@wirecat/max-cli 0.0.0 → 0.43.0

package/dist/spec/operations/contacts.js

@@ -0,0 +1,135 @@
+import * as v from "valibot";
+import { defineOperation, reserveOpcode } from "../define.js";
+import { id } from "../scalars.js";
+export const contactsInfo = defineOperation({
+    name: "contacts.info",
+    constant: "CONTACT_INFO",
+    opcode: 32,
+    auth: true,
+    request: v.strictObject({ contactIds: v.array(id()) }),
+    response: v.looseObject({ contacts: v.optional(v.array(v.looseObject({}))) }),
+    guard: null,
+    provenance: {
+        confidence: "measured",
+        sources: ["measured against MAX 2026-09-19: asked for ten, got ten"],
+        notes: "One request for every unknown id at once. A person with forty dialogs should not cost forty round trips.",
+    },
+});
+export const contactsPresence = defineOperation({
+    name: "contacts.presence",
+    constant: "CONTACT_PRESENCE",
+    opcode: 35,
+    auth: true,
+    request: v.strictObject({ contactIds: v.array(id()) }),
+    response: v.looseObject({
+        presence: v.optional(v.record(v.string(), v.looseObject({}))),
+        time: v.optional(v.number()),
+    }),
+    guard: null,
+    provenance: {
+        confidence: "measured",
+        sources: [
+            "web.max.ru tab, recorded 2026-09-25 (`docs_ai/captures/2026-09-25-web-tab-3.jsonl`): sent on opening a profile",
+            "answer measured 2026-10-08 on test account B (FIND-971): `{presence: {<id>: {seen}}, time}`",
+        ],
+        notes: "`seen` is in seconds: the recorder rewrites epoch milliseconds and left it a number (FIND-988). The web client " +
+            "re-asks every 300 s rather than wait for the 132 push. Its `status` is read only as `1` online, from the tab's " +
+            "code (chunk `Cdo8IOYe`, 2026-10-08) — no answer carrying it was measured.",
+    },
+});
+const CONTACT_ACTIONS = {
+    ADD: "contact-add",
+    REMOVE: "contact-remove",
+    UPDATE: "contact-rename",
+    BLOCK: "contact-block",
+    UNBLOCK: "contact-unblock",
+};
+const webClient = "web.max.ru chunk `_app/immutable/chunks/5oCuRT0F.js`, read 2026-09-24";
+export const contactsByPhone = defineOperation({
+    name: "contacts.byPhone",
+    constant: "CONTACT_INFO_BY_PHONE",
+    opcode: 46,
+    auth: true,
+    request: v.strictObject({ phone: v.pipe(v.string(), v.minLength(1)) }),
+    response: v.looseObject({ contact: v.optional(v.looseObject({})) }),
+    guard: null,
+    provenance: {
+        confidence: "measured",
+        sources: [
+            "measured against MAX 2026-09-24 (`pnpm probe:account`): the owner's own number answered with the owner",
+            webClient,
+            "PyMax 53103f0 `search_by_phone`",
+        ],
+        notes: "⚠ The request carries a phone number: nothing may log it, print it in an error or keep it in a fixture.",
+    },
+});
+export const contactsUpdate = defineOperation({
+    name: "contacts.update",
+    constant: "CONTACT_UPDATE",
+    opcode: 34,
+    auth: true,
+    request: v.union([
+        v.strictObject({ contactId: id(), action: v.picklist(["ADD", "REMOVE", "BLOCK", "UNBLOCK"]) }),
+        /** A name of your own for the person. */
+        v.strictObject({
+            contactId: id(),
+            action: v.literal("UPDATE"),
+            firstName: v.pipe(v.string(), v.minLength(1)),
+            /** Always present, `null` when there is none: without it MAX answers and changes nothing. */
+            lastName: v.nullable(v.string()),
+        }),
+    ]),
+    response: v.looseObject({ contact: v.optional(v.looseObject({})) }),
+    guard: (request) => ({
+        chatId: null,
+        kind: "account",
+        action: CONTACT_ACTIONS[request.action],
+    }),
+    provenance: {
+        confidence: "measured",
+        sources: [
+            "measured 2026-09-27: `max contacts add` then `remove` on a person the owner named; the owner saw the contact appear in the app",
+            "measured 2026-09-27 (`pnpm probe:profile`), on a person who agreed: `UPDATE` answers `{contact}` and keeps the name as a `CUSTOM` entry beside theirs; `BLOCK` and `UNBLOCK` answer `{}`, and CONTACT_INFO shows `status: BLOCKED` in between",
+            'captured 2026-09-28 from web.max.ru renaming a contact: `{contactId: <wrapped id>, action: "UPDATE", firstName, lastName: null}`. Measured the same day: without `lastName` MAX answers `{contact}` with the old `CUSTOM` name and changes nothing; with `lastName: null` the rename holds on a separate CONTACT_INFO read',
+            webClient,
+            "PyMax 53103f0 `add_contact`, `remove_contact`",
+        ],
+        notes: "Blocking works for somebody who is not a contact (`status: REMOVED` before and after).",
+    },
+});
+export const contactsImport = defineOperation({
+    name: "contacts.import",
+    constant: "SYNC",
+    opcode: 21,
+    auth: true,
+    request: v.strictObject({
+        /** Phone number to the name it was saved under. */
+        contactList: v.record(v.string(), v.strictObject({ firstName: v.string() })),
+    }),
+    response: v.looseObject({ contacts: v.optional(v.array(v.looseObject({}))) }),
+    guard: () => ({ chatId: null, kind: "account", action: "contact-import" }),
+    provenance: {
+        confidence: "measured",
+        sources: [
+            "measured against MAX 2026-09-24 (`pnpm probe:account`), the owner's own number only: answered `{phones: {<number>: <number>}}` and no contact",
+            "PyMax 53103f0 `import_contacts`",
+        ],
+        notes: "One witness, under a generic name: not found in the entry chunks of web.max.ru (2026-09-24), whose lazy chunks were not read. It uploads other people's numbers to MAX (`NEED-203`).",
+    },
+});
+export const unidentified36 = reserveOpcode({
+    name: "protocol.unidentified36",
+    constant: "UNIDENTIFIED_36",
+    opcode: 36,
+    reason: "Nobody agrees what it is: tsmax and PyMax call it `CONTACT_LIST`; the protocol documentation calls it `GET_BLOCKED`. Sent once with the owner's permission on 2026-09-20 and it exists — but it refuses every payload we can guess, and one guess closed the connection. It stays unsent until somebody watches a real client send it (`PROTO-1`).",
+    provenance: {
+        confidence: "unknown",
+        sources: [
+            "tsmax and PyMax call it CONTACT_LIST",
+            "max-api-docs calls it GET_BLOCKED",
+            "measured against MAX 2026-09-20: `{}` and `{marker}` are refused with `proto.payload`, `{marker, count}` closes the connection",
+        ],
+        notes: "The refusal names the payload rather than the opcode, so 36 is real and validates its arguments — we simply do not know its shape. Guessing cost a dropped connection, which is why the ladder stopped at three.",
+    },
+});
+//# sourceMappingURL=contacts.js.map

package/dist/spec/operations/contacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contacts.js","sourceRoot":"","sources":["../../../src/spec/operations/contacts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC7D,OAAO,EAAE,EAAE,EAAE,MAAM,eAAe,CAAA;AAElC,MAAM,CAAC,MAAM,YAAY,GAAG,eAAe,CAAC;IAC1C,IAAI,EAAE,eAAe;IACrB,QAAQ,EAAE,cAAc;IACxB,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACtD,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,KAAK,EAAE,IAAI;IACX,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,CAAC,yDAAyD,CAAC;QACpE,KAAK,EAAE,0GAA0G;KAClH;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,eAAe,CAAC;IAC9C,IAAI,EAAE,mBAAmB;IACzB,QAAQ,EAAE,kBAAkB;IAC5B,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACtD,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC;QACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7D,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC7B,CAAC;IACF,KAAK,EAAE,IAAI;IACX,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE;YACP,gHAAgH;YAChH,6FAA6F;SAC9F;QACD,KAAK,EACH,iHAAiH;YACjH,iHAAiH;YACjH,2EAA2E;KAC9E;CACF,CAAC,CAAA;AAEF,MAAM,eAAe,GAAG;IACtB,GAAG,EAAE,aAAa;IAClB,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,gBAAgB;IACxB,KAAK,EAAE,eAAe;IACtB,OAAO,EAAE,iBAAiB;CAClB,CAAA;AAEV,MAAM,SAAS,GAAG,uEAAuE,CAAA;AAEzF,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAC;IAC7C,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,uBAAuB;IACjC,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACnE,KAAK,EAAE,IAAI;IACX,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE;YACP,wGAAwG;YACxG,SAAS;YACT,iCAAiC;SAClC;QACD,KAAK,EAAE,yGAAyG;KACjH;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,eAAe,CAAC;IAC5C,IAAI,EAAE,iBAAiB;IACvB,QAAQ,EAAE,gBAAgB;IAC1B,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC;QACf,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QAC9F,yCAAyC;QACzC,CAAC,CAAC,YAAY,CAAC;YACb,SAAS,EAAE,EAAE,EAAE;YACf,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC3B,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC7C,6FAA6F;YAC7F,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjC,CAAC;KACH,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACnE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACnB,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,eAAe,CAAE,OAAoD,CAAC,MAAM,CAAC;KACtF,CAAC;IACF,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE;YACP,gIAAgI;YAChI,+OAA+O;YAC/O,4TAA4T;YAC5T,SAAS;YACT,+CAA+C;SAChD;QACD,KAAK,EAAE,wFAAwF;KAChG;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,eAAe,CAAC;IAC5C,IAAI,EAAE,iBAAiB;IACvB,QAAQ,EAAE,MAAM;IAChB,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC;QACtB,mDAAmD;QACnD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;KAC7E,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC1E,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE;YACP,+IAA+I;YAC/I,iCAAiC;SAClC;QACD,KAAK,EACH,sLAAsL;KACzL;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,CAAC;IAC1C,IAAI,EAAE,yBAAyB;IAC/B,QAAQ,EAAE,iBAAiB;IAC3B,MAAM,EAAE,EAAE;IACV,MAAM,EACJ,oVAAoV;IACtV,UAAU,EAAE;QACV,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE;YACP,sCAAsC;YACtC,mCAAmC;YACnC,gIAAgI;SACjI;QACD,KAAK,EACH,kNAAkN;KACrN;CACF,CAAC,CAAA"}

package/dist/spec/operations/folders.d.ts

@@ -0,0 +1,31 @@
+import * as v from "valibot";
+export declare const foldersList: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly folderSync: v.NumberSchema<undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly folders: v.OptionalSchema<v.ArraySchema<v.LooseObjectSchema<{}, undefined>, undefined>, undefined>;
+    readonly foldersOrder: v.OptionalSchema<v.ArraySchema<v.UnknownSchema, undefined>, undefined>;
+    readonly folderSync: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+}, undefined>>;
+export declare const foldersUpdate: import("../define.js").Operation<v.StrictObjectSchema<{
+    id: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+    title: v.StringSchema<undefined>;
+    include: v.OptionalSchema<v.ArraySchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>, undefined>, undefined>;
+    /** Sent back as they came: nobody has described what they hold. */
+    filters: v.ArraySchema<v.UnknownSchema, undefined>;
+    options: v.ArraySchema<v.UnknownSchema, undefined>;
+    favorites: v.OptionalSchema<v.ArraySchema<v.UnknownSchema, undefined>, undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly folder: v.OptionalSchema<v.LooseObjectSchema<{}, undefined>, undefined>;
+    readonly folderSync: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+}, undefined>>;
+export declare const foldersDelete: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly folderIds: v.ArraySchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>, undefined>;
+}, undefined>, v.LooseObjectSchema<{}, undefined>>;
+export declare const foldersReorder: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly foldersOrder: v.ArraySchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>, undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly folders: v.OptionalSchema<v.ArraySchema<v.LooseObjectSchema<{}, undefined>, undefined>, undefined>;
+    readonly foldersOrder: v.OptionalSchema<v.ArraySchema<v.UnknownSchema, undefined>, undefined>;
+    readonly folderSync: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+}, undefined>>;
+//# sourceMappingURL=folders.d.ts.map

package/dist/spec/operations/folders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"folders.d.ts","sourceRoot":"","sources":["../../../src/spec/operations/folders.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAiB5B,eAAO,MAAM,WAAW;;;;;;cAoBtB,CAAA;AAEF,eAAO,MAAM,aAAa;;;;IA5BxB,mEAAmE;;;;;;;cAiDnE,CAAA;AAEF,eAAO,MAAM,aAAa;;kDAaxB,CAAA;AAEF,eAAO,MAAM,cAAc;;;;;;cAsBzB,CAAA"}

package/dist/spec/operations/folders.js

@@ -0,0 +1,94 @@
+import * as v from "valibot";
+import { defineOperation } from "../define.js";
+import { id } from "../scalars.js";
+const webClient = "web.max.ru chunk `_app/immutable/chunks/5oCuRT0F.js`, read 2026-09-24";
+const webClientNow = "web.max.ru chunk `_app/immutable/chunks/Cdo8IOYe.js`, read 2026-10-08";
+const Folder = {
+    id: v.pipe(v.string(), v.minLength(1)),
+    title: v.string(),
+    include: v.optional(v.array(id())),
+    /** Sent back as they came: nobody has described what they hold. */
+    filters: v.array(v.unknown()),
+    options: v.array(v.unknown()),
+    favorites: v.optional(v.array(v.unknown())),
+};
+export const foldersList = defineOperation({
+    name: "folders.list",
+    constant: "FOLDERS_GET",
+    opcode: 272,
+    auth: true,
+    request: v.strictObject({ folderSync: v.number() }),
+    response: v.looseObject({
+        folders: v.optional(v.array(v.looseObject({}))),
+        foldersOrder: v.optional(v.array(v.unknown())),
+        folderSync: v.optional(v.number()),
+    }),
+    guard: null,
+    provenance: {
+        confidence: "measured",
+        sources: [
+            "measured against MAX 2026-09-24 (`pnpm probe:account`): no folder of the owner's carries `include`",
+            webClient,
+            "PyMax 53103f0 `get_folders`",
+        ],
+    },
+});
+export const foldersUpdate = defineOperation({
+    name: "folders.update",
+    constant: "FOLDERS_UPDATE",
+    opcode: 274,
+    auth: true,
+    request: v.strictObject(Folder),
+    response: v.looseObject({ folder: v.optional(v.looseObject({})), folderSync: v.optional(v.number()) }),
+    // A new folder and a changed one look the same on the wire — both carry an id — so the journal
+    // calls both an update; either needs the same permission.
+    guard: () => ({ chatId: null, kind: "account", action: "folder-update" }),
+    provenance: {
+        confidence: "measured",
+        sources: [
+            "measured against MAX 2026-09-24 (`pnpm probe:account`): created, renamed and deleted a folder; a 21-character title came back `folder.validation.title.too-long`, 15 was taken",
+            "a chat put in and taken out measured 2026-09-27 (`max chats folders update --add|--remove`): `chats folders list` showed the chat in the folder, then an empty folder; the owner saw it in the app",
+            webClient,
+            "PyMax 53103f0 `create_folder`, `update_folder`",
+        ],
+        notes: "Creates a folder under an id it has not seen, replaces one it has. **The whole folder**: the web client sends every field back, and PyMax's `include or []` would empty a folder whose title changed.",
+    },
+});
+export const foldersDelete = defineOperation({
+    name: "folders.delete",
+    constant: "FOLDERS_DELETE",
+    opcode: 276,
+    auth: true,
+    request: v.strictObject({ folderIds: v.array(v.pipe(v.string(), v.minLength(1))) }),
+    response: v.looseObject({}),
+    guard: () => ({ chatId: null, kind: "account", action: "folder-delete" }),
+    provenance: {
+        confidence: "measured",
+        sources: ["measured against MAX 2026-09-24 (`pnpm probe:account`)", webClient, "PyMax 53103f0 `delete_folder`"],
+        notes: "Deletes the folder, not the chats in it.",
+    },
+});
+export const foldersReorder = defineOperation({
+    name: "folders.reorder",
+    constant: "FOLDERS_REORDER",
+    opcode: 275,
+    auth: true,
+    /** Every folder, in the new order — the web client sends them all, never a moved one alone. */
+    request: v.strictObject({ foldersOrder: v.array(v.pipe(v.string(), v.minLength(1))) }),
+    response: v.looseObject({
+        folders: v.optional(v.array(v.looseObject({}))),
+        foldersOrder: v.optional(v.array(v.unknown())),
+        folderSync: v.optional(v.number()),
+    }),
+    guard: () => ({ chatId: null, kind: "account", action: "folder-order" }),
+    provenance: {
+        confidence: "measured",
+        sources: [
+            webClientNow,
+            "rumax a9ecaf3 `reorder_folders` (`src/api/chats.rs:362`)",
+            "measured against MAX 2026-10-08 on test account B: `all.chat.folder` not first is refused `folder.order.all-folder-not-first`; the current order again is refused `folder.order.same`",
+        ],
+        notes: "The web client applies the answer as a folder delta, the same shape `FOLDERS_GET` answers with.",
+    },
+});
+//# sourceMappingURL=folders.js.map

package/dist/spec/operations/folders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"folders.js","sourceRoot":"","sources":["../../../src/spec/operations/folders.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,EAAE,EAAE,MAAM,eAAe,CAAA;AAElC,MAAM,SAAS,GAAG,uEAAuE,CAAA;AACzF,MAAM,YAAY,GAAG,uEAAuE,CAAA;AAE5F,MAAM,MAAM,GAAG;IACb,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAClC,mEAAmE;IACnE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7B,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;CAC5C,CAAA;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,eAAe,CAAC;IACzC,IAAI,EAAE,cAAc;IACpB,QAAQ,EAAE,aAAa;IACvB,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACnD,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC;QACtB,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/C,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9C,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACnC,CAAC;IACF,KAAK,EAAE,IAAI;IACX,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE;YACP,oGAAoG;YACpG,SAAS;YACT,6BAA6B;SAC9B;KACF;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;IAC3C,IAAI,EAAE,gBAAgB;IACtB,QAAQ,EAAE,gBAAgB;IAC1B,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;IAC/B,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IACtG,+FAA+F;IAC/F,0DAA0D;IAC1D,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACzE,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE;YACP,gLAAgL;YAChL,oMAAoM;YACpM,SAAS;YACT,gDAAgD;SACjD;QACD,KAAK,EACH,uMAAuM;KAC1M;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;IAC3C,IAAI,EAAE,gBAAgB;IACtB,QAAQ,EAAE,gBAAgB;IAC1B,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;IAC3B,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACzE,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,CAAC,wDAAwD,EAAE,SAAS,EAAE,+BAA+B,CAAC;QAC/G,KAAK,EAAE,0CAA0C;KAClD;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,eAAe,CAAC;IAC5C,IAAI,EAAE,iBAAiB;IACvB,QAAQ,EAAE,iBAAiB;IAC3B,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,IAAI;IACV,+FAA+F;IAC/F,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC;QACtB,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/C,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9C,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACnC,CAAC;IACF,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACxE,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE;YACP,YAAY;YACZ,0DAA0D;YAC1D,uLAAuL;SACxL;QACD,KAAK,EAAE,iGAAiG;KACzG;CACF,CAAC,CAAA"}

package/dist/spec/operations/login.d.ts

@@ -0,0 +1,64 @@
+import * as v from "valibot";
+export declare const loginQrRequest: import("../define.js").Operation<v.StrictObjectSchema<{}, undefined>, v.LooseObjectSchema<{
+    readonly qrLink: v.StringSchema<undefined>;
+    readonly trackId: v.StringSchema<undefined>;
+    readonly pollingInterval: v.NumberSchema<undefined>;
+    readonly expiresAt: v.NumberSchema<undefined>;
+}, undefined>>;
+export declare const loginQrStatus: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly trackId: v.StringSchema<undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly status: v.LooseObjectSchema<{
+        readonly expiresAt: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+        readonly loginAvailable: v.OptionalSchema<v.BooleanSchema<undefined>, undefined>;
+    }, undefined>;
+}, undefined>>;
+export declare const loginByQr: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly trackId: v.StringSchema<undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    tokenAttrs: v.OptionalSchema<v.LooseObjectSchema<{
+        readonly LOGIN: v.OptionalSchema<v.LooseObjectSchema<{
+            readonly token: v.StringSchema<undefined>;
+        }, undefined>, undefined>;
+    }, undefined>, undefined>;
+    passwordChallenge: v.OptionalSchema<v.LooseObjectSchema<{
+        readonly trackId: v.StringSchema<undefined>;
+        readonly hint: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    }, undefined>, undefined>;
+}, undefined>>;
+export declare const loginSmsRequest: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly phone: v.StringSchema<undefined>;
+    readonly type: v.LiteralSchema<"START_AUTH", undefined>;
+    readonly language: v.StringSchema<undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly token: v.StringSchema<undefined>;
+    readonly codeLength: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+}, undefined>>;
+export declare const loginSmsCode: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly token: v.StringSchema<undefined>;
+    readonly verifyCode: v.StringSchema<undefined>;
+    readonly authTokenType: v.LiteralSchema<"CHECK_CODE", undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    tokenAttrs: v.OptionalSchema<v.LooseObjectSchema<{
+        readonly LOGIN: v.OptionalSchema<v.LooseObjectSchema<{
+            readonly token: v.StringSchema<undefined>;
+        }, undefined>, undefined>;
+    }, undefined>, undefined>;
+    passwordChallenge: v.OptionalSchema<v.LooseObjectSchema<{
+        readonly trackId: v.StringSchema<undefined>;
+        readonly hint: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    }, undefined>, undefined>;
+}, undefined>>;
+export declare const loginPassword: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly trackId: v.StringSchema<undefined>;
+    readonly password: v.StringSchema<undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly tokenAttrs: v.OptionalSchema<v.LooseObjectSchema<{
+        readonly LOGIN: v.OptionalSchema<v.LooseObjectSchema<{
+            readonly token: v.StringSchema<undefined>;
+        }, undefined>, undefined>;
+    }, undefined>, undefined>;
+    readonly error: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+}, undefined>>;
+export declare const qrApprove: import("../define.js").Reservation;
+//# sourceMappingURL=login.d.ts.map

package/dist/spec/operations/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../src/spec/operations/login.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAe5B,eAAO,MAAM,cAAc;;;;;cAiBzB,CAAA;AAEF,eAAO,MAAM,aAAa;;;;;;;cAgBxB,CAAA;AAEF,eAAO,MAAM,SAAS;;;;;;;;;;;;cAYpB,CAAA;AAEF,eAAO,MAAM,eAAe;;;;;;;cAc1B,CAAA;AAEF,eAAO,MAAM,YAAY;;;;;;;;;;;;;;cASvB,CAAA;AAEF,eAAO,MAAM,aAAa;;;;;;;;;;cAaxB,CAAA;AAEF,eAAO,MAAM,SAAS,oCAOpB,CAAA"}

package/dist/spec/operations/login.js

@@ -0,0 +1,105 @@
+import * as v from "valibot";
+import { defineOperation, reserveOpcode } from "../define.js";
+/**
+ * How MAX hands over a token once a person has proved who they are — by QR, SMS code or password.
+ * ⚠ **It is a credential**: nothing prints it, logs it or puts it in a fixture.
+ */
+const Issued = {
+    tokenAttrs: v.optional(v.looseObject({ LOGIN: v.optional(v.looseObject({ token: v.string() })) })),
+    passwordChallenge: v.optional(v.looseObject({ trackId: v.string(), hint: v.optional(v.string()) })),
+};
+const PYMAX = "PyMax 2.4.1 src/pymax/api/auth/service.py, GitHub 53103f0";
+const DOCS = "max-api-docs/protocol/auth.md (dac4b19)";
+export const loginQrRequest = defineOperation({
+    name: "login.qrRequest",
+    constant: "GET_QR",
+    opcode: 288,
+    auth: false,
+    request: v.strictObject({}),
+    response: v.looseObject({
+        qrLink: v.string(),
+        trackId: v.string(),
+        pollingInterval: v.number(),
+        expiresAt: v.number(),
+    }),
+    guard: null,
+    provenance: {
+        confidence: "measured",
+        sources: ["measured against MAX 2026-09-24: `session start qr` logged in", PYMAX, DOCS],
+    },
+});
+export const loginQrStatus = defineOperation({
+    name: "login.qrStatus",
+    constant: "GET_QR_STATUS",
+    opcode: 289,
+    auth: false,
+    request: v.strictObject({ trackId: v.string() }),
+    response: v.looseObject({
+        status: v.looseObject({ expiresAt: v.optional(v.number()), loginAvailable: v.optional(v.boolean()) }),
+    }),
+    guard: null,
+    provenance: {
+        confidence: "measured",
+        sources: ["measured against MAX 2026-09-24: `session start qr` logged in", PYMAX, DOCS],
+        notes: "`loginAvailable` is in PyMax only. The protocol notes say the token arrives as a push of opcode 18 instead.",
+    },
+});
+export const loginByQr = defineOperation({
+    name: "login.byQr",
+    constant: "LOGIN_BY_QR",
+    opcode: 291,
+    auth: false,
+    request: v.strictObject({ trackId: v.string() }),
+    response: v.looseObject(Issued),
+    guard: null,
+    provenance: {
+        confidence: "measured",
+        sources: ["measured against MAX 2026-09-24: `session start qr` logged in", PYMAX],
+    },
+});
+export const loginSmsRequest = defineOperation({
+    name: "login.smsRequest",
+    constant: "AUTH_REQUEST",
+    opcode: 17,
+    auth: false,
+    request: v.strictObject({ phone: v.string(), type: v.literal("START_AUTH"), language: v.string() }),
+    response: v.looseObject({ token: v.string(), codeLength: v.optional(v.number()) }),
+    guard: null,
+    provenance: {
+        confidence: "confirmed",
+        sources: [PYMAX, DOCS],
+        notes: "Measured 2026-09-24: MAX refused the first request with a captcha demand, which only the web page can solve. So `session start sms` opens web.max.ru instead of sending this; nothing sends it.",
+    },
+});
+export const loginSmsCode = defineOperation({
+    name: "login.smsCode",
+    constant: "AUTH",
+    opcode: 18,
+    auth: false,
+    request: v.strictObject({ token: v.string(), verifyCode: v.string(), authTokenType: v.literal("CHECK_CODE") }),
+    response: v.looseObject(Issued),
+    guard: null,
+    provenance: { confidence: "confirmed", sources: [PYMAX, DOCS] },
+});
+export const loginPassword = defineOperation({
+    name: "login.password",
+    constant: "AUTH_LOGIN_CHECK_PASSWORD",
+    opcode: 115,
+    auth: false,
+    request: v.strictObject({ trackId: v.string(), password: v.string() }),
+    response: v.looseObject({ tokenAttrs: Issued.tokenAttrs, error: v.optional(v.string()) }),
+    guard: null,
+    provenance: {
+        confidence: "measured",
+        sources: ["measured against MAX 2026-09-24: `session start qr` on an account with a cloud password", PYMAX],
+        notes: "A wrong password is refused as `password2fa.wrong`, and the same `trackId` takes another attempt.",
+    },
+});
+export const qrApprove = reserveOpcode({
+    name: "login.qrApprove",
+    constant: "AUTH_QR_APPROVE",
+    opcode: 290,
+    reason: "The phone's side of a QR login: it lets whoever showed the code into the owner's account. A CLI logging itself in never approves anybody.",
+    provenance: { confidence: "observed", sources: [PYMAX] },
+});
+//# sourceMappingURL=login.js.map

package/dist/spec/operations/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../../src/spec/operations/login.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAE7D;;;GAGG;AACH,MAAM,MAAM,GAAG;IACb,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAClG,iBAAiB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;CACpG,CAAA;AAED,MAAM,KAAK,GAAG,2DAA2D,CAAA;AACzE,MAAM,IAAI,GAAG,yCAAyC,CAAA;AAEtD,MAAM,CAAC,MAAM,cAAc,GAAG,eAAe,CAAC;IAC5C,IAAI,EAAE,iBAAiB;IACvB,QAAQ,EAAE,QAAQ;IAClB,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC;QACtB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;QAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;KACtB,CAAC;IACF,KAAK,EAAE,IAAI;IACX,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,CAAC,+DAA+D,EAAE,KAAK,EAAE,IAAI,CAAC;KACxF;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;IAC3C,IAAI,EAAE,gBAAgB;IACtB,QAAQ,EAAE,eAAe;IACzB,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAChD,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC;QACtB,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;KACtG,CAAC;IACF,KAAK,EAAE,IAAI;IACX,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,CAAC,+DAA+D,EAAE,KAAK,EAAE,IAAI,CAAC;QACvF,KAAK,EACH,6GAA6G;KAChH;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,eAAe,CAAC;IACvC,IAAI,EAAE,YAAY;IAClB,QAAQ,EAAE,aAAa;IACvB,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAChD,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC;IAC/B,KAAK,EAAE,IAAI;IACX,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,CAAC,+DAA+D,EAAE,KAAK,CAAC;KAClF;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAC;IAC7C,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,cAAc;IACxB,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACnG,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IAClF,KAAK,EAAE,IAAI;IACX,UAAU,EAAE;QACV,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC;QACtB,KAAK,EACH,iMAAiM;KACpM;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,eAAe,CAAC;IAC1C,IAAI,EAAE,eAAe;IACrB,QAAQ,EAAE,MAAM;IAChB,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;IAC9G,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC;IAC/B,KAAK,EAAE,IAAI;IACX,UAAU,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE;CAChE,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;IAC3C,IAAI,EAAE,gBAAgB;IACtB,QAAQ,EAAE,2BAA2B;IACrC,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACtE,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IACzF,KAAK,EAAE,IAAI;IACX,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,CAAC,yFAAyF,EAAE,KAAK,CAAC;QAC3G,KAAK,EAAE,mGAAmG;KAC3G;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,aAAa,CAAC;IACrC,IAAI,EAAE,iBAAiB;IACvB,QAAQ,EAAE,iBAAiB;IAC3B,MAAM,EAAE,GAAG;IACX,MAAM,EACJ,2IAA2I;IAC7I,UAAU,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE;CACzD,CAAC,CAAA"}

package/dist/spec/operations/messages.d.ts

@@ -0,0 +1,142 @@
+import * as v from "valibot";
+export declare const messagesSend: import("../define.js").Operation<v.UnionSchema<[v.StrictObjectSchema<{
+    readonly chatId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    readonly message: v.StrictObjectSchema<{
+        /** Left out on a forward, as the web client does: the forwarded message is the content. */
+        readonly text: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        /**
+         * The client id MAX deduplicates by — measured, and it is what makes one retry safe. It must
+         * never be regenerated on a retry: a fresh one means a second message in somebody's chat.
+         */
+        readonly cid: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>]>;
+        /** Markup in UTF-16 positions. STRONG, EMPHASIZED, STRIKETHROUGH, MONOSPACED measured locally 2026-09-24; LINK attributes.url and UNDERLINE preserved in raw CHAT_HISTORY readback locally 2026-10-03 (release Saved messages check). */
+        readonly elements: v.OptionalSchema<v.ArraySchema<v.StrictObjectSchema<{
+            readonly type: v.StringSchema<undefined>;
+            readonly from: v.NumberSchema<undefined>;
+            readonly length: v.NumberSchema<undefined>;
+            readonly attributes: v.OptionalSchema<v.StrictObjectSchema<{
+                readonly url: v.StringSchema<undefined>;
+            }, undefined>, undefined>;
+        }, undefined>, undefined>, undefined>;
+        readonly attaches: v.ArraySchema<v.UnknownSchema, undefined>;
+        /** Read back as `{type, chatId, message}` — the quoted message whole (measured 2026-09-23). */
+        readonly link: v.OptionalSchema<v.VariantSchema<"type", [v.StrictObjectSchema<{
+            readonly type: v.LiteralSchema<"REPLY", undefined>;
+            readonly messageId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+        }, undefined>, v.StrictObjectSchema<{
+            readonly type: v.LiteralSchema<"FORWARD", undefined>;
+            readonly messageId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+            readonly chatId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+        }, undefined>], undefined>, undefined>;
+        /**
+         * When MAX itself sends it, in epoch milliseconds — the message waits in the chat's DELAYED
+         * history until then. The answer adds `notifySender` and `notifyOpponents`, which we leave
+         * to MAX as the web client does (measured 2026-09-24, `FIND-139`).
+         */
+        readonly delayedAttributes: v.OptionalSchema<v.StrictObjectSchema<{
+            readonly timeToFire: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>]>;
+        }, undefined>, undefined>;
+    }, undefined>;
+    /** Left out when starting a bot, as the web client does. */
+    readonly notify: v.OptionalSchema<v.BooleanSchema<undefined>, undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly message: v.StrictObjectSchema<{
+        readonly cid: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>]>;
+        readonly attaches: v.TupleSchema<[v.StrictObjectSchema<{
+            readonly _type: v.LiteralSchema<"CONTROL", undefined>;
+            readonly event: v.LiteralSchema<"new", undefined>;
+            readonly chatType: v.PicklistSchema<["CHAT", "CHANNEL"], undefined>;
+            readonly title: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+            readonly userIds: v.ArraySchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>, undefined>;
+        }, undefined>], undefined>;
+    }, undefined>;
+    readonly notify: v.BooleanSchema<undefined>;
+}, undefined>], undefined>, v.LooseObjectSchema<{
+    readonly message: v.OptionalSchema<v.LooseObjectSchema<{}, undefined>, undefined>;
+    readonly chat: v.OptionalSchema<v.LooseObjectSchema<{}, undefined>, undefined>;
+}, undefined>>;
+export declare const messagesEdit: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly chatId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    readonly messageId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    /** Left out when closing a poll, as the web client does: only the attachment changes. */
+    readonly text: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    readonly elements: v.OptionalSchema<v.ArraySchema<v.StrictObjectSchema<{
+        readonly type: v.StringSchema<undefined>;
+        readonly from: v.NumberSchema<undefined>;
+        readonly length: v.NumberSchema<undefined>;
+        readonly attributes: v.OptionalSchema<v.StrictObjectSchema<{
+            readonly url: v.StringSchema<undefined>;
+        }, undefined>, undefined>;
+    }, undefined>, undefined>, undefined>;
+    /** `attachments`, not `attaches` as in MSG_SEND — every source spells them differently. */
+    readonly attachments: v.ArraySchema<v.UnknownSchema, undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly message: v.OptionalSchema<v.LooseObjectSchema<{}, undefined>, undefined>;
+}, undefined>>;
+export declare const messagesReactions: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly chatId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    readonly messageIds: v.ArraySchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>, undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly messagesReactions: v.OptionalSchema<v.LooseObjectSchema<{}, undefined>, undefined>;
+}, undefined>>;
+export declare const messagesMedia: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly chatId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    readonly messageId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    readonly attachTypes: v.ArraySchema<v.PicklistSchema<["PHOTO", "VIDEO", "FILE", "AUDIO", "SHARE"], undefined>, undefined>;
+    readonly forward: v.NumberSchema<undefined>;
+    readonly backward: v.NumberSchema<undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly messages: v.OptionalSchema<v.ArraySchema<v.LooseObjectSchema<{}, undefined>, undefined>, undefined>;
+    readonly total: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+}, undefined>>;
+export declare const messagesSearch: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly chatId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    readonly query: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+    readonly count: v.NumberSchema<undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly result: v.OptionalSchema<v.ArraySchema<v.LooseObjectSchema<{}, undefined>, undefined>, undefined>;
+    readonly total: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+}, undefined>>;
+export declare const messagesReact: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly chatId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    readonly messageId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    readonly reaction: v.StrictObjectSchema<{
+        readonly reactionType: v.LiteralSchema<"EMOJI", undefined>;
+        readonly id: v.StringSchema<undefined>;
+    }, undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly reactionInfo: v.OptionalSchema<v.LooseObjectSchema<{}, undefined>, undefined>;
+}, undefined>>;
+export declare const messagesPress: import("../define.js").Operation<v.StrictObjectSchema<{
+    /** The keyboard attach's own `callbackId`, not the button's. */
+    readonly callbackId: v.StringSchema<undefined>;
+    readonly type: v.LiteralSchema<"CALLBACK", undefined>;
+    readonly payload: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    readonly timestamp: v.NumberSchema<undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly chat: v.OptionalSchema<v.LooseObjectSchema<{}, undefined>, undefined>;
+    readonly message: v.OptionalSchema<v.LooseObjectSchema<{}, undefined>, undefined>;
+    readonly unread: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+    readonly mark: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+}, undefined>>;
+export declare const messagesUnreact: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly chatId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    readonly messageId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly reactionInfo: v.OptionalSchema<v.LooseObjectSchema<{}, undefined>, undefined>;
+}, undefined>>;
+export declare const messagesPollVote: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly chatId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    readonly messageId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    readonly pollId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    /** Plain integers, not ids: wrapped as 64-bit, MAX answered `proto.payload` and closed the connection. Empty takes the vote back. */
+    readonly answersIds: v.ArraySchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>]>, undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly state: v.OptionalSchema<v.LooseObjectSchema<{}, undefined>, undefined>;
+}, undefined>>;
+export declare const messagesDelete: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly chatId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+    readonly messageIds: v.ArraySchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>, undefined>;
+    readonly forMe: v.BooleanSchema<undefined>;
+}, undefined>, v.LooseObjectSchema<{}, undefined>>;
+//# sourceMappingURL=messages.d.ts.map

package/dist/spec/operations/messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../../src/spec/operations/messages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAK5B,eAAO,MAAM,YAAY;;;QASjB,2FAA2F;;QAE3F;;;WAGG;;QAEH,yOAAyO;;;;;;;;;;QAYzO,+FAA+F;;;;;;;;;QAQ/F;;;;WAIG;;;;;IAGL,4DAA4D;;;;;;;;;;;;;;;;;cAsFhE,CAAA;AAEF,eAAO,MAAM,YAAY;;;IAQrB,yFAAyF;;;;;;;;;;IAYzF,2FAA2F;;;;cA4B7F,CAAA;AAEF,eAAO,MAAM,iBAAiB;;;;;cAkB5B,CAAA;AAEF,eAAO,MAAM,aAAa;;;;;;;;;cAwBxB,CAAA;AAEF,eAAO,MAAM,cAAc;;;;;;;cAkBzB,CAAA;AAEF,eAAO,MAAM,aAAa;;;;;;;;;cAsBxB,CAAA;AAEF,eAAO,MAAM,aAAa;IAMtB,gEAAgE;;;;;;;;;;cAsBlE,CAAA;AAEF,eAAO,MAAM,eAAe;;;;;cAa1B,CAAA;AAEF,eAAO,MAAM,gBAAgB;;;;IASzB,qIAAqI;;;;cAgBvI,CAAA;AAEF,eAAO,MAAM,cAAc;;;;kDAyBzB,CAAA"}