.id;
+		entry.transceiver.stop();
+		await this.offerExchange(this.pc, (offer) => this.request("POST", `/${this.sessionId}/unpublish`, {
+			ids: [id],
+			offer
+		}));
+		entry.id = null;
+	}
+	publishChannel(channel) {
+		this.channelsToPublish.add(channel);
+		if (this.channelsToPublish.size > 1 || !this.pc) return;
+		this.enqueue(async () => {
+			const batch = [...this.channelsToPublish];
+			this.channelsToPublish.clear();
+			try {
+				await this.publishChannels(batch);
+			} catch (error) {
+				if (isSessionLost(error) || error instanceof ConnectionReplacedError) throw error;
+				if (error instanceof HttpError && error.code === "RTC_RATE_LIMITED") {
+					setTimeout(() => {
+						for (const item of batch) if (item.isOpen) this.publishChannel(item);
+					}, RATE_LIMIT_RETRY_MS);
+					return;
+				}
+				for (const item of batch) item.fail();
+				console.warn("[Cohub AppRtc] failed to publish channels", error);
+			}
+		}).catch(() => void 0);
+	}
+	async connect() {
+		const generation = ++this.generation;
+		const opened = await this.send("POST", "", {
+			ticket: this.host.ticket,
+			participantId: this.host.participantId()
+		});
+		if (generation !== this.generation || this._state === "closed") {
+			this.send("DELETE", `/${opened.sessionId}`).catch(() => void 0);
+			return;
+		}
+		const pc = new RTCPeerConnection({
+			iceServers: opened.iceServers,
+			bundlePolicy: "max-bundle"
+		});
+		this.pc = pc;
+		this.sessionId = opened.sessionId;
+		pc.addEventListener("connectionstatechange", () => {
+			if (this.pc !== pc) return;
+			if (pc.connectionState === "connected") {
+				this.reconnectAttempt = 0;
+				this.setState("connected");
+			} else if (pc.connectionState === "failed") this.reconnect();
+		});
+		pc.addEventListener("track", (event) => this.onTrack(event));
+		const ready = (async () => {
+			await this.answerOffer(opened.offer);
+			await this.connected(pc);
+		})();
+		this.queue = ready.catch(() => void 0);
+		try {
+			await ready;
+		} catch (error) {
+			if (generation === this.generation) this.reconnect();
+			throw error;
+		}
+		this.channelsToPublish.clear();
+		const republish = [...this.channels.values()].filter((channel) => channel.isOpen);
+		const tracks = [...this.localTracks.keys()];
+		await Promise.all([republish.length ? this.enqueue(() => this.publishChannels(republish)).catch((error) => {
+			if (error instanceof ConnectionReplacedError || isSessionLost(error)) return;
+			for (const channel of republish) channel.fail();
+			console.warn("[Cohub AppRtc] failed to publish channels on the new connection", error);
+		}) : null, tracks.length ? this.enqueue(() => this.publishTracks(tracks)).catch((error) => {
+			if (error instanceof ConnectionReplacedError || isSessionLost(error)) return;
+			console.warn("[Cohub AppRtc] failed to publish tracks on the new connection", error);
+		}) : null]);
+		this.scheduleReconcile();
+	}
+	connected(pc) {
+		if (pc.connectionState === "connected") return Promise.resolve();
+		return new Promise((resolve, reject) => {
+			const timer = setTimeout(() => done(/* @__PURE__ */ new Error("RTC connection timed out")), CONNECT_TIMEOUT_MS);
+			const done = (error) => {
+				clearTimeout(timer);
+				pc.removeEventListener("connectionstatechange", check);
+				if (error) reject(error);
+				else resolve();
+			};
+			const check = () => {
+				if (pc.connectionState === "connected") done();
+				else if (pc.connectionState === "failed" || pc.connectionState === "closed") done(/* @__PURE__ */ new Error("RTC connection failed"));
+			};
+			pc.addEventListener("connectionstatechange", check);
+		});
+	}
+	reconnect() {
+		if (this._state === "closed" || this.reconnectTimer) return;
+		this.setState(this._state === "connecting" ? "connecting" : "reconnecting");
+		this.teardown(true);
+		const delay = RECONNECT_DELAYS_MS[Math.min(this.reconnectAttempt, RECONNECT_DELAYS_MS.length - 1)] ?? 3e4;
+		this.reconnectAttempt += 1;
+		this.reconnectTimer = setTimeout(() => {
+			this.reconnectTimer = null;
+			this.connect().catch((error) => {
+				if (isRoomGone(error) || error instanceof HttpError && (error.status === 403 || error.status === 503)) this.close();
+				else this.reconnect();
+			});
+		}, delay);
+	}
+	teardown(release) {
+		this.generation += 1;
+		const sessionId = this.sessionId;
+		this.sessionId = null;
+		this.queue = Promise.resolve();
+		for (const channel of this.channels.values()) channel.detach();
+		for (const item of this.remoteData.values()) this.dropRemoteData(item);
+		this.remoteData.clear();
+		for (const item of this.localTracks.values()) {
+			item.transceiver = null;
+			item.id = null;
+		}
+		const hadTracks = this.remoteMedia.size > 0;
+		this.remoteMedia.clear();
+		this.mediaByMid.clear();
+		this.pc?.close();
+		this.pc = null;
+		if (hadTracks) this.notifyTracks();
+		if (release && sessionId) this.send("DELETE", `/${sessionId}`).catch(() => void 0);
+	}
+	enqueue(operation) {
+		const generation = this.generation;
+		const run = async () => {
+			if (generation !== this.generation || !this.pc || !this.sessionId) throw new ConnectionReplacedError();
+			try {
+				return await operation();
+			} catch (error) {
+				if (isSessionLost(error)) this.reconnect();
+				throw error;
+			}
+		};
+		const next = this.queue.then(run, run);
+		this.queue = next.catch(() => void 0);
+		return next;
+	}
+	async publishChannels(channels) {
+		const pc = this.requirePc();
+		const open = channels.filter((channel) => channel.isOpen && !channel.publicationId);
+		if (open.length === 0) return;
+		const result = await this.request("POST", `/${this.sessionId}/publish`, { channels: open.map((channel) => ({
+			name: channel.name,
+			delivery: channel.delivery
+		})) });
+		for (const publication of result.publications) {
+			const channel = open.find((item) => item.name === publication.name);
+			const id = result.channelIds?.[publication.id];
+			if (!channel || id === void 0) continue;
+			const dataChannel = pc.createDataChannel(publication.name, {
+				negotiated: true,
+				id,
+				...policyOf(channel.delivery)
+			});
+			channel.attach(publication.id, dataChannel);
+			if (!channel.isOpen) await this.unpublishData([publication.id]);
+		}
+	}
+	async unpublishData(ids) {
+		await this.request("POST", `/${this.sessionId}/unpublish`, { ids });
+	}
+	async settleOffer(pc, answer) {
+		if (answer) await pc.setRemoteDescription(answer);
+		else if (pc.signalingState === "have-local-offer") await pc.setLocalDescription({ type: "rollback" });
+	}
+	async offerExchange(pc, send) {
+		const offer = await this.localOffer(pc);
+		let answer;
+		try {
+			({answer} = await send(offer));
+		} catch (error) {
+			if (!(error instanceof ConnectionReplacedError)) await this.settleOffer(pc, void 0).catch(() => void 0);
+			throw error;
+		}
+		await this.settleOffer(pc, answer);
+	}
+	scheduleReconcile() {
+		if (this.reconcileQueued || !this.pc || this._state === "closed") return;
+		this.reconcileQueued = true;
+		this.enqueue(async () => {
+			this.reconcileQueued = false;
+			await this.reconcile();
+			this.reconcileFailures = 0;
+		}).catch((error) => {
+			this.reconcileQueued = false;
+			if (isSessionLost(error) || error instanceof ConnectionReplacedError) return;
+			console.warn("[Cohub AppRtc] failed to update subscriptions", error);
+			if (error instanceof HttpError && error.code === "RTC_LIMIT_EXCEEDED") return;
+			const delay = RECONNECT_DELAYS_MS[Math.min(this.reconcileFailures, RECONNECT_DELAYS_MS.length - 1)] ?? 3e4;
+			this.reconcileFailures += 1;
+			const generation = this.generation;
+			setTimeout(() => {
+				if (generation === this.generation) this.scheduleReconcile();
+			}, delay);
+		});
+	}
+	mediaCandidates() {
+		const self = this.host.participantId();
+		const candidates = [];
+		for (const member of this.host.members()) {
+			if (member.participantId === self) continue;
+			for (const publication of member.publications ?? []) {
+				if (publication.kind === "data") continue;
+				candidates.push({
+					publication,
+					candidate: {
+						participantId: member.participantId,
+						name: publication.name,
+						kind: publication.kind,
+						simulcast: publication.simulcast === true,
+						subscribed: this.remoteMedia.has(mediaKey(member.participantId, publication.id))
+					}
+				});
+			}
+		}
+		return candidates;
+	}
+	async reconcile() {
+		const self = this.host.participantId();
+		const wantedData = /* @__PURE__ */ new Map();
+		for (const member of this.host.members()) {
+			if (member.participantId === self) continue;
+			for (const publication of member.publications ?? []) {
+				if (publication.kind !== "data") continue;
+				const channel = this.channels.get(publication.name);
+				if (channel?.isOpen && channel.delivery === (publication.delivery ?? "reliable")) wantedData.set(mediaKey(member.participantId, publication.id), {
+					participantId: member.participantId,
+					publicationId: publication.id,
+					name: publication.name,
+					delivery: channel.delivery
+				});
+			}
+		}
+		const wantedMedia = /* @__PURE__ */ new Map();
+		for (const { candidate, publication } of this.mediaCandidates()) {
+			if (wantedMedia.size >= APP_RTC_LIMITS.mediaSubscriptions) break;
+			if (this.filter && !this.filter(candidate)) continue;
+			const key = mediaKey(candidate.participantId, publication.id);
+			const quality = this.remoteMedia.get(key)?.quality ?? (candidate.simulcast ? "high" : void 0);
+			wantedMedia.set(key, {
+				participantId: candidate.participantId,
+				publicationId: publication.id,
+				name: candidate.name,
+				kind: candidate.kind,
+				...quality ? { quality } : {}
+			});
+		}
+		await this.reconcileData(wantedData);
+		await this.reconcileMedia(wantedMedia);
+		if ([...wantedData.keys()].some((key) => !this.remoteData.has(key)) || [...wantedMedia.keys()].some((key) => !this.remoteMedia.has(key))) throw new AppRtcError("RTC_FAILED", "Some RTC subscriptions could not be established");
+	}
+	dropRemoteData(item) {
+		item.channel.close();
+		this.channels.get(item.name)?.setPeer(item.participantId, false);
+	}
+	async reconcileData(wanted) {
+		const pc = this.requirePc();
+		const stale = [...this.remoteData].filter(([key]) => !wanted.has(key));
+		for (const batch of chunk(stale, APP_RTC_LIMITS.batch)) {
+			await this.request("POST", `/${this.sessionId}/unsubscribe`, { items: batch.map(([, item]) => ({
+				participantId: item.participantId,
+				publicationId: item.publicationId
+			})) });
+			for (const [key, item] of batch) {
+				this.dropRemoteData(item);
+				this.remoteData.delete(key);
+			}
+		}
+		const missing = [...wanted].filter(([key]) => !this.remoteData.has(key)).map(([, item]) => item);
+		for (const batch of chunk(missing, APP_RTC_LIMITS.batch)) {
+			const result = await this.request("POST", `/${this.sessionId}/subscribe`, {
+				kind: "data",
+				items: batch.map(({ participantId, publicationId }) => ({
+					participantId,
+					publicationId
+				}))
+			});
+			for (const subscription of result.subscriptions) {
+				const item = batch.find((entry) => entry.participantId === subscription.participantId && entry.publicationId === subscription.publicationId);
+				if (!item || subscription.channelId === void 0) continue;
+				const channel = pc.createDataChannel(item.name, {
+					negotiated: true,
+					id: subscription.channelId,
+					...policyOf(item.delivery)
+				});
+				channel.binaryType = "arraybuffer";
+				const remote = {
+					name: item.name,
+					participantId: item.participantId,
+					publicationId: item.publicationId,
+					channel,
+					last: null
+				};
+				channel.addEventListener("message", (event) => this.onData(remote, event.data));
+				channel.addEventListener("open", () => {
+					if (this.remoteData.get(mediaKey(remote.participantId, remote.publicationId)) === remote) this.channels.get(remote.name)?.setPeer(remote.participantId, true);
+				});
+				this.remoteData.set(mediaKey(item.participantId, item.publicationId), remote);
+			}
+		}
+	}
+	async reconcileMedia(wanted) {
+		const stale = [...this.remoteMedia].filter(([key]) => !wanted.has(key));
+		const missing = [...wanted].filter(([key]) => !this.remoteMedia.has(key)).map(([, item]) => item);
+		const moves = [];
+		for (const to of [...missing]) {
+			const index = stale.findIndex(([, receiver]) => receiver.kind === to.kind);
+			const found = index >= 0 ? stale.splice(index, 1)[0] : void 0;
+			if (!found) continue;
+			moves.push({
+				from: found[0],
+				receiver: found[1],
+				to
+			});
+			missing.splice(missing.indexOf(to), 1);
+		}
+		if (moves.length) {
+			const moved = await this.retarget(moves.map(({ receiver, to }) => ({
+				...to,
+				mid: receiver.mid
+			})));
+			for (const { from, receiver, to } of moves) if (moved.has(receiver.mid)) {
+				this.remoteMedia.delete(from);
+				this.remoteMedia.set(mediaKey(to.participantId, to.publicationId), {
+					...to,
+					mid: receiver.mid,
+					track: receiver.track
+				});
+				this.mediaByMid.set(receiver.mid, mediaKey(to.participantId, to.publicationId));
+			} else {
+				stale.push([from, receiver]);
+				missing.push(to);
+			}
+			if (moved.size) this.notifyTracks();
+		}
+		await this.unsubscribeMedia(stale);
+		await this.subscribeMedia(missing);
+	}
+	async retarget(items) {
+		try {
+			const result = await this.request("PATCH", `/${this.sessionId}/media`, { items: items.map(({ participantId, publicationId, mid, quality }) => ({
+				participantId,
+				publicationId,
+				mid,
+				...quality ? { quality } : {}
+			})) });
+			if (result.offer) await this.answerOffer(result.offer);
+			return new Set(result.updated.map((item) => item.mid));
+		} catch (error) {
+			if (error instanceof ConnectionReplacedError || isSessionLost(error)) throw error;
+			return /* @__PURE__ */ new Set();
+		}
+	}
+	async setQuality(key, quality) {
+		await this.enqueue(async () => {
+			const item = this.remoteMedia.get(key);
+			if (!item || item.quality === void 0 || item.quality === quality) return;
+			if ((await this.retarget([{
+				...item,
+				quality
+			}])).has(item.mid)) {
+				item.quality = quality;
+				this.notifyTracks();
+			}
+		}).catch((error) => {
+			if (error instanceof ConnectionReplacedError) return;
+			throw toAppRtcError(error);
+		});
+	}
+	async unsubscribeMedia(stale) {
+		if (stale.length === 0) return;
+		const pc = this.requirePc();
+		for (const [, item] of stale) {
+			pc.getTransceivers().find((transceiver) => transceiver.mid === item.mid)?.stop();
+			item.track = null;
+		}
+		this.notifyTracks();
+		await this.offerExchange(pc, (offer) => this.request("POST", `/${this.sessionId}/unsubscribe`, {
+			items: stale.map(([, item]) => ({
+				participantId: item.participantId,
+				publicationId: item.publicationId
+			})),
+			offer
+		}));
+		for (const [key, item] of stale) {
+			this.remoteMedia.delete(key);
+			this.mediaByMid.delete(item.mid);
+		}
+	}
+	async subscribeMedia(missing) {
+		if (missing.length === 0) return;
+		const result = await this.request("POST", `/${this.sessionId}/subscribe`, {
+			kind: "media",
+			items: missing.map(({ participantId, publicationId, quality }) => ({
+				participantId,
+				publicationId,
+				...quality ? { quality } : {}
+			}))
+		});
+		for (const subscription of result.subscriptions) {
+			const item = missing.find((entry) => entry.participantId === subscription.participantId && entry.publicationId === subscription.publicationId);
+			if (!item || !subscription.mid) continue;
+			const key = mediaKey(item.participantId, item.publicationId);
+			this.remoteMedia.set(key, {
+				...item,
+				mid: subscription.mid,
+				track: null
+			});
+			this.mediaByMid.set(subscription.mid, key);
+		}
+		if (!result.offer) return;
+		try {
+			await this.answerOffer(result.offer);
+		} catch (error) {
+			if (!(error instanceof ConnectionReplacedError)) this.reconnect();
+			throw error;
+		}
+	}
+	async answerOffer(offer) {
+		const pc = this.requirePc();
+		await pc.setRemoteDescription(offer);
+		await pc.setLocalDescription(await pc.createAnswer());
+		await waitForIceGathering(pc, GATHER_TIMEOUT_MS);
+		const answer = pc.localDescription;
+		if (!answer) throw new Error("the browser produced no answer");
+		await this.request("PUT", `/${this.sessionId}`, { answer: {
+			type: "answer",
+			sdp: answer.sdp
+		} });
+	}
+	async localOffer(pc) {
+		await pc.setLocalDescription(await pc.createOffer());
+		await waitForIceGathering(pc, GATHER_TIMEOUT_MS);
+		const offer = pc.localDescription;
+		if (!offer) throw new Error("the browser produced no offer");
+		return {
+			type: "offer",
+			sdp: offer.sdp
+		};
+	}
+	async request(method, path, body) {
+		const generation = this.generation;
+		const settled = await this.send(method, path, body).then((value) => ({ value }), (error) => ({ error }));
+		if (generation !== this.generation) throw new ConnectionReplacedError();
+		if ("error" in settled) throw settled.error;
+		return settled.value;
+	}
+	send(method, path, body) {
+		const url = `/api/apps/${encodeURIComponent(this.host.appId)}/realtime/rooms/${encodeURIComponent(this.host.roomId)}/rtc${path}`;
+		return this.host.transport.request(url, {
+			method,
+			...body === void 0 ? {} : {
+				headers: { "Content-Type": "application/json" },
+				body: JSON.stringify(body)
+			}
+		});
+	}
+	requirePc() {
+		if (!this.pc || !this.sessionId) throw new ConnectionReplacedError();
+		return this.pc;
+	}
+	onData(remote, raw) {
+		if (!(raw instanceof ArrayBuffer)) return;
+		const frame = decodeAppRtcFrame(raw);
+		if (!frame) return;
+		const channel = this.channels.get(remote.name);
+		if (!channel?.isOpen) return;
+		if (channel.delivery === "latest") {
+			if (!isNewerSequence(frame.sequence, remote.last)) return;
+			remote.last = frame.sequence;
+		}
+		channel.deliver(remote.participantId, frame.data);
+	}
+	onTrack(event) {
+		const mid = event.transceiver.mid;
+		const key = mid ? this.mediaByMid.get(mid) : void 0;
+		const item = key ? this.remoteMedia.get(key) : void 0;
+		if (!item || !mid) return;
+		item.track = event.track;
+		event.track.addEventListener("ended", () => {
+			const current = this.mediaByMid.get(mid);
+			const owner = current ? this.remoteMedia.get(current) : void 0;
+			if (owner?.track === event.track) {
+				owner.track = null;
+				this.notifyTracks();
+			}
+		});
+		this.notifyTracks();
+	}
+	notifyTracks() {
+		const tracks = this.tracks;
+		for (const handler of this.trackHandlers) handler(tracks);
+	}
+	setState(state) {
+		if (this._state === state) return;
+		this._state = state;
+		for (const handler of this.stateHandlers) handler(state);
+	}
+};
+//#endregion
 //#region src/apis/app-realtime.ts
 const randomId = () => globalThis.crypto?.randomUUID?.() ?? `${Date.now()}-${Math.random().toString(36).slice(2)}`;
 const textEncoder = new TextEncoder();
@@ -3895,13 +5012,20 @@ const byteLength = (text) => textEncoder.encode(text).byteLength;
 * Ceiling on deltas held during a join, so a stalled handshake cannot buffer without
 * limit. Dropping the tail needs no extra signal: the gap detection below reports it.
 */
-const WORK_ROOM_MAX_JOIN_BUFFER = 512;
+const APP_ROOM_MAX_JOIN_BUFFER = 512;
 /** Room events that mutate state, so they must not be applied before the join snapshot. */
-const WORK_ROOM_DELTA_EVENTS = /* @__PURE__ */ new Set([
+const APP_ROOM_DELTA_EVENTS = /* @__PURE__ */ new Set([
 	"realtime.room.event",
 	"realtime.room.member.joined",
 	"realtime.room.member.left",
-	"realtime.room.presence.updated"
+	"realtime.room.presence.updated",
+	"realtime.room.publications.updated"
+]);
+const APP_ROOM_MEMBER_EVENTS = /* @__PURE__ */ new Set([
+	"realtime.room.member.joined",
+	"realtime.room.member.left",
+	"realtime.room.presence.updated",
+	"realtime.room.publications.updated"
 ]);
 const requestError = (event) => {
 	const payload = event.payload;
@@ -3914,6 +5038,7 @@ const isRoomEvent = (event, roomId) => {
 var AppRoom = class {
 	websocket;
 	admission;
+	appContext;
 	id;
 	code;
 	createdAt;
@@ -3941,9 +5066,12 @@ var AppRoom = class {
 	offOpen;
 	offClose;
 	offReconnecting;
-	constructor(websocket, admission) {
+	instanceId = randomId().replace(/[^A-Za-z0-9_-]/g, "");
+	rtcConnection = null;
+	constructor(websocket, admission, appContext) {
 		this.websocket = websocket;
 		this.admission = admission;
+		this.appContext = appContext;
 		this.id = admission.room.id;
 		this.code = admission.room.code;
 		this.createdAt = admission.room.createdAt;
@@ -4069,6 +5197,66 @@ var AppRoom = class {
 			clientEventId: typeof payload.clientEventId === "string" ? payload.clientEventId : null
 		};
 	}
+	/** Published events after `after`, oldest first; without it, the newest ones. */
+	async history(input = {}) {
+		this.assertJoined();
+		if (!this.websocket.supportsCapability("realtime.room.history.v1")) throw new Error("Room history is not supported by the Gateway");
+		const requestId = randomId();
+		const response = await this.request(requestId, /* @__PURE__ */ new Set(["realtime.room.history"]), () => this.websocket.readRealtimeRoomHistory({
+			roomId: this.id,
+			...input,
+			requestId
+		}));
+		return this.toHistory(response.payload);
+	}
+	/** An invite for someone outside the App, e.g. an Agent: `cohub rooms join <invite>`. */
+	async invite(input = {}) {
+		this.assertJoined();
+		const context = this.appContext;
+		if (!context) throw new Error("Invites are only available inside a published App");
+		return context.transport.request(`/api/apps/${encodeURIComponent(context.appId)}/realtime/rooms/${encodeURIComponent(this.id)}/invites`, {
+			method: "POST",
+			headers: { "Content-Type": "application/json" },
+			body: JSON.stringify({
+				ticket: this.admission.ticket,
+				...input
+			})
+		});
+	}
+	rtc() {
+		this.assertJoined();
+		if (this.rtcConnection) {
+			const current = this.rtcConnection;
+			return current.then((rtc) => {
+				if (rtc.state !== "closed") return rtc;
+				return (this.rtcConnection === current ? this.openRtc() : this.rtcConnection) ?? this.openRtc();
+			});
+		}
+		return this.openRtc();
+	}
+	openRtc() {
+		this.assertJoined();
+		const context = this.appContext;
+		if (!context) return Promise.reject(new AppRtcError("RTC_UNSUPPORTED", "RTC is only available inside a published App"));
+		if (typeof RTCPeerConnection === "undefined") return Promise.reject(new AppRtcError("RTC_UNSUPPORTED", "RTC needs a browser with WebRTC"));
+		if (!this.websocket.supportsCapability("realtime.room.rtc.v1")) return Promise.reject(new AppRtcError("RTC_UNSUPPORTED", "RTC is not supported by the Gateway"));
+		const rtc = new AppRoomRtc({
+			roomId: this.id,
+			appId: context.appId,
+			ticket: this.admission.ticket,
+			transport: context.transport,
+			participantId: () => this._participantId,
+			members: () => this._members,
+			onMembersChanged: (handler) => this.onMembersChanged(handler)
+		});
+		const opening = rtc.start().then(() => rtc, (error) => {
+			rtc.close();
+			if (this.rtcConnection === opening) this.rtcConnection = null;
+			throw error;
+		});
+		this.rtcConnection = opening;
+		return opening;
+	}
 	async setPresence(presence) {
 		this.assertJoined();
 		const requestId = randomId();
@@ -4110,17 +5298,23 @@ var AppRoom = class {
 		if (!this.websocket.supportsCapability("realtime.room.v1") && this.websocket.state === "open") throw new Error("Realtime rooms are not supported by the Gateway");
 		this.setState(isReconnect ? "reconnecting" : "connecting");
 		const requestId = randomId();
+		const after = isReconnect && this.lastSequence > 0 && this.websocket.supportsCapability("realtime.room.history.v1") ? this.lastSequence : void 0;
+		let missed = null;
 		this.joinBuffer = [];
 		try {
 			const payload = (await this.request(requestId, /* @__PURE__ */ new Set(["realtime.room.joined"]), () => this.websocket.joinRealtimeRoom({
 				roomId: this.id,
 				ticket: this.admission.ticket,
+				instanceId: this.instanceId,
+				after,
 				requestId
 			}))).payload;
 			if (typeof payload.participantId !== "string" || !Array.isArray(payload.members)) throw new Error("invalid room join response");
 			this._participantId = payload.participantId;
 			this._members = payload.members;
-			this.lastSequence = typeof payload.sequence === "number" ? payload.sequence : 0;
+			const sequence = typeof payload.sequence === "number" ? payload.sequence : 0;
+			if (after !== void 0 && sequence > after) missed = await this.catchUp(payload.missed, after, sequence);
+			this.lastSequence = sequence;
 		} catch (error) {
 			this.joinBuffer = null;
 			throw error;
@@ -4128,6 +5322,11 @@ var AppRoom = class {
 		this.hasJoined = true;
 		this.setState("joined");
 		this.notifyMembers();
+		if (missed) {
+			const { lost } = missed;
+			if (lost) for (const handler of this.outOfSyncHandlers) handler(lost[0], lost[1]);
+			for (const event of missed.events) this.emit(event);
+		}
 		const buffered = this.joinBuffer ?? [];
 		this.joinBuffer = null;
 		for (const item of buffered) {
@@ -4135,6 +5334,7 @@ var AppRoom = class {
 			if (typeof sequence === "number" && sequence <= this.lastSequence) continue;
 			this.handleEvent(item);
 		}
+		if (isReconnect) this.rtcConnection?.then((rtc) => rtc.verify()).catch(() => void 0);
 	}
 	request(requestId, expected, send) {
 		return new Promise((resolve, reject) => {
@@ -4182,14 +5382,13 @@ var AppRoom = class {
 			this.takePending(event.requestId);
 			awaiting.resolve(event);
 		}
-		if (this.joinBuffer && WORK_ROOM_DELTA_EVENTS.has(event.type)) {
-			if (this.joinBuffer.length < WORK_ROOM_MAX_JOIN_BUFFER) this.joinBuffer.push(event);
+		if (this.joinBuffer && APP_ROOM_DELTA_EVENTS.has(event.type)) {
+			if (this.joinBuffer.length < APP_ROOM_MAX_JOIN_BUFFER) this.joinBuffer.push(event);
 			return;
 		}
 		const payload = event.payload;
-		const sequence = typeof payload.sequence === "number" ? payload.sequence : null;
-		if (sequence !== null) this.observeSequence(sequence);
-		if (event.type === "realtime.room.member.joined" || event.type === "realtime.room.member.left" || event.type === "realtime.room.presence.updated") {
+		if (APP_ROOM_DELTA_EVENTS.has(event.type) && typeof payload.sequence === "number") this.observeSequence(payload.sequence);
+		if (APP_ROOM_MEMBER_EVENTS.has(event.type)) {
 			const member = payload.member;
 			if (member?.participantId) {
 				const members = new Map(this._members.map((item) => [item.participantId, item]));
@@ -4209,11 +5408,10 @@ var AppRoom = class {
 			return;
 		}
 		if (event.type !== "realtime.room.event") return;
-		const roomEvent = event;
-		const roomPayload = roomEvent.payload;
-		const item = {
-			id: roomEvent.id,
-			timestamp: roomEvent.timestamp,
+		const { id, timestamp, payload: roomPayload } = event;
+		this.emit({
+			id,
+			timestamp,
 			roomId: roomPayload.roomId,
 			sequence: roomPayload.sequence,
 			type: roomPayload.event,
@@ -4221,7 +5419,35 @@ var AppRoom = class {
 			clientEventId: roomPayload.clientEventId,
 			sender: roomPayload.sender,
 			self: roomPayload.sender.participantId === this.participantId
+		});
+	}
+	async catchUp(first, after, sequence) {
+		if (!first) return {
+			events: [],
+			lost: [after + 1, sequence]
+		};
+		const events = this.toHistory(first).events;
+		const { truncated } = first;
+		let { cursor } = first;
+		while (cursor < sequence) {
+			const requestId = randomId();
+			const page = (await this.request(requestId, /* @__PURE__ */ new Set(["realtime.room.history"]), () => this.websocket.readRealtimeRoomHistory({
+				roomId: this.id,
+				after: cursor,
+				requestId
+			})).catch(() => null))?.payload;
+			if (!page || page.cursor <= cursor) break;
+			events.push(...this.toHistory(page).events);
+			cursor = page.cursor;
+		}
+		const kept = events.filter((event) => event.sequence <= sequence);
+		const lost = truncated ? [after + 1, kept[0]?.sequence ?? sequence] : cursor < sequence ? [cursor + 1, sequence] : null;
+		return {
+			events: kept,
+			lost: lost && lost[1] > lost[0] ? lost : null
 		};
+	}
+	emit(item) {
 		this.handlers.get(item.type)?.forEach((handler) => {
 			handler(item);
 		});
@@ -4229,6 +5455,18 @@ var AppRoom = class {
 			handler(item);
 		});
 	}
+	toHistory(history) {
+		return {
+			events: history.events.map((event) => ({
+				...event,
+				data: event.data,
+				roomId: this.id,
+				self: event.sender.participantId === this.participantId
+			})),
+			cursor: history.cursor,
+			truncated: history.truncated
+		};
+	}
 	observeSequence(sequence) {
 		if (this.lastSequence > 0 && sequence > this.lastSequence + 1) for (const handler of this.outOfSyncHandlers) handler(this.lastSequence + 1, sequence);
 		if (sequence > this.lastSequence) this.lastSequence = sequence;
@@ -4260,6 +5498,9 @@ var AppRoom = class {
 		this.dispose();
 	}
 	dispose() {
+		const rtc = this.rtcConnection;
+		this.rtcConnection = null;
+		rtc?.then((connection) => connection.close()).catch(() => void 0);
 		this.offEvent();
 		this.offOpen();
 		this.offClose();
@@ -4278,28 +5519,33 @@ var AppRealtimeApi = class {
 		this.getContext = getContext;
 	}
 	async createRoom(input = {}) {
-		const admission = await this.transport.request(`/api/apps/${encodeURIComponent(await this.requireAppId())}/realtime/rooms`, {
+		const appId = await this.requireAppId();
+		const admission = await this.transport.request(`/api/apps/${encodeURIComponent(appId)}/realtime/rooms`, {
 			method: "POST",
 			headers: { "Content-Type": "application/json" },
 			body: JSON.stringify(input)
 		});
-		return this.openRoom(admission);
+		return this.openRoom(appId, admission);
 	}
 	async joinRoom(input) {
-		const admission = await this.transport.request(`/api/apps/${encodeURIComponent(await this.requireAppId())}/realtime/rooms/join`, {
+		const appId = await this.requireAppId();
+		const admission = await this.transport.request(`/api/apps/${encodeURIComponent(appId)}/realtime/rooms/join`, {
 			method: "POST",
 			headers: { "Content-Type": "application/json" },
 			body: JSON.stringify(input)
 		});
-		return this.openRoom(admission);
+		return this.openRoom(appId, admission);
 	}
 	async requireAppId() {
 		const context = await this.getContext();
 		if (!context?.app?.id) throw new Error("App context is unavailable — not running inside a published app runtime.");
 		return context.app.id;
 	}
-	async openRoom(admission) {
-		const room = new AppRoom(this.websocket, admission);
+	async openRoom(appId, admission) {
+		const room = new AppRoom(this.websocket, admission, {
+			transport: this.transport,
+			appId
+		});
 		try {
 			await room.connect();
 			return room;
@@ -4566,10 +5812,12 @@ var AppWindowApi = class {
 	}
 	/** Report the tab title, save status, and whether work is still unsaved. */
 	setState(patch) {
-		this.state = {
+		const next = {
 			...this.state,
 			...patch
 		};
+		if (this.stateReported && next.title === this.state.title && next.status === this.state.status && next.dirty === this.state.dirty) return;
+		this.state = next;
 		this.stateReported = true;
 		this.listen();
 		this.transport.notify?.(buildAppRuntimeWindowState(this.state));
@@ -5376,6 +6624,18 @@ var AppRuntimeApi = class {
 			reason: response === null ? "timeout" : "unsupported"
 		};
 	}
+	/** Asks for devices declared with `<meta name="cohub:devices">`; allowing the camera or microphone reloads the App once. */
+	async requestDevices(devices) {
+		const wanted = parseAppDevices(devices);
+		if (wanted.length === 0) throw new AppRuntimeError("invalid_request", `Request at least one of: ${APP_DEVICES.join(", ")}.`);
+		const context = await this.context().catch(() => null);
+		if (!context || context.mode === "broker") return "granted";
+		if (!context.capabilities?.devices) return "unavailable";
+		return parseAppDevicesResult(await this.transport.request({
+			type: APP_DEVICES_REQUEST_TYPE,
+			devices: wanted
+		}, { timeoutMs: 6e5 }))?.status ?? "unavailable";
+	}
 	/**
 	* Asks the host to close this App: a workspace tab closes, an embedded page
 	* forwards the request to its embedder, a standalone page closes the tab.
@@ -5740,6 +7000,7 @@ var CohubClient = class {
 	voice;
 	apps;
 	appCommerce;
+	rooms;
 	navigation;
 	/** @deprecated Use `client.desktop`. */
 	get ui() {
@@ -5819,6 +7080,7 @@ var CohubClient = class {
 		this.referrals = new ReferralsApi(this.transport);
 		this.apps = new AppsApi(this.transport);
 		this.appCommerce = new AppCommerceApi(this.transport);
+		this.rooms = new RoomsApi(this.transport);
 		this.navigation = { open: (target, options) => this.appRuntime.navigationOpen(typeof target === "string" ? {
 			kind: "app",
 			ref: target
@@ -5875,6 +7137,7 @@ sync: (root) => {
 		} },
 		/** Ask the host to close this App's surface. */
 		requestClose: () => this.appRuntime.requestClose(),
+		devices: { request: (devices) => this.appRuntime.requestDevices(devices) },
 		/**
 		* Request that the host update this overlay's geometry or pointer hit
 		* regions.  Only meaningful for `overlay` surfaces; ignored otherwise.
@@ -6548,7 +7811,8 @@ function createAppBridgeCore(config) {
 		return {
 			capabilities: {
 				authorization: 2,
-				serverGrants: true
+				serverGrants: true,
+				...config.devices ? { devices: true } : {}
 			},
 			mode: authorizationContext.surface === "broker" ? "broker" : "bridge",
 			app: {
@@ -7814,4 +9078,4 @@ function generationOutputSource(result, outputIndex) {
 	return `data:${declared && MEDIA_TYPE_PATTERN.test(declared) ? declared : DEFAULT_MEDIA_TYPES[String(block.type)] ?? "application/octet-stream"};base64,${data}`;
 }
 //#endregion
-export { APP_APPEARANCE_TOKENS, APP_COMPOSER_CHIP_CONTENT_MAX_BYTES, APP_COMPOSER_CHIP_KEY_MAX_LENGTH, APP_COMPOSER_CHIP_LABEL_MAX_LENGTH, APP_SURFACE_READY_TIMEOUT_MS, APP_SURFACE_REQUEST_TIMEOUT_MS, AppCommerceApi, AppRealtimeApi, AppRefParseError, AppRoom, AppRuntimeApi, AppRuntimeApi as WorkRuntimeApi, AppRuntimeError, AppSurfaceApi, AppWindowApi, AppsApi, BILLING_ACCESS_BLOCKED_ERROR_CODE, BOARD_COLOR_TOKENS, BOARD_ITEM_TYPES, BillingApi, BoardAnimationSchema, BoardClient, BoardPatchSchema, BoardTrackSchema, COHUB_ENVIRONMENTS, COHUB_SOURCE_HEADER, COHUB_SOURCE_HEADER_NAMES, CohubClient, CohubHttpClient, DESKTOP_COMMAND_ACCEPT_TIMEOUT_MS, DESKTOP_COMMAND_DEFAULT_TIMEOUT_MS, DESKTOP_COMMAND_MAX_TIMEOUT_MS, DESKTOP_COMMAND_OPEN_TIMEOUT_MS, DESKTOP_COMMAND_PAYLOAD_MAX_BYTES, DESKTOP_COMMAND_PENDING_TTL_SECONDS, DESKTOP_COMMAND_SETTLEMENT_GRACE_SECONDS, DESKTOP_COMMAND_TERMINAL_TTL_SECONDS, DESKTOP_COMMAND_VERSION, DISPLAY_ACTION_TYPES, DISPLAY_ELEMENT_REF_PATTERN, DISPLAY_SYSTEM_ACTIONS, DesktopCommandsApi, DisplayActionError, DisplayConnection, FEATURE_NOT_ENTITLED_ERROR_CODE, GenerationPolicyError, HOME_SPACE_SLUG, HttpError, NATIVE_INGEST_MAX_TURNS, NATIVE_SYNC_SOURCE, OriginBrokerTransport, PERMISSIONS, ParentBridgeTransport, PopupBrokerTransport, REQUEST_SOURCE_VIA_MAX_LENGTH, RUNTIME_ARCHIVE_SEGMENT_BYTES, RUNTIME_MAX_FRAME_BYTES, RUNTIME_PROTOCOL_VERSION, RUNTIME_RECOVERY_BATCH_SIZE, ReferencesApi, ReferralsApi, SETTLED_TURN_STATUSES, SessionGenerationStreamClient, SessionPatchReducer, SpaceDisplaysApi, SpacePublicFilesApi, SpaceWebhooksApi, UPLOAD_MAX_BATCH_BYTES, UPLOAD_MAX_BATCH_FILES, UPLOAD_MAX_FILE_BYTES, USER_LEVEL_PERMISSIONS, UiCommandsApi, UsersApi, VoiceApi, VoiceInputClient, WebsocketClient, WorkCommerceApi, WorkRealtimeApi, WorkRefParseError, WorkRoom, WorkSurfaceApi, appAppearanceVar, applyAppAppearance, assertGenerationRequestAllowedByPolicy, attachAppEmbed, buildAppSurfaceRequest, buildSpaceInvitePath, buildSpacePath, clearGrantedAppScopes, compileDisplayActions, connectDisplay, contextToPiMessages, createAppBridgeCore, createAppBridgeCore as createWorkBridgeCore, createAppRuntime, createAppRuntime as createWorkRuntime, createCohubClient, createHttpClient, createOriginAppResolver, createSessionGenerationStreamClient, createSessionPatchReducer, createSlugAppIdResolver, createSlugAppIdResolver as createSlugWorkIdResolver, createVoiceInputClient, createWebsocketClient, decodeGenerationPolicy, defaultDesktopCommandTimeoutMs, encodeGenerationPolicy, extractBillingPayload, filterDiscoverableGenerationModels, filterGenerationDeclarationsByPolicy, filterSpacePickerItems, findGenerationModelPolicy, fingerprintProjectionTurns, formatAppRef, formatWorkRef, generationOutputSource, getAllowedGenerationModelIds, getCohubContext, harnessArchiveIndexSchema, hasGrantedAppScopes, hasRequestSourceIdentity, isActiveGenerationTask, isAppId, isBillingAccessBlockedCode, isBillingAccessBlockedError, isDesktopCallMethod, isFeatureNotEntitledError, isGenerationModelHidden, isHttpErrorCode, isLocalHarness, isNativeClientTurn, isProjectionCompaction, isRequestSourceClientId, isRequestSourceEmpty, isRequestSourceUuid, isTerminalDesktopCommandStatus, isUserLevelPermission, isUuid, isWorkId, joinApiUrl, matchesUnauthorizedErrorToken, mergeRequestSourceIntoMeta, nativeIngestTurnSchema, nativeRuntimeEventSchema, nativeTurnCompleteSchema, nativeTurnProgressSchema, normalizeBaseUrl, normalizeDisplayPoint, normalizeGenerationPolicy, normalizeRequestSource, normalizeSessionTurnOrigin, normalizeSpacePickerQuery, normalizeVoiceInputWebsocketUrl, normalizeWebsocketUrl, orderSpacePickerItems, parseAppRef, parseAppSurfaceReady, parseAppSurfaceResponse, parseAssistantMessageCommit, parseBoardDocument, parseBoardItem, parseDesktopCommand, parseGenerationPolicyFromEnv, parseRequestSourceFromHeaders, parseSpaceRef, parseWorkRef, projectNativeMessageMeta, projectNativeSession, readRequestSourceFromEnv, readSentTurns, readSessionTurnOrigin, requestSourceToHeaders, resolveApiBaseUrl, resolveAppTransport, resolveAppTransport as resolveWorkTransport, resolveCohubEnvironment, resolveExecutionAppId, resolveExecutionToken, resolveHarness, resolveOpenSurface, resolveRequestSourceChannel, resolveVoiceInputWebsocketUrl, resolveWebBaseUrl, resolveWebsocketUrl, runtimeCommandSchema, runtimeEventSchema, runtimeNativeStopSchema, runtimeReadySchema, sanitizeAccessToken, scopeListHasPermission, selectRuntimeContextMessages, selectSpacePickerItems, serializeProjection, serializeProjectionRecords, setGrantedAppScopes, toGenerationTaskView, trimProjectionTurnsToCompaction, validateArchiveBoundary };
+export { APP_APPEARANCE_TOKENS, APP_COMPOSER_CHIP_CONTENT_MAX_BYTES, APP_COMPOSER_CHIP_KEY_MAX_LENGTH, APP_COMPOSER_CHIP_LABEL_MAX_LENGTH, APP_DEVICES, APP_SURFACE_READY_TIMEOUT_MS, APP_SURFACE_REQUEST_TIMEOUT_MS, AppCommerceApi, AppRealtimeApi, AppRefParseError, AppRoom, AppRoomRtc, AppRtcChannel, AppRtcError, AppRuntimeApi, AppRuntimeApi as WorkRuntimeApi, AppRuntimeError, AppSurfaceApi, AppWindowApi, AppsApi, BILLING_ACCESS_BLOCKED_ERROR_CODE, BOARD_COLOR_TOKENS, BOARD_ITEM_TYPES, BillingApi, BoardAnimationSchema, BoardClient, BoardPatchSchema, BoardTrackSchema, COHUB_ENVIRONMENTS, COHUB_SOURCE_HEADER, COHUB_SOURCE_HEADER_NAMES, CohubClient, CohubHttpClient, DESKTOP_COMMAND_ACCEPT_TIMEOUT_MS, DESKTOP_COMMAND_DEFAULT_TIMEOUT_MS, DESKTOP_COMMAND_MAX_TIMEOUT_MS, DESKTOP_COMMAND_OPEN_TIMEOUT_MS, DESKTOP_COMMAND_PAYLOAD_MAX_BYTES, DESKTOP_COMMAND_PENDING_TTL_SECONDS, DESKTOP_COMMAND_SETTLEMENT_GRACE_SECONDS, DESKTOP_COMMAND_TERMINAL_TTL_SECONDS, DESKTOP_COMMAND_VERSION, DISPLAY_ACTION_TYPES, DISPLAY_ELEMENT_REF_PATTERN, DISPLAY_SYSTEM_ACTIONS, DesktopCommandsApi, DisplayActionError, DisplayConnection, FEATURE_NOT_ENTITLED_ERROR_CODE, GenerationPolicyError, HOME_SPACE_SLUG, HttpError, NATIVE_INGEST_MAX_TURNS, NATIVE_SYNC_SOURCE, OriginBrokerTransport, PERMISSIONS, ParentBridgeTransport, PopupBrokerTransport, REQUEST_SOURCE_VIA_MAX_LENGTH, RUNTIME_ARCHIVE_SEGMENT_BYTES, RUNTIME_MAX_FRAME_BYTES, RUNTIME_PROTOCOL_VERSION, RUNTIME_RECOVERY_BATCH_SIZE, ReferencesApi, ReferralsApi, RoomsApi, SETTLED_TURN_STATUSES, SessionGenerationStreamClient, SessionPatchReducer, SpaceDisplaysApi, SpacePublicFilesApi, SpaceWebhooksApi, UPLOAD_MAX_BATCH_BYTES, UPLOAD_MAX_BATCH_FILES, UPLOAD_MAX_FILE_BYTES, USER_LEVEL_PERMISSIONS, UiCommandsApi, UsersApi, VoiceApi, VoiceInputClient, WebsocketClient, WorkCommerceApi, WorkRealtimeApi, WorkRefParseError, WorkRoom, WorkSurfaceApi, appAppearanceVar, applyAppAppearance, assertGenerationRequestAllowedByPolicy, attachAppEmbed, buildAppSurfaceRequest, buildSpaceInvitePath, buildSpacePath, clearGrantedAppScopes, compileDisplayActions, connectDisplay, contextToPiMessages, createAppBridgeCore, createAppBridgeCore as createWorkBridgeCore, createAppRuntime, createAppRuntime as createWorkRuntime, createCohubClient, createHttpClient, createOriginAppResolver, createSessionGenerationStreamClient, createSessionPatchReducer, createSlugAppIdResolver, createSlugAppIdResolver as createSlugWorkIdResolver, createVoiceInputClient, createWebsocketClient, decodeGenerationPolicy, defaultDesktopCommandTimeoutMs, encodeGenerationPolicy, extractBillingPayload, filterDiscoverableGenerationModels, filterGenerationDeclarationsByPolicy, filterSpacePickerItems, findGenerationModelPolicy, fingerprintProjectionTurns, formatAppRef, formatWorkRef, generationOutputSource, getAllowedGenerationModelIds, getCohubContext, harnessArchiveIndexSchema, hasGrantedAppScopes, hasRequestSourceIdentity, isActiveGenerationTask, isAppId, isBillingAccessBlockedCode, isBillingAccessBlockedError, isDesktopCallMethod, isFeatureNotEntitledError, isGenerationModelHidden, isHttpErrorCode, isLocalHarness, isNativeClientTurn, isProjectionCompaction, isRequestSourceClientId, isRequestSourceEmpty, isRequestSourceUuid, isTerminalDesktopCommandStatus, isUserLevelPermission, isUuid, isWorkId, joinApiUrl, matchesUnauthorizedErrorToken, mergeRequestSourceIntoMeta, nativeIngestTurnSchema, nativeRuntimeEventSchema, nativeTurnCompleteSchema, nativeTurnProgressSchema, normalizeBaseUrl, normalizeDisplayPoint, normalizeGenerationPolicy, normalizeRequestSource, normalizeSessionTurnOrigin, normalizeSpacePickerQuery, normalizeVoiceInputWebsocketUrl, normalizeWebsocketUrl, orderSpacePickerItems, parseAppRef, parseAppSurfaceReady, parseAppSurfaceResponse, parseAssistantMessageCommit, parseBoardDocument, parseBoardItem, parseDesktopCommand, parseGenerationPolicyFromEnv, parseRequestSourceFromHeaders, parseSpaceRef, parseWorkRef, projectNativeMessageMeta, projectNativeSession, readRequestSourceFromEnv, readSentTurns, readSessionTurnOrigin, requestSourceToHeaders, resolveApiBaseUrl, resolveAppTransport, resolveAppTransport as resolveWorkTransport, resolveCohubEnvironment, resolveExecutionAppId, resolveExecutionToken, resolveHarness, resolveOpenSurface, resolveRequestSourceChannel, resolveVoiceInputWebsocketUrl, resolveWebBaseUrl, resolveWebsocketUrl, runtimeCommandSchema, runtimeEventSchema, runtimeNativeStopSchema, runtimeReadySchema, sanitizeAccessToken, scopeListHasPermission, selectRuntimeContextMessages, selectSpacePickerItems, serializeProjection, serializeProjectionRecords, setGrantedAppScopes, toGenerationTaskView, trimProjectionTurnsToCompaction, validateArchiveBoundary };