@wirecat/max-cli 0.0.0 → 0.43.0

package/dist/spec/identity.js

@@ -0,0 +1,53 @@
+/**
+ * What we claim to be on the wire.
+ *
+ * **We imitate MAX's own web client rather than announcing ourselves** (`REQUIREMENTS.md` §34), so
+ * none of these values names this tool. Fields, their order and the versions are what web.max.ru
+ * sent on 2026-09-25 (`src/testing/fixtures/web-capture-2026-09-25.json`, the INIT frame).
+ *
+ * **Built from this machine, as the web client builds it from the browser** (`MAX-55`): timezone
+ * from `Intl`, the language from the system, the OS and the matching Chrome user agent from the
+ * platform. A fixed value would give every install of a public package the same Madrid-and-Linux
+ * browser. How web.max.ru fills each field: `docs/dev/capture/2026-09-25-web-tab.md`.
+ *
+ * The device identity is deliberately not here: it is generated once per profile and stored,
+ * because a client presenting a new device on every command is not imitating anything.
+ */
+const CHROME = "Chrome/151.0.0.0";
+const APP_VERSION = "26.9.8";
+/**
+ * When `APP_VERSION` and `CHROME` were read from a live tab. MAX refuses a client version it has
+ * dropped (PyMax #86), so `max doctor` reports their age (`MAX-39`); a release updates all three.
+ */
+export const CLIENT = { appVersion: APP_VERSION, chrome: CHROME, readOn: "2026-09-25" };
+/** Chrome's reduced user agent keeps one frozen OS string per platform. */
+const PLATFORMS = {
+    linux: { osVersion: "Linux", system: "X11; Linux x86_64", screen: "1080x1920 1.0x" },
+    darwin: { osVersion: "macOS", system: "Macintosh; Intel Mac OS X 10_15_7", screen: "900x1440 2.0x" },
+    win32: { osVersion: "Windows", system: "Windows NT 10.0; Win64; x64", screen: "1080x1920 1.0x" },
+};
+/** The languages the MAX interface itself offers; anything else falls back to Russian, as the app does. */
+const APP_LANGUAGES = new Set(["ru", "en"]);
+export const thisHost = () => {
+    const options = Intl.DateTimeFormat().resolvedOptions();
+    return { platform: process.platform, timeZone: options.timeZone, locale: options.locale };
+};
+export const webUserAgent = ({ platform, timeZone, locale }) => {
+    const host = PLATFORMS[platform] ?? PLATFORMS.linux;
+    const language = locale?.slice(0, 2).toLowerCase() || "ru";
+    return {
+        deviceType: "WEB",
+        pushDeviceType: "WEBPUSH",
+        locale: APP_LANGUAGES.has(language) ? language : "ru",
+        deviceLocale: language,
+        osVersion: host.osVersion,
+        deviceName: "Chrome",
+        headerUserAgent: `Mozilla/5.0 (${host.system}) AppleWebKit/537.36 (KHTML, like Gecko) ${CHROME} Safari/537.36`,
+        isPwa: false,
+        appVersion: APP_VERSION,
+        screen: host.screen,
+        timezone: timeZone || "Europe/Moscow",
+    };
+};
+export const WEB_USER_AGENT = webUserAgent(thisHost());
+//# sourceMappingURL=identity.js.map

package/dist/spec/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/spec/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,MAAM,GAAG,kBAAkB,CAAA;AACjC,MAAM,WAAW,GAAG,QAAQ,CAAA;AAE5B;;;GAGG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAW,CAAA;AAEhG,2EAA2E;AAC3E,MAAM,SAAS,GAAG;IAChB,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,gBAAgB,EAAE;IACpF,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,mCAAmC,EAAE,MAAM,EAAE,eAAe,EAAE;IACpG,KAAK,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,6BAA6B,EAAE,MAAM,EAAE,gBAAgB,EAAE;CACxF,CAAA;AAEV,2GAA2G;AAC3G,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AAQ3C,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAS,EAAE;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAA;IACvD,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAA;AAC3F,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAQ,EAAE,EAAE;IACnE,MAAM,IAAI,GAAG,SAAS,CAAC,QAAkC,CAAC,IAAI,SAAS,CAAC,KAAK,CAAA;IAC7E,MAAM,QAAQ,GAAG,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,IAAI,CAAA;IAC1D,OAAO;QACL,UAAU,EAAE,KAAK;QACjB,cAAc,EAAE,SAAS;QACzB,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;QACrD,YAAY,EAAE,QAAQ;QACtB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,UAAU,EAAE,QAAQ;QACpB,eAAe,EAAE,gBAAgB,IAAI,CAAC,MAAM,4CAA4C,MAAM,gBAAgB;QAC9G,KAAK,EAAE,KAAK;QACZ,UAAU,EAAE,WAAW;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,QAAQ,IAAI,eAAe;KAC7B,CAAA;AACZ,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAA"}

package/dist/spec/index.d.ts

@@ -0,0 +1,15 @@
+import type { Entry, Operation, Reservation } from "./define.js";
+export { checkResponse } from "./check.js";
+export * from "./define.js";
+export * from "./scalars.js";
+/**
+ * Every opcode this project knows, whether or not it is ever sent.
+ *
+ * **The order is the order it is read in**, and the generator preserves it: the registry, the
+ * reference table and the coverage list all come out grouped the same way, which is what makes a
+ * regenerated file a small diff instead of a reshuffle.
+ */
+export declare const spec: readonly Entry[];
+export declare const operations: readonly Operation[];
+export declare const reservations: readonly Reservation[];
+//# sourceMappingURL=index.d.ts.map

package/dist/spec/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/spec/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAqDhE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC1C,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAE5B;;;;;;GAMG;AACH,eAAO,MAAM,IAAI,EAAE,SAAS,KAAK,EA0DhC,CAAA;AAED,eAAO,MAAM,UAAU,EAAE,SAAS,SAAS,EAA2E,CAAA;AAEtH,eAAO,MAAM,YAAY,EAAE,SAAS,WAAW,EAE9C,CAAA"}

package/dist/spec/index.js

@@ -0,0 +1,84 @@
+import { accountCloseSessions, accountSessions, accountSettings, accountUpdate } from "./operations/account.js";
+import { assetsByIds, assetsUpdate } from "./operations/assets.js";
+import { attachmentsFile, attachmentsVideo } from "./operations/attachments.js";
+import { bannersList } from "./operations/banners.js";
+import { callsHistory } from "./operations/calls.js";
+import { chatsApp, chatsClear, chatsDelete, chatsHistory, chatsJoin, chatsLeave, chatsLinkInfo, chatsList, chatsMark, chatsMembers, chatsUpdate, chatsUpdateMembers, } from "./operations/chats.js";
+import { contactsByPhone, contactsImport, contactsInfo, contactsPresence, contactsUpdate, unidentified36, } from "./operations/contacts.js";
+import { foldersDelete, foldersList, foldersReorder, foldersUpdate } from "./operations/folders.js";
+import { loginByQr, loginPassword, loginQrRequest, loginQrStatus, loginSmsCode, loginSmsRequest, qrApprove, } from "./operations/login.js";
+import { messagesDelete, messagesEdit, messagesMedia, messagesPollVote, messagesPress, messagesReact, messagesReactions, messagesSearch, messagesSend, messagesUnreact, } from "./operations/messages.js";
+import { sessionInit, sessionLog, sessionLogin, sessionLogout, sessionPing } from "./operations/session.js";
+import { uploadsFile, uploadsPhoto, uploadsVideo } from "./operations/uploads.js";
+export { checkResponse } from "./check.js";
+export * from "./define.js";
+export * from "./scalars.js";
+/**
+ * Every opcode this project knows, whether or not it is ever sent.
+ *
+ * **The order is the order it is read in**, and the generator preserves it: the registry, the
+ * reference table and the coverage list all come out grouped the same way, which is what makes a
+ * regenerated file a small diff instead of a reshuffle.
+ */
+export const spec = [
+    sessionInit,
+    sessionLogin,
+    sessionPing,
+    sessionLog,
+    sessionLogout,
+    loginQrRequest,
+    loginQrStatus,
+    loginByQr,
+    qrApprove,
+    loginSmsRequest,
+    loginSmsCode,
+    loginPassword,
+    contactsInfo,
+    contactsPresence,
+    contactsByPhone,
+    contactsUpdate,
+    contactsImport,
+    unidentified36,
+    accountUpdate,
+    accountSettings,
+    accountSessions,
+    accountCloseSessions,
+    foldersList,
+    foldersUpdate,
+    foldersDelete,
+    foldersReorder,
+    bannersList,
+    callsHistory,
+    assetsUpdate,
+    assetsByIds,
+    chatsHistory,
+    chatsMark,
+    chatsList,
+    chatsLinkInfo,
+    chatsJoin,
+    chatsLeave,
+    chatsUpdate,
+    chatsMembers,
+    chatsUpdateMembers,
+    chatsDelete,
+    chatsClear,
+    chatsApp,
+    messagesSend,
+    messagesEdit,
+    messagesReact,
+    messagesPress,
+    messagesUnreact,
+    messagesPollVote,
+    messagesReactions,
+    messagesMedia,
+    messagesSearch,
+    messagesDelete,
+    attachmentsVideo,
+    attachmentsFile,
+    uploadsPhoto,
+    uploadsFile,
+    uploadsVideo,
+];
+export const operations = spec.filter((entry) => entry.kind === "operation");
+export const reservations = spec.filter((entry) => entry.kind === "reservation");
+//# sourceMappingURL=index.js.map

package/dist/spec/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/spec/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAC/G,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAClE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACpD,OAAO,EACL,QAAQ,EACR,UAAU,EACV,WAAW,EACX,YAAY,EACZ,SAAS,EACT,UAAU,EACV,aAAa,EACb,SAAS,EACT,SAAS,EACT,YAAY,EACZ,WAAW,EACX,kBAAkB,GACnB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,eAAe,EACf,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,cAAc,GACf,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACnG,OAAO,EACL,SAAS,EACT,aAAa,EACb,cAAc,EACd,aAAa,EACb,YAAY,EACZ,eAAe,EACf,SAAS,GACV,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,cAAc,EACd,YAAY,EACZ,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,eAAe,GAChB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAC3G,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAEjF,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC1C,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAE5B;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,IAAI,GAAqB;IACpC,WAAW;IACX,YAAY;IACZ,WAAW;IACX,UAAU;IACV,aAAa;IACb,cAAc;IACd,aAAa;IACb,SAAS;IACT,SAAS;IACT,eAAe;IACf,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,gBAAgB;IAChB,eAAe;IACf,cAAc;IACd,cAAc;IACd,cAAc;IACd,aAAa;IACb,eAAe;IACf,eAAe;IACf,oBAAoB;IACpB,WAAW;IACX,aAAa;IACb,aAAa;IACb,cAAc;IACd,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,SAAS;IACT,SAAS;IACT,aAAa;IACb,SAAS;IACT,UAAU;IACV,WAAW;IACX,YAAY;IACZ,kBAAkB;IAClB,WAAW;IACX,UAAU;IACV,QAAQ;IACR,YAAY;IACZ,YAAY;IACZ,aAAa;IACb,aAAa;IACb,eAAe;IACf,gBAAgB;IAChB,iBAAiB;IACjB,aAAa;IACb,cAAc;IACd,cAAc;IACd,gBAAgB;IAChB,eAAe;IACf,YAAY;IACZ,WAAW;IACX,YAAY;CACb,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAyB,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAsB,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAA;AAEtH,MAAM,CAAC,MAAM,YAAY,GAA2B,IAAI,CAAC,MAAM,CAC7D,CAAC,KAAK,EAAwB,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,CAC9D,CAAA"}

package/dist/spec/operations/account.d.ts

@@ -0,0 +1,39 @@
+import * as v from "valibot";
+export declare const accountUpdate: import("../define.js").Operation<v.StrictObjectSchema<{
+    /** Always sent, filled from the current profile — the web client does, even when only the description changes. */
+    readonly firstName: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+    readonly lastName: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    readonly description: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    /** From a photo uploaded with `profile: true`; goes with `avatarType`. */
+    readonly photoToken: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>, undefined>;
+    readonly avatarType: v.OptionalSchema<v.LiteralSchema<"USER_AVATAR", undefined>, undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly profile: v.OptionalSchema<v.LooseObjectSchema<{}, undefined>, undefined>;
+}, undefined>>;
+export declare const accountSessions: import("../define.js").Operation<v.StrictObjectSchema<{}, undefined>, v.LooseObjectSchema<{
+    readonly sessions: v.OptionalSchema<v.ArraySchema<v.LooseObjectSchema<{}, undefined>, undefined>, undefined>;
+}, undefined>>;
+export declare const accountCloseSessions: import("../define.js").Operation<v.StrictObjectSchema<{}, undefined>, v.LooseObjectSchema<{
+    /**
+     * PyMax replaces its stored token with this; the web client reads nothing from the answer
+     * (`RISK-25`). ⚠ A credential: written to the keyring, never printed.
+     */
+    readonly token: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+}, undefined>>;
+/**
+ * The owner's own settings. The web tab sends 22 for three things — its push subscription, a chat's
+ * mute, and the privacy settings — and only the last two go out from here.
+ */
+export declare const accountSettings: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly settings: v.UnionSchema<[v.StrictObjectSchema<{
+        readonly chats: v.RecordSchema<v.StringSchema<undefined>, v.StrictObjectSchema<{
+            readonly dontDisturbUntil: v.NumberSchema<undefined>;
+        }, undefined>, undefined>;
+    }, undefined>, v.StrictObjectSchema<{
+        readonly user: v.RecordSchema<v.StringSchema<undefined>, v.UnionSchema<[v.StringSchema<undefined>, v.BooleanSchema<undefined>], undefined>, undefined>;
+    }, undefined>], undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly user: v.OptionalSchema<v.LooseObjectSchema<{}, undefined>, undefined>;
+    readonly hash: v.OptionalSchema<v.UnknownSchema, undefined>;
+}, undefined>>;
+//# sourceMappingURL=account.d.ts.map

package/dist/spec/operations/account.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../../../src/spec/operations/account.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAK5B,eAAO,MAAM,aAAa;IAMtB,kHAAkH;;;;IAIlH,0EAA0E;;;;;cAkB5E,CAAA;AAEF,eAAO,MAAM,eAAe;;cAgB1B,CAAA;AAEF,eAAO,MAAM,oBAAoB;IAO7B;;;OAGG;;cAUL,CAAA;AAIF;;;GAGG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;cA6B1B,CAAA"}

package/dist/spec/operations/account.js

@@ -0,0 +1,103 @@
+import * as v from "valibot";
+import { defineOperation } from "../define.js";
+const webClient = "web.max.ru chunk `_app/immutable/chunks/5oCuRT0F.js`, read 2026-09-24";
+export const accountUpdate = defineOperation({
+    name: "account.update",
+    constant: "PROFILE",
+    opcode: 16,
+    auth: true,
+    request: v.strictObject({
+        /** Always sent, filled from the current profile — the web client does, even when only the description changes. */
+        firstName: v.pipe(v.string(), v.minLength(1)),
+        lastName: v.optional(v.string()),
+        description: v.optional(v.string()),
+        /** From a photo uploaded with `profile: true`; goes with `avatarType`. */
+        photoToken: v.optional(v.pipe(v.string(), v.minLength(1))),
+        avatarType: v.optional(v.literal("USER_AVATAR")),
+    }),
+    response: v.looseObject({ profile: v.optional(v.looseObject({})) }),
+    guard: () => ({ chatId: null, kind: "account", action: "profile" }),
+    provenance: {
+        confidence: "measured",
+        sources: [
+            "measured against MAX 2026-09-24 (`pnpm probe:account`): the profile rewritten with its own values answered `{profile}` shaped like LOGIN's",
+            "measured 2026-09-27 (`pnpm probe:profile`): `photoToken` from an upload with `profile: true` and `avatarType` set the photo — confirmed by the owner in the app; MAX's answers were not kept (`BUG-67`)",
+            webClient,
+            "PyMax 53103f0 `change_profile`",
+            "measured against MAX 2026-09-19: refused an empty payload",
+        ],
+        notes: "Changes the profile everyone sees. It does not read one: your own profile arrives with the login response. `link` (the short name) is not declared: MAX refused every name for this personal account with `link.not.available` (2026-09-27, `MAX-42`).",
+    },
+});
+export const accountSessions = defineOperation({
+    name: "account.sessions",
+    constant: "SESSIONS_INFO",
+    opcode: 96,
+    auth: true,
+    request: v.strictObject({}),
+    response: v.looseObject({ sessions: v.optional(v.array(v.looseObject({}))) }),
+    guard: null,
+    provenance: {
+        confidence: "measured",
+        sources: [
+            "measured against MAX 2026-09-24 (`pnpm probe:account`): `{client, current, info, location, time}` per session — no id",
+            webClient,
+            "PyMax 53103f0 `get_sessions`",
+        ],
+    },
+});
+export const accountCloseSessions = defineOperation({
+    name: "account.closeSessions",
+    constant: "SESSIONS_CLOSE",
+    opcode: 97,
+    auth: true,
+    request: v.strictObject({}),
+    response: v.looseObject({
+        /**
+         * PyMax replaces its stored token with this; the web client reads nothing from the answer
+         * (`RISK-25`). ⚠ A credential: written to the keyring, never printed.
+         */
+        token: v.optional(v.string()),
+    }),
+    guard: () => ({ chatId: null, kind: "account", action: "sessions-end" }),
+    provenance: {
+        confidence: "confirmed",
+        sources: [webClient, "PyMax 53103f0 `close_all_sessions`"],
+        notes: "Ends every session but this one — the owner's phone included. Never measured by us: the first real run is the owner's own (`NEED-202`).",
+    },
+});
+const webClientNow = "web.max.ru chunk `_app/immutable/chunks/Cdo8IOYe.js`, read 2026-10-08";
+/**
+ * The owner's own settings. The web tab sends 22 for three things — its push subscription, a chat's
+ * mute, and the privacy settings — and only the last two go out from here.
+ */
+export const accountSettings = defineOperation({
+    name: "account.settings",
+    constant: "CONFIG",
+    opcode: 22,
+    auth: true,
+    request: v.strictObject({
+        settings: v.union([
+            /** `dontDisturbUntil`: -1 for good, 0 to hear the chat again, else epoch milliseconds. */
+            v.strictObject({ chats: v.record(v.string(), v.strictObject({ dontDisturbUntil: v.number() })) }),
+            v.strictObject({ user: v.record(v.string(), v.union([v.string(), v.boolean()])) }),
+        ]),
+    }),
+    response: v.looseObject({ user: v.optional(v.looseObject({})), hash: v.optional(v.unknown()) }),
+    guard: (request) => {
+        const settings = request.settings;
+        const chats = Object.keys(settings.chats ?? {});
+        return chats.length === 1
+            ? { chatId: chats[0] ?? null, kind: "account", action: "chat-mute" }
+            : { chatId: null, kind: "account", action: "privacy" };
+    },
+    provenance: {
+        confidence: "confirmed",
+        sources: [
+            `${webClientNow}: mute \`send(22, {settings: {chats: {[id]: {dontDisturbUntil}}}})\`, privacy \`send(22, {settings: {user}})\`; \`isMuted\` reads -1 as for good, 0 as not muted`,
+            "PyMax 53103f0 `change_profile_settings`, rumax a9ecaf3 `set_chat_mute`, `update_user_settings`",
+        ],
+        notes: "Privacy values as the web client reads them: `ALL`, `CONTACTS`, `NOBODY` (PyMax's `_NONE_` is not one); `SEARCH_BY_PHONE` takes only `ALL` or `CONTACTS`; `HIDDEN` is a boolean.",
+    },
+});
+//# sourceMappingURL=account.js.map

package/dist/spec/operations/account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.js","sourceRoot":"","sources":["../../../src/spec/operations/account.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE9C,MAAM,SAAS,GAAG,uEAAuE,CAAA;AAEzF,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;IAC3C,IAAI,EAAE,gBAAgB;IACtB,QAAQ,EAAE,SAAS;IACnB,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC;QACtB,kHAAkH;QAClH,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7C,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAChC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACnC,0EAA0E;QAC1E,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;KACjD,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACnE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACnE,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE;YACP,4IAA4I;YAC5I,yMAAyM;YACzM,SAAS;YACT,gCAAgC;YAChC,2DAA2D;SAC5D;QACD,KAAK,EACH,wPAAwP;KAC3P;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAC;IAC7C,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,eAAe;IACzB,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,KAAK,EAAE,IAAI;IACX,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE;YACP,uHAAuH;YACvH,SAAS;YACT,8BAA8B;SAC/B;KACF;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,eAAe,CAAC;IAClD,IAAI,EAAE,uBAAuB;IAC7B,QAAQ,EAAE,gBAAgB;IAC1B,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC;QACtB;;;WAGG;QACH,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC9B,CAAC;IACF,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACxE,UAAU,EAAE;QACV,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE,CAAC,SAAS,EAAE,oCAAoC,CAAC;QAC1D,KAAK,EACH,yIAAyI;KAC5I;CACF,CAAC,CAAA;AAEF,MAAM,YAAY,GAAG,uEAAuE,CAAA;AAE5F;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAC;IAC7C,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,QAAQ;IAClB,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC;QACtB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC;YAChB,0FAA0F;YAC1F,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;YACjG,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnF,CAAC;KACH,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;IAC/F,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE;QACjB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAA+C,CAAA;QACxE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;QAC/C,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;YACvB,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE;YACpE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IAC1D,CAAC;IACD,UAAU,EAAE;QACV,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE;YACP,GAAG,YAAY,kKAAkK;YACjL,gGAAgG;SACjG;QACD,KAAK,EACH,kLAAkL;KACrL;CACF,CAAC,CAAA"}

package/dist/spec/operations/assets.d.ts

@@ -0,0 +1,17 @@
+import * as v from "valibot";
+export declare const ASSET_TYPES: readonly ["STICKER", "FAVORITE_STICKER", "REACTION", "ANIMOJI_SET"];
+export declare const assetsUpdate: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly type: v.PicklistSchema<readonly ["STICKER", "FAVORITE_STICKER", "REACTION", "ANIMOJI_SET"], undefined>;
+    readonly sync: v.NumberSchema<undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly sync: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+    readonly sections: v.OptionalSchema<v.ArraySchema<v.UnknownSchema, undefined>, undefined>;
+}, undefined>>;
+export declare const assetsByIds: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly type: v.PicklistSchema<["STICKER_SET", "STICKER"], undefined>;
+    readonly ids: v.ArraySchema<v.NumberSchema<undefined>, undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly stickerSets: v.OptionalSchema<v.ArraySchema<v.LooseObjectSchema<{}, undefined>, undefined>, undefined>;
+    readonly stickers: v.OptionalSchema<v.ArraySchema<v.LooseObjectSchema<{}, undefined>, undefined>, undefined>;
+}, undefined>>;
+//# sourceMappingURL=assets.d.ts.map

package/dist/spec/operations/assets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../../../src/spec/operations/assets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAM5B,eAAO,MAAM,WAAW,YAAI,SAAS,EAAE,kBAAkB,EAAE,UAAU,EAAE,aAAa,CAAU,CAAA;AAE9F,eAAO,MAAM,YAAY;;;;;;cAiBvB,CAAA;AAEF,eAAO,MAAM,WAAW;;;;;;cAkBtB,CAAA"}

package/dist/spec/operations/assets.js

@@ -0,0 +1,43 @@
+import * as v from "valibot";
+import { defineOperation } from "../define.js";
+/** Sent by `max serve` after each login, as a web tab does (`MAX-52`); the answer is kept only for its sync value. */
+const recorded = "web.max.ru tab, recorded 2026-09-25 (`docs_ai/captures/2026-09-25-web-tab-2.jsonl`)";
+export const ASSET_TYPES = ["STICKER", "FAVORITE_STICKER", "REACTION", "ANIMOJI_SET"];
+export const assetsUpdate = defineOperation({
+    name: "assets.update",
+    constant: "ASSETS_UPDATE",
+    opcode: 27,
+    auth: true,
+    guard: null,
+    request: v.strictObject({ type: v.picklist(ASSET_TYPES), sync: v.number() }),
+    response: v.looseObject({ sync: v.optional(v.number()), sections: v.optional(v.array(v.unknown())) }),
+    provenance: {
+        confidence: "measured",
+        sources: [
+            recorded,
+            "PyMax 53103f0 names it `ASSETS_UPDATE` and never sends it",
+            "`STICKER` answer measured 2026-10-08 on test account B: `{sync, sections: [{id, type, title, stickerSets: [ids]}], stickersOrder}`",
+        ],
+        notes: "The tab sends the four types in this order, each with the `sync` its previous answer carried.",
+    },
+});
+export const assetsByIds = defineOperation({
+    name: "assets.byIds",
+    constant: "ASSETS_GET_BY_IDS",
+    opcode: 28,
+    auth: true,
+    guard: null,
+    request: v.strictObject({ type: v.picklist(["STICKER_SET", "STICKER"]), ids: v.array(v.number()) }),
+    response: v.looseObject({
+        stickerSets: v.optional(v.array(v.looseObject({}))),
+        stickers: v.optional(v.array(v.looseObject({}))),
+    }),
+    provenance: {
+        confidence: "measured",
+        sources: [
+            'web.max.ru chunk `_app/immutable/chunks/Cdo8IOYe.js`, read 2026-10-08: `send(28, {type: "STICKER_SET" | "STICKER", ids})`',
+            "measured 2026-10-08 on test account B: a set is `{id, name, iconUrl, updateTime, stickers: [ids], link}`, a sticker `{id, width, height, tags, url, lottieUrl, updateTime, type, setId, authorType, fileId}`",
+        ],
+    },
+});
+//# sourceMappingURL=assets.js.map

package/dist/spec/operations/assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.js","sourceRoot":"","sources":["../../../src/spec/operations/assets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE9C,sHAAsH;AACtH,MAAM,QAAQ,GAAG,qFAAqF,CAAA;AAEtG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,SAAS,EAAE,kBAAkB,EAAE,UAAU,EAAE,aAAa,CAAU,CAAA;AAE9F,MAAM,CAAC,MAAM,YAAY,GAAG,eAAe,CAAC;IAC1C,IAAI,EAAE,eAAe;IACrB,QAAQ,EAAE,eAAe;IACzB,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,IAAI;IACX,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC5E,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC;IACrG,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE;YACP,QAAQ;YACR,2DAA2D;YAC3D,oIAAoI;SACrI;QACD,KAAK,EAAE,+FAA+F;KACvG;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,eAAe,CAAC;IACzC,IAAI,EAAE,cAAc;IACpB,QAAQ,EAAE,mBAAmB;IAC7B,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,IAAI;IACX,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IACnG,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;KACjD,CAAC;IACF,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE;YACP,2HAA2H;YAC3H,8MAA8M;SAC/M;KACF;CACF,CAAC,CAAA"}

package/dist/spec/operations/attachments.d.ts

@@ -0,0 +1,15 @@
+import * as v from "valibot";
+export declare const attachmentsFile: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly chatId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    readonly messageId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    readonly fileId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly url: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    readonly unsafe: v.OptionalSchema<v.BooleanSchema<undefined>, undefined>;
+}, undefined>>;
+export declare const attachmentsVideo: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly chatId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    readonly messageId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    readonly videoId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+}, undefined>, v.LooseObjectSchema<{}, undefined>>;
+//# sourceMappingURL=attachments.d.ts.map

package/dist/spec/operations/attachments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.d.ts","sourceRoot":"","sources":["../../../src/spec/operations/attachments.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAI5B,eAAO,MAAM,eAAe;;;;;;;cAkB1B,CAAA;AAEF,eAAO,MAAM,gBAAgB;;;;kDAkB3B,CAAA"}

package/dist/spec/operations/attachments.js

@@ -0,0 +1,40 @@
+import * as v from "valibot";
+import { defineOperation } from "../define.js";
+import { id } from "../scalars.js";
+export const attachmentsFile = defineOperation({
+    name: "attachments.file",
+    constant: "FILE_DOWNLOAD",
+    opcode: 88,
+    auth: true,
+    request: v.strictObject({
+        chatId: id(),
+        messageId: id(),
+        fileId: id(),
+    }),
+    response: v.looseObject({ url: v.optional(v.string()), unsafe: v.optional(v.boolean()) }),
+    guard: null,
+    provenance: {
+        confidence: "measured",
+        sources: ["measured against MAX 2026-09-23 (`pnpm probe:download`)", "tsmax getFileById", "PyMax get_file_by_id"],
+        notes: "A file attachment carries `fileId` and no link; this answers `{unsafe, url}`, and the link opens without credentials.",
+    },
+});
+export const attachmentsVideo = defineOperation({
+    name: "attachments.video",
+    constant: "VIDEO_PLAY",
+    opcode: 83,
+    auth: true,
+    request: v.strictObject({
+        chatId: id(),
+        messageId: id(),
+        videoId: id(),
+    }),
+    response: v.looseObject({}),
+    guard: null,
+    provenance: {
+        confidence: "measured",
+        sources: ["measured against MAX 2026-09-23 (`pnpm probe:download`)", "tsmax getVideoById", "PyMax get_video_by_id"],
+        notes: "Answers `cache` and one key per rendition — `MP4_720`, `HLS`, `DASH`, `EXTERNAL` were seen. The MP4 link opens without credentials.",
+    },
+});
+//# sourceMappingURL=attachments.js.map

package/dist/spec/operations/attachments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.js","sourceRoot":"","sources":["../../../src/spec/operations/attachments.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,EAAE,EAAE,MAAM,eAAe,CAAA;AAElC,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAC;IAC7C,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,eAAe;IACzB,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC;QACtB,MAAM,EAAE,EAAE,EAAE;QACZ,SAAS,EAAE,EAAE,EAAE;QACf,MAAM,EAAE,EAAE,EAAE;KACb,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;IACzF,KAAK,EAAE,IAAI;IACX,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,CAAC,yDAAyD,EAAE,mBAAmB,EAAE,sBAAsB,CAAC;QACjH,KAAK,EACH,uHAAuH;KAC1H;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,eAAe,CAAC;IAC9C,IAAI,EAAE,mBAAmB;IACzB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC;QACtB,MAAM,EAAE,EAAE,EAAE;QACZ,SAAS,EAAE,EAAE,EAAE;QACf,OAAO,EAAE,EAAE,EAAE;KACd,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;IAC3B,KAAK,EAAE,IAAI;IACX,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,CAAC,yDAAyD,EAAE,oBAAoB,EAAE,uBAAuB,CAAC;QACnH,KAAK,EACH,qIAAqI;KACxI;CACF,CAAC,CAAA"}

package/dist/spec/operations/banners.d.ts

@@ -0,0 +1,7 @@
+import * as v from "valibot";
+export declare const bannersList: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly bannersSync: v.NumberSchema<undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly banners: v.OptionalSchema<v.ArraySchema<v.UnknownSchema, undefined>, undefined>;
+}, undefined>>;
+//# sourceMappingURL=banners.d.ts.map

package/dist/spec/operations/banners.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"banners.d.ts","sourceRoot":"","sources":["../../../src/spec/operations/banners.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAM5B,eAAO,MAAM,WAAW;;;;cAUtB,CAAA"}

package/dist/spec/operations/banners.js

@@ -0,0 +1,16 @@
+import * as v from "valibot";
+import { defineOperation } from "../define.js";
+/** Sent by `max serve` after each login, as a web tab does (`MAX-52`); the answer is kept only for its sync value. */
+const recorded = "web.max.ru tab, recorded 2026-09-25 (`docs_ai/captures/2026-09-25-web-tab-2.jsonl`)";
+export const bannersList = defineOperation({
+    name: "banners.list",
+    constant: "BANNERS_GET",
+    opcode: 302,
+    auth: true,
+    guard: null,
+    /** Always 0 — the tab sent 0 on its first login and again on the next. */
+    request: v.strictObject({ bannersSync: v.number() }),
+    response: v.looseObject({ banners: v.optional(v.array(v.unknown())) }),
+    provenance: { confidence: "observed", sources: [recorded, "PyMax 53103f0 names it `BANNERS_GET`"] },
+});
+//# sourceMappingURL=banners.js.map

package/dist/spec/operations/banners.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"banners.js","sourceRoot":"","sources":["../../../src/spec/operations/banners.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE9C,sHAAsH;AACtH,MAAM,QAAQ,GAAG,qFAAqF,CAAA;AAEtG,MAAM,CAAC,MAAM,WAAW,GAAG,eAAe,CAAC;IACzC,IAAI,EAAE,cAAc;IACpB,QAAQ,EAAE,aAAa;IACvB,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,IAAI;IACX,0EAA0E;IAC1E,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACpD,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC;IACtE,UAAU,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,sCAAsC,CAAC,EAAE;CACpG,CAAC,CAAA"}

package/dist/spec/operations/calls.d.ts

@@ -0,0 +1,8 @@
+import * as v from "valibot";
+export declare const callsHistory: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly callHistorySync: v.NumberSchema<undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly callHistoryItems: v.OptionalSchema<v.ArraySchema<v.UnknownSchema, undefined>, undefined>;
+    readonly callHistorySync: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+}, undefined>>;
+//# sourceMappingURL=calls.d.ts.map

package/dist/spec/operations/calls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calls.d.ts","sourceRoot":"","sources":["../../../src/spec/operations/calls.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAM5B,eAAO,MAAM,YAAY;;;;;cAoBvB,CAAA"}

package/dist/spec/operations/calls.js

@@ -0,0 +1,25 @@
+import * as v from "valibot";
+import { defineOperation } from "../define.js";
+/** Sent by `max serve` after each login, as a web tab does (`MAX-52`); the answer is kept only for its sync value. */
+const recorded = "web.max.ru tab, recorded 2026-09-25 (`docs_ai/captures/2026-09-25-web-tab-2.jsonl`)";
+export const callsHistory = defineOperation({
+    name: "calls.history",
+    constant: "CALL_HISTORY",
+    opcode: 163,
+    auth: true,
+    guard: null,
+    request: v.strictObject({ callHistorySync: v.number() }),
+    response: v.looseObject({
+        callHistoryItems: v.optional(v.array(v.unknown())),
+        callHistorySync: v.optional(v.number()),
+    }),
+    provenance: {
+        confidence: "measured",
+        sources: [
+            recorded,
+            "answer measured 2026-10-08 on test account B: `{callHistoryItems, callHistorySync, reset}`; an item is `{historyId, callId, callerId, chatId, messageId, callType, hangupType, time, durationMs}`",
+        ],
+        notes: "`callHistorySync: 0` answers the history from the start. `hangupType` is `HUNGUP`, `MISSED`, `REJECTED` or `CANCELED`, as web.max.ru names them (chunk `Cdo8IOYe`, 2026-10-08).",
+    },
+});
+//# sourceMappingURL=calls.js.map

package/dist/spec/operations/calls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calls.js","sourceRoot":"","sources":["../../../src/spec/operations/calls.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE9C,sHAAsH;AACtH,MAAM,QAAQ,GAAG,qFAAqF,CAAA;AAEtG,MAAM,CAAC,MAAM,YAAY,GAAG,eAAe,CAAC;IAC1C,IAAI,EAAE,eAAe;IACrB,QAAQ,EAAE,cAAc;IACxB,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,IAAI;IACX,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACxD,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC;QACtB,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAClD,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACxC,CAAC;IACF,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE;YACP,QAAQ;YACR,mMAAmM;SACpM;QACD,KAAK,EACH,iLAAiL;KACpL;CACF,CAAC,CAAA"}