ryco-cli 0.1.20 → 0.1.22

package/dist/{collectUint8StreamText-B3klZuIF.mjs → collectUint8StreamText-C_VNyArd.mjs}

@@ -257,8 +257,10 @@ const ExecutionEnvironmentPlatform = Schema.Struct({
 });
 const ExecutionEnvironmentCapabilities = Schema.Struct({
 	repositoryIdentity: Schema.Boolean.pipe(Schema.withDecodingDefault(Effect.succeed(false))),
+	threadSnooze: Schema.optional(Schema.Boolean),
 	threadSettlement: Schema.Boolean.pipe(Schema.withDecodingDefault(Effect.succeed(false))),
-	threadPriorityRanking: Schema.Boolean.pipe(Schema.withDecodingDefault(Effect.succeed(false)))
+	threadPriorityRanking: Schema.Boolean.pipe(Schema.withDecodingDefault(Effect.succeed(false))),
+	fileAttachments: Schema.optional(Schema.Struct({ maxUploadBytes: NonNegativeInt }))
 });
 const ExecutionEnvironmentDescriptor = Schema.Struct({
 	environmentId: EnvironmentId$1,
@@ -360,6 +362,7 @@ const AdvertisedEndpoint = Schema.Struct({
 	isDefault: Schema.optional(Schema.Boolean),
 	description: Schema.optional(TrimmedNonEmptyString)
 });
+const RELAY_E2EE_CAPABILITY_STATEMENT_MAX_BYTES = 5190;
 const RELAY_MAX_CONTROL_FRAME_BYTES = 262144;
 const RELAY_MAX_DATA_CHUNK_BYTES = 262144;
 const RELAY_MAX_DATA_FRAME_OVERHEAD_BYTES = 1024;
@@ -422,7 +425,11 @@ const RELAY_FRAME_TYPES = [
 	"channel.close",
 	"ping",
 	"pong",
-	"error"
+	"error",
+	"node.e2ee.statement",
+	"node.e2ee.statement.ack",
+	"e2ee.verifier-keys",
+	"e2ee.enrollment-revoked"
 ];
 const RELAY_PROTOCOL_ERROR_CODES = [
 	"invalid_encoding",
@@ -433,7 +440,7 @@ const RELAY_PROTOCOL_ERROR_CODES = [
 	...RELAY_CLOSE_REASONS
 ];
 const UInt16 = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0), Schema.isLessThanOrEqualTo(65535));
-const UInt32 = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0), Schema.isLessThanOrEqualTo(4294967295));
+const UInt32$1 = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0), Schema.isLessThanOrEqualTo(4294967295));
 const RetryAfterMs = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0), Schema.isLessThanOrEqualTo(RELAY_MAX_RETRY_AFTER_MS));
 const ProtocolFields = {
 	protocolMajor: UInt16,
@@ -452,11 +459,25 @@ const RelayEffectiveRole = Schema.Literals([
 const RelayProtocolErrorCode = Schema.Literals(RELAY_PROTOCOL_ERROR_CODES);
 const RelayNodeId = Schema.String.check(Schema.isPattern(/^node_[A-Za-z0-9_-]{22,43}$/), Schema.isMaxLength(48)).pipe(Schema.brand("RelayNodeId"));
 const RelayChannelId = Schema.String.check(Schema.isPattern(/^ch_[A-Za-z0-9_-]{22}$/), Schema.isMaxLength(25)).pipe(Schema.brand("RelayChannelId"));
-const RelaySequence = UInt32.pipe(Schema.brand("RelaySequence"));
+const NativeE2eeEnrollmentId = Schema.String.check(Schema.isPattern(/^enr_[A-Za-z0-9_-]{22,43}$/), Schema.isMaxLength(47)).pipe(Schema.brand("NativeE2eeEnrollmentId"));
+const HubGrantVerificationKeyId = Schema.String.check(Schema.isPattern(/^hgk_[A-Za-z0-9_-]{22,43}$/), Schema.isMaxLength(47)).pipe(Schema.brand("HubGrantVerificationKeyId"));
+const RelayTicketId = Schema.String.check(Schema.isPattern(/^rtk_[A-Za-z0-9_-]{22,43}$/), Schema.isMaxLength(47)).pipe(Schema.brand("RelayTicketId"));
+const NativeE2eeEnrollmentRevision = UInt32$1.check(Schema.isGreaterThanOrEqualTo(1)).pipe(Schema.brand("NativeE2eeEnrollmentRevision"));
+const E2eeAuthorizationEpoch = UInt32$1.pipe(Schema.brand("E2eeAuthorizationEpoch"));
+const E2eeKeysetGeneration = UInt32$1.pipe(Schema.brand("E2eeKeysetGeneration"));
+const RelayConnectorGeneration = UInt32$1.pipe(Schema.brand("RelayConnectorGeneration"));
+const RelaySequence = UInt32$1.pipe(Schema.brand("RelaySequence"));
 const RelayHeartbeatNonce = boundedBytes(8, 8);
 const RelayAuthenticationNonce = boundedBytes(32, 32);
 const RelaySignatureMaterial = boundedBytes(64, 512);
 const RelayTicketMaterial = boundedBytes(32, 64);
+const RelayE2eeDigest = boundedBytes(32, 32).pipe(Schema.brand("RelayE2eeDigest"));
+const RelayAccountGrantContext = Schema.Tuple([
+	Schema.Literal(2),
+	RelayTicketId,
+	RelayE2eeDigest,
+	RelayE2eeDigest
+]);
 const RelayLimits = Schema.Struct({
 	maxControlFrameBytes: Schema.Int.check(Schema.isGreaterThanOrEqualTo(RELAY_MIN_CONTROL_FRAME_BYTES), Schema.isLessThanOrEqualTo(RELAY_MAX_CONTROL_FRAME_BYTES)),
 	maxDataChunkBytes: Schema.Int.check(Schema.isGreaterThanOrEqualTo(RELAY_MIN_DATA_CHUNK_BYTES), Schema.isLessThanOrEqualTo(RELAY_MAX_DATA_CHUNK_BYTES)),
@@ -485,7 +506,11 @@ const minorVersionSupportsCloseReason = (protocolMinor, reason) => reason === vo
 const minorVersionSupportsAuthorizedChannel = (input) => {
 	const hasCapability = input.capability !== void 0;
 	const hasEffectiveRole = input.effectiveRole !== void 0;
-	if (input.protocolMinor >= 2) return hasCapability && hasEffectiveRole ? void 0 : "protocol minor version 2 or newer requires channel authorization metadata";
+	if (input.accountGrantContext !== void 0 && input.protocolMinor < 3) return "account grant context requires protocol minor version 3 or newer";
+	if (input.protocolMinor >= 2) {
+		if (!hasCapability || !hasEffectiveRole) return "protocol minor version 2 or newer requires channel authorization metadata";
+		return;
+	}
 	return !hasCapability && !hasEffectiveRole ? void 0 : "channel authorization metadata requires protocol minor version 2 or newer";
 };
 const RelayNodeAuthHandshake = Schema.Struct({
@@ -513,8 +538,43 @@ const RelayChannelOpenFrame = Schema.Struct({
 	...ProtocolFields,
 	channelId: RelayChannelId,
 	capability: Schema.optionalKey(RelayCapability),
-	effectiveRole: Schema.optionalKey(RelayEffectiveRole)
+	effectiveRole: Schema.optionalKey(RelayEffectiveRole),
+	accountGrantContext: Schema.optionalKey(RelayAccountGrantContext)
 }).check(Schema.makeFilter(minorVersionSupportsAuthorizedChannel));
+const minor3Frame = (fields) => Schema.Struct({
+	...fields,
+	...ProtocolFields
+}).check(Schema.makeFilter((frame) => frame.protocolMinor >= 3 ? void 0 : "frame requires protocol minor version 3 or newer"));
+const RelayNodeE2eeStatementFrame = minor3Frame({
+	type: Schema.Literal("node.e2ee.statement"),
+	connectorGeneration: RelayConnectorGeneration,
+	statement: boundedBytes(1, RELAY_E2EE_CAPABILITY_STATEMENT_MAX_BYTES),
+	statementDigest: RelayE2eeDigest,
+	expiresAt: Schema.Int.check(Schema.isGreaterThanOrEqualTo(0), Schema.isLessThanOrEqualTo(Number.MAX_SAFE_INTEGER))
+});
+const RelayNodeE2eeStatementAckFrame = minor3Frame({
+	type: Schema.Literal("node.e2ee.statement.ack"),
+	connectorGeneration: RelayConnectorGeneration,
+	statementDigest: RelayE2eeDigest
+});
+const RelayHubGrantVerificationKey = Schema.Struct({
+	keyId: HubGrantVerificationKeyId,
+	publicKey: boundedBytes(32, 32),
+	notBefore: Schema.Int.check(Schema.isGreaterThanOrEqualTo(0), Schema.isLessThanOrEqualTo(Number.MAX_SAFE_INTEGER)),
+	notAfter: Schema.Int.check(Schema.isGreaterThanOrEqualTo(0), Schema.isLessThanOrEqualTo(Number.MAX_SAFE_INTEGER))
+}).check(Schema.makeFilter((key) => key.notAfter > key.notBefore ? void 0 : "notAfter must be after notBefore"));
+const RelayE2eeVerifierKeysFrame = minor3Frame({
+	type: Schema.Literal("e2ee.verifier-keys"),
+	generation: E2eeKeysetGeneration,
+	keys: Schema.Array(RelayHubGrantVerificationKey).check(Schema.isMinLength(1), Schema.isMaxLength(4), Schema.makeFilter((keys) => new Set(keys.map((key) => key.keyId)).size === keys.length ? void 0 : "grant verification key ids must be distinct"))
+});
+const RelayE2eeEnrollmentRevokedFrame = minor3Frame({
+	type: Schema.Literal("e2ee.enrollment-revoked"),
+	enrollmentId: NativeE2eeEnrollmentId,
+	enrollmentRevision: NativeE2eeEnrollmentRevision,
+	accountAuthEpoch: E2eeAuthorizationEpoch,
+	deviceAuthEpoch: E2eeAuthorizationEpoch
+});
 const RelayChannelAcceptFrame = Schema.Struct({
 	type: Schema.Literal("channel.accept"),
 	...ProtocolFields,
@@ -568,7 +628,7 @@ const RelaySupportedVersionRange = Schema.Struct({
 const RELAY_SUPPORTED_VERSION_RANGE = RelaySupportedVersionRange.make({
 	protocolMajor: 1,
 	minimumMinor: 0,
-	maximumMinor: 2
+	maximumMinor: 3
 });
 const RelayErrorFrame = Schema.Struct({
 	type: Schema.Literal("error"),
@@ -599,7 +659,11 @@ const RelayControlFrame = Schema.Union([
 	RelayChannelCloseFrame,
 	RelayPingFrame,
 	RelayPongFrame,
-	RelayErrorFrame
+	RelayErrorFrame,
+	RelayNodeE2eeStatementFrame,
+	RelayNodeE2eeStatementAckFrame,
+	RelayE2eeVerifierKeysFrame,
+	RelayE2eeEnrollmentRevokedFrame
 ]);
 const RelayFrame = Schema.Union([RelayControlFrame, RelayDataFrame]);
 //#endregion
@@ -655,7 +719,7 @@ const HubConnectorStatus = Schema.Struct({
 	if (status.state === "degraded" && status.degradedMode === void 0) return "degraded status requires degradedMode";
 	if (status.state !== "degraded" && status.degradedMode !== void 0) return "degradedMode is allowed only for degraded status";
 	if (status.state === "online") {
-		if (status.protocolMajor !== 1 || status.protocolMinor !== 2) return "online status requires the supported relay protocol";
+		if (status.protocolMajor !== 1 || status.protocolMinor === void 0 || status.protocolMinor < 2 || status.protocolMinor > 3) return "online status requires the supported relay protocol";
 	} else if (status.protocolMajor !== void 0 || status.protocolMinor !== void 0) return "protocol is exposed only while online";
 	if (status.nextRetryAt !== void 0 && status.degradedMode !== "backing_off") return "nextRetryAt requires backing_off";
 	if (status.state !== "online" && status.activeChannels !== 0) return "active channels require online status";
@@ -726,16 +790,16 @@ const HubEnrollmentStartResult = Schema.Struct({
 	...HubEnrollmentCeremonyDetail.fields
 });
 const HOSTED_IDENTITY_MAX_ANTI_BOT_ASSERTION_CHARS = 8192;
-const strict$3 = (schema) => schema.annotate({ parseOptions: { onExcessProperty: "error" } });
-const EpochMs$1 = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0));
+const strict$4 = (schema) => schema.annotate({ parseOptions: { onExcessProperty: "error" } });
+const EpochMs$2 = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0));
 const Opaque256 = Schema.String.check(Schema.isMinLength(43), Schema.isMaxLength(43), Schema.isPattern(/^[A-Za-z0-9_-]{43}$/));
-const AccountId$1 = Schema.String.check(Schema.isPattern(/^acct_[A-Za-z0-9_-]{22,43}$/), Schema.isMaxLength(48));
+const HubAccountId = Schema.String.check(Schema.isPattern(/^acct_[A-Za-z0-9_-]{22,43}$/), Schema.isMaxLength(48));
 const SessionId$1 = Schema.String.check(Schema.isPattern(/^sess_[A-Za-z0-9_-]{22,43}$/), Schema.isMaxLength(48));
 const BoundedDisplayName = Schema.Trim.check(Schema.isNonEmpty(), Schema.isMaxLength(200));
 const BoundedSpaceDisplayName = Schema.Trim.check(Schema.isNonEmpty(), Schema.isMaxLength(100));
 const BoundedPassword = Schema.String.check(Schema.isMinLength(12), Schema.isMaxLength(256));
 const AntiBotAssertion = Schema.String.check(Schema.isNonEmpty(), Schema.isMaxLength(HOSTED_IDENTITY_MAX_ANTI_BOT_ASSERTION_CHARS));
-const IdempotencyKey = Opaque256.pipe(Schema.brand("HostedIdentityIdempotencyKey"));
+const IdempotencyKey$1 = Opaque256.pipe(Schema.brand("HostedIdentityIdempotencyKey"));
 const SignupAttemptSecret = Opaque256.pipe(Schema.brand("PublicSignupAttemptSecret"));
 const SignupActivationSecret = Opaque256.pipe(Schema.brand("PublicSignupActivationSecret"));
 const PasswordLoginAttemptSecret = Opaque256.pipe(Schema.brand("PasswordLoginAttemptSecret"));
@@ -748,10 +812,10 @@ const MailToken = Opaque256.pipe(Schema.brand("HostedIdentityMailToken"));
 const EmailCode = Schema.String.check(Schema.isPattern(/^[0-9]{6}$/));
 const TotpCode = Schema.String.check(Schema.isPattern(/^[0-9]{6}$/));
 const JsonObject = Schema.Unknown.check(Schema.makeFilter((value) => typeof value === "object" && value !== null && !Array.isArray(value) ? void 0 : "value must be an object"));
-const strictTimed = (fields) => strict$3(Schema.Struct({
+const strictTimed = (fields) => strict$4(Schema.Struct({
 	...fields,
-	issuedAt: EpochMs$1,
-	expiresAt: EpochMs$1
+	issuedAt: EpochMs$2,
+	expiresAt: EpochMs$2
 }).check(Schema.makeFilter((value) => {
 	const timed = value;
 	return timed.expiresAt > timed.issuedAt ? void 0 : "expiresAt must be after issuedAt";
@@ -769,14 +833,14 @@ const HubNormalizedEmail = Schema.String.check(Schema.isMinLength(3), Schema.isM
 const HubLoginIdentifier = Schema.Union([HubUsername, HubNormalizedEmail]).pipe(Schema.brand("HubLoginIdentifier"));
 const PublicSignupTurnstileSiteKey = Schema.String.check(Schema.isMinLength(10), Schema.isMaxLength(128), Schema.isPattern(/^[A-Za-z0-9_-]+$/));
 Schema.Union([
-	strict$3(Schema.Struct({ status: Schema.Literal("disabled") })),
-	strict$3(Schema.Struct({
+	strict$4(Schema.Struct({ status: Schema.Literal("disabled") })),
+	strict$4(Schema.Struct({
 		status: Schema.Literal("enabled"),
-		antiBot: strict$3(Schema.Struct({ provider: Schema.Literal("bypass") }))
+		antiBot: strict$4(Schema.Struct({ provider: Schema.Literal("bypass") }))
 	})),
-	strict$3(Schema.Struct({
+	strict$4(Schema.Struct({
 		status: Schema.Literal("enabled"),
-		antiBot: strict$3(Schema.Struct({
+		antiBot: strict$4(Schema.Struct({
 			provider: Schema.Literal("turnstile"),
 			siteKey: PublicSignupTurnstileSiteKey
 		}))
@@ -784,21 +848,21 @@ Schema.Union([
 ]);
 const ExternalIdentityProvider = Schema.Literal("github");
 const ExternalIdentityLogin = Schema.Trim.check(Schema.isNonEmpty(), Schema.isMaxLength(100), Schema.isPattern(/^[A-Za-z0-9-]+$/));
-const ExternalIdentitySummary = strict$3(Schema.Struct({
+const ExternalIdentitySummary = strict$4(Schema.Struct({
 	provider: ExternalIdentityProvider,
 	login: ExternalIdentityLogin,
 	displayName: Schema.NullOr(BoundedDisplayName),
-	connectedAt: EpochMs$1,
-	lastUsedAt: Schema.NullOr(EpochMs$1)
+	connectedAt: EpochMs$2,
+	lastUsedAt: Schema.NullOr(EpochMs$2)
 }).check(Schema.makeFilter((value) => value.lastUsedAt === null || value.lastUsedAt >= value.connectedAt ? void 0 : "lastUsedAt must not precede connectedAt")));
-const ExternalIdentityProviderPolicy = strict$3(Schema.Struct({
+const ExternalIdentityProviderPolicy = strict$4(Schema.Struct({
 	provider: ExternalIdentityProvider,
 	login: Schema.Literal(true),
 	signup: Schema.Boolean,
 	link: Schema.Literal(true)
 }));
 const ExternalIdentityProviders = Schema.Array(ExternalIdentityProviderPolicy).check(Schema.isMaxLength(1), Schema.makeFilter((providers) => new Set(providers.map((provider) => provider.provider)).size === providers.length ? void 0 : "external identity providers must be unique"));
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	version: Schema.Literal(1),
 	providers: ExternalIdentityProviders
 }));
@@ -818,14 +882,14 @@ const GitHubAuthorizationUrl = Schema.String.check(Schema.isNonEmpty(), Schema.i
 		return "authorization URL must be absolute";
 	}
 }));
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	provider: ExternalIdentityProvider,
 	intent: Schema.Literals(["authenticate", "link"]),
 	returnTo: Schema.optionalKey(ExternalIdentityReturnPath)
 }));
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	authorizationUrl: GitHubAuthorizationUrl,
-	expiresAt: EpochMs$1
+	expiresAt: EpochMs$2
 }));
 const ExternalIdentityPendingErrorCode = Schema.Literals([
 	"external_provider_unavailable",
@@ -838,72 +902,72 @@ const ExternalIdentityPendingErrorCode = Schema.Literals([
 	"username_unavailable"
 ]);
 Schema.Union([
-	strict$3(Schema.Struct({ status: Schema.Literal("none") })),
-	strict$3(Schema.Struct({
+	strict$4(Schema.Struct({ status: Schema.Literal("none") })),
+	strict$4(Schema.Struct({
 		status: Schema.Literal("signup"),
 		provider: ExternalIdentityProvider,
 		suggestedUsername: Schema.NullOr(HubUsername),
 		displayName: Schema.NullOr(BoundedDisplayName),
-		expiresAt: EpochMs$1
+		expiresAt: EpochMs$2
 	})),
-	strict$3(Schema.Struct({
+	strict$4(Schema.Struct({
 		status: Schema.Literal("link"),
 		externalIdentity: ExternalIdentitySummary,
-		expiresAt: EpochMs$1
+		expiresAt: EpochMs$2
 	})),
-	strict$3(Schema.Struct({
+	strict$4(Schema.Struct({
 		status: Schema.Literal("error"),
 		provider: ExternalIdentityProvider,
 		code: ExternalIdentityPendingErrorCode
 	}))
 ]);
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	provider: ExternalIdentityProvider,
 	username: HubUsername,
 	antiBotAssertion: AntiBotAssertion,
-	idempotencyKey: IdempotencyKey
+	idempotencyKey: IdempotencyKey$1
 }));
-strict$3(Schema.Struct({ totpCode: Schema.optionalKey(TotpCode) }));
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({ totpCode: Schema.optionalKey(TotpCode) }));
+strict$4(Schema.Struct({
 	status: Schema.Literal("connected"),
 	externalIdentity: ExternalIdentitySummary
 }));
-strict$3(Schema.Struct({ totpCode: Schema.optionalKey(TotpCode) }));
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({ totpCode: Schema.optionalKey(TotpCode) }));
+strict$4(Schema.Struct({
 	status: Schema.Literal("disconnected"),
 	signedOut: Schema.Boolean
 }));
 const ExternalIdentitySummaries = Schema.Array(ExternalIdentitySummary).check(Schema.isMaxLength(1), Schema.makeFilter((identities) => new Set(identities.map((identity) => identity.provider)).size === identities.length ? void 0 : "external identity providers must be unique"));
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	passwordConfigured: Schema.Boolean,
 	totpEnrolled: Schema.Boolean,
 	emailDeliveryConfigured: Schema.Boolean,
-	email: Schema.NullOr(strict$3(Schema.Struct({
+	email: Schema.NullOr(strict$4(Schema.Struct({
 		address: HubNormalizedEmail,
 		verified: Schema.Boolean
 	}))),
 	externalIdentities: ExternalIdentitySummaries
 }));
-const HubActiveSpaceSummary = strict$3(Schema.Struct({
+const HubActiveSpaceSummary = strict$4(Schema.Struct({
 	id: HubSpaceId,
 	kind: HubSpaceKind,
 	displayName: BoundedSpaceDisplayName,
 	role: HubSpaceRole
 }));
-const HubPublicAccount = strict$3(Schema.Struct({
-	id: AccountId$1,
+const HubPublicAccount = strict$4(Schema.Struct({
+	id: HubAccountId,
 	username: HubUsername,
 	displayName: BoundedDisplayName,
-	createdAt: EpochMs$1,
+	createdAt: EpochMs$2,
 	disabledAt: Schema.Null
 }));
-const HubPublicBrowserSession = strict$3(Schema.Struct({
+const HubPublicBrowserSession = strict$4(Schema.Struct({
 	id: SessionId$1,
-	accountId: AccountId$1,
+	accountId: HubAccountId,
 	activeSpaceId: HubSpaceId,
-	createdAt: EpochMs$1,
-	expiresAt: EpochMs$1,
-	lastSeenAt: EpochMs$1,
+	createdAt: EpochMs$2,
+	expiresAt: EpochMs$2,
+	lastSeenAt: EpochMs$2,
 	revokedAt: Schema.Null,
 	revocationReasonCode: Schema.Null
 }).check(Schema.makeFilter((session) => session.expiresAt > session.createdAt && session.lastSeenAt >= session.createdAt && session.lastSeenAt <= session.expiresAt ? void 0 : "browser session timestamps are inconsistent")));
@@ -921,11 +985,11 @@ function hubSessionIdentityConsistency(value) {
 	const matches = value.spaces.filter((space) => space.id === value.activeSpace.id);
 	return matches.length === 1 && matches[0]?.role === value.activeSpace.role ? void 0 : "active space must appear exactly once in spaces";
 }
-const HubBrowserSessionResponse = strict$3(Schema.Struct({
+const HubBrowserSessionResponse = strict$4(Schema.Struct({
 	...HubSessionIdentityFields,
 	csrfToken: Schema.String.check(Schema.isNonEmpty(), Schema.isMaxLength(4096))
 }).check(Schema.makeFilter(hubSessionIdentityConsistency)));
-const HubSessionIdentity = strict$3(Schema.Struct(HubSessionIdentityFields).check(Schema.makeFilter(hubSessionIdentityConsistency)));
+const HubSessionIdentity = strict$4(Schema.Struct(HubSessionIdentityFields).check(Schema.makeFilter(hubSessionIdentityConsistency)));
 const NativeIdentityAttemptId = Schema.String.check(Schema.isPattern(/^nident_[A-Za-z0-9_-]{22,43}$/), Schema.isMaxLength(50)).pipe(Schema.brand("NativeIdentityAttemptId"));
 const NativeIdentityLoginAttemptId = Schema.String.check(Schema.isPattern(/^nlogin_[A-Za-z0-9_-]{22,43}$/), Schema.isMaxLength(50)).pipe(Schema.brand("NativeIdentityLoginAttemptId"));
 const NativeIdentityResetAttemptId = Schema.String.check(Schema.isPattern(/^nreset_[A-Za-z0-9_-]{22,43}$/), Schema.isMaxLength(50)).pipe(Schema.brand("NativeIdentityResetAttemptId"));
@@ -934,7 +998,7 @@ const NativeIdentityTimedAttempt = {
 	attemptSecret: NativeIdentityAttemptSecret,
 	resendAfterMs: Schema.Int.check(Schema.isGreaterThanOrEqualTo(0), Schema.isLessThanOrEqualTo(9e5))
 };
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	email: HubNormalizedEmail,
 	antiBotAssertion: AntiBotAssertion
 }));
@@ -942,14 +1006,14 @@ strictTimed({
 	status: Schema.Literal("accepted"),
 	...NativeIdentityTimedAttempt
 });
-const NativeIdentityMailboxProof = Schema.Union([strict$3(Schema.Struct({
+const NativeIdentityMailboxProof = Schema.Union([strict$4(Schema.Struct({
 	kind: Schema.Literal("link_token"),
 	token: MailToken
-})), strict$3(Schema.Struct({
+})), strict$4(Schema.Struct({
 	kind: Schema.Literal("email_code"),
 	code: EmailCode
 }))]);
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	attemptId: NativeIdentityAttemptId,
 	attemptSecret: NativeIdentityAttemptSecret,
 	proof: NativeIdentityMailboxProof
@@ -967,41 +1031,41 @@ const NativeIdentityActivation = {
 	attemptId: NativeIdentityAttemptId,
 	activationSecret: NativeIdentityActivationSecret
 };
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	...NativeIdentityActivation,
 	username: HubUsername
 }));
-strict$3(Schema.Struct({ status: Schema.Literal("claimed") }));
-strict$3(Schema.Struct(NativeIdentityActivation));
-strict$3(Schema.Struct({ options: JsonObject }));
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({ status: Schema.Literal("claimed") }));
+strict$4(Schema.Struct(NativeIdentityActivation));
+strict$4(Schema.Struct({ options: JsonObject }));
+strict$4(Schema.Struct({
 	...NativeIdentityActivation,
 	response: JsonObject,
-	idempotencyKey: IdempotencyKey
+	idempotencyKey: IdempotencyKey$1
 }));
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	...NativeIdentityActivation,
 	password: BoundedPassword,
-	idempotencyKey: IdempotencyKey
+	idempotencyKey: IdempotencyKey$1
 }));
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	status: Schema.Literal("complete"),
 	identity: HubSessionIdentity,
 	token: NativeIdentitySessionToken
 }));
 const NativeIdentityRecoveryCodes = Schema.Array(Schema.String.check(Schema.isNonEmpty(), Schema.isMaxLength(512))).check(Schema.isMinLength(1), Schema.isMaxLength(256));
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	status: Schema.Literal("complete"),
 	identity: HubSessionIdentity,
 	token: NativeIdentitySessionToken,
 	recoveryCodes: NativeIdentityRecoveryCodes
 }));
-Schema.Union([strict$3(Schema.Struct({
+Schema.Union([strict$4(Schema.Struct({
 	kind: Schema.Literal("username"),
 	username: HubUsername,
 	password: BoundedPassword,
 	antiBotAssertion: Schema.optionalKey(AntiBotAssertion)
-})), strict$3(Schema.Struct({
+})), strict$4(Schema.Struct({
 	kind: Schema.Literal("verified_email"),
 	...NativeIdentityActivation,
 	password: BoundedPassword
@@ -1012,22 +1076,22 @@ strictTimed({
 	attemptSecret: NativeIdentityAttemptSecret,
 	factor: Schema.Literals(["totp", "email_code"])
 });
-Schema.Union([strict$3(Schema.Struct({
+Schema.Union([strict$4(Schema.Struct({
 	attemptId: NativeIdentityLoginAttemptId,
 	attemptSecret: NativeIdentityAttemptSecret,
 	factor: Schema.Literal("totp"),
 	code: TotpCode
-})), strict$3(Schema.Struct({
+})), strict$4(Schema.Struct({
 	attemptId: NativeIdentityLoginAttemptId,
 	attemptSecret: NativeIdentityAttemptSecret,
 	factor: Schema.Literal("email_code"),
 	code: EmailCode
 }))]);
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	code: Schema.String.check(Schema.isNonEmpty(), Schema.isMaxLength(512)),
-	idempotencyKey: IdempotencyKey
+	idempotencyKey: IdempotencyKey$1
 }));
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	identifier: HubLoginIdentifier,
 	antiBotAssertion: Schema.optionalKey(AntiBotAssertion)
 }));
@@ -1037,7 +1101,7 @@ strictTimed({
 	attemptSecret: NativeIdentityAttemptSecret,
 	resendAfterMs: Schema.Int.check(Schema.isGreaterThanOrEqualTo(0), Schema.isLessThanOrEqualTo(9e5))
 });
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	attemptId: NativeIdentityResetAttemptId,
 	attemptSecret: NativeIdentityAttemptSecret,
 	proof: NativeIdentityMailboxProof
@@ -1048,17 +1112,17 @@ strictTimed({
 	resetSecret: NativeIdentityResetSecret,
 	requiresTotp: Schema.Boolean
 });
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	attemptId: NativeIdentityResetAttemptId,
 	resetSecret: NativeIdentityResetSecret,
 	password: BoundedPassword,
-	factor: Schema.Union([strict$3(Schema.Struct({ kind: Schema.Literal("none") })), strict$3(Schema.Struct({
+	factor: Schema.Union([strict$4(Schema.Struct({ kind: Schema.Literal("none") })), strict$4(Schema.Struct({
 		kind: Schema.Literal("totp"),
 		code: TotpCode
 	}))])
 }));
-strict$3(Schema.Struct({ status: Schema.Literal("complete") }));
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({ status: Schema.Literal("complete") }));
+strict$4(Schema.Struct({
 	attemptId: Schema.Union([
 		NativeIdentityAttemptId,
 		NativeIdentityLoginAttemptId,
@@ -1066,9 +1130,9 @@ strict$3(Schema.Struct({
 	]),
 	attemptSecret: Schema.Union([NativeIdentityAttemptSecret, NativeIdentityActivationSecret])
 }));
-strict$3(Schema.Struct({ status: Schema.Literal("cancelled") }));
+strict$4(Schema.Struct({ status: Schema.Literal("cancelled") }));
 const PublicSignupAttemptId = Schema.String.check(Schema.isPattern(/^signup_[A-Za-z0-9_-]{22,43}$/), Schema.isMaxLength(50)).pipe(Schema.brand("PublicSignupAttemptId"));
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	username: HubUsername,
 	email: HubNormalizedEmail,
 	antiBotAssertion: AntiBotAssertion,
@@ -1080,14 +1144,14 @@ strictTimed({
 	attemptSecret: SignupAttemptSecret,
 	resendAfterMs: Schema.Int.check(Schema.isGreaterThanOrEqualTo(0), Schema.isLessThanOrEqualTo(9e5))
 });
-const PublicSignupMailboxProof = Schema.Union([strict$3(Schema.Struct({
+const PublicSignupMailboxProof = Schema.Union([strict$4(Schema.Struct({
 	kind: Schema.Literal("link_token"),
 	token: MailToken
-})), strict$3(Schema.Struct({
+})), strict$4(Schema.Struct({
 	kind: Schema.Literal("email_code"),
 	code: EmailCode
 }))]);
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	attemptId: PublicSignupAttemptId,
 	attemptSecret: SignupAttemptSecret,
 	proof: PublicSignupMailboxProof
@@ -1101,26 +1165,26 @@ const PublicSignupActivation = {
 	attemptId: PublicSignupAttemptId,
 	activationSecret: SignupActivationSecret
 };
-strict$3(Schema.Struct(PublicSignupActivation));
-strict$3(Schema.Struct({ options: JsonObject }));
-strict$3(Schema.Struct({
+strict$4(Schema.Struct(PublicSignupActivation));
+strict$4(Schema.Struct({ options: JsonObject }));
+strict$4(Schema.Struct({
 	...PublicSignupActivation,
 	response: JsonObject,
-	idempotencyKey: IdempotencyKey
+	idempotencyKey: IdempotencyKey$1
 }));
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	...PublicSignupActivation,
 	password: BoundedPassword,
-	idempotencyKey: IdempotencyKey
+	idempotencyKey: IdempotencyKey$1
 }));
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	status: Schema.Literal("complete"),
 	identity: HubBrowserSessionResponse,
 	recoveryCodes: Schema.Array(Schema.String.check(Schema.isNonEmpty(), Schema.isMaxLength(512))).check(Schema.isMinLength(1), Schema.isMaxLength(256))
 }));
 const PasswordLoginAttemptId = Schema.String.check(Schema.isPattern(/^login_[A-Za-z0-9_-]{22,43}$/), Schema.isMaxLength(49)).pipe(Schema.brand("PasswordLoginAttemptId"));
 const PasswordLoginFactor = Schema.Literals(["totp", "email_code"]);
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	identifier: HubLoginIdentifier,
 	password: BoundedPassword,
 	antiBotAssertion: Schema.optional(AntiBotAssertion)
@@ -1131,43 +1195,43 @@ strictTimed({
 	attemptSecret: PasswordLoginAttemptSecret,
 	factor: PasswordLoginFactor
 });
-Schema.Union([strict$3(Schema.Struct({
+Schema.Union([strict$4(Schema.Struct({
 	attemptId: PasswordLoginAttemptId,
 	attemptSecret: PasswordLoginAttemptSecret,
 	factor: Schema.Literal("totp"),
 	code: TotpCode
-})), strict$3(Schema.Struct({
+})), strict$4(Schema.Struct({
 	attemptId: PasswordLoginAttemptId,
 	attemptSecret: PasswordLoginAttemptSecret,
 	factor: Schema.Literal("email_code"),
 	code: EmailCode
 }))]);
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	identifier: HubLoginIdentifier,
 	antiBotAssertion: Schema.optional(AntiBotAssertion)
 }));
-strict$3(Schema.Struct({ status: Schema.Literal("accepted") }));
+strict$4(Schema.Struct({ status: Schema.Literal("accepted") }));
 const PasswordResetAttemptId = Schema.String.check(Schema.isPattern(/^reset_[A-Za-z0-9_-]{22,43}$/), Schema.isMaxLength(49)).pipe(Schema.brand("PasswordResetAttemptId"));
-strict$3(Schema.Struct({ token: MailToken }));
+strict$4(Schema.Struct({ token: MailToken }));
 strictTimed({
 	status: Schema.Literal("verified"),
 	attemptId: PasswordResetAttemptId,
 	attemptSecret: PasswordResetAttemptSecret,
 	requiresTotp: Schema.Boolean
 });
-const PasswordResetFactor = Schema.Union([strict$3(Schema.Struct({ kind: Schema.Literal("none") })), strict$3(Schema.Struct({
+const PasswordResetFactor = Schema.Union([strict$4(Schema.Struct({ kind: Schema.Literal("none") })), strict$4(Schema.Struct({
 	kind: Schema.Literal("totp"),
 	code: TotpCode
 }))]);
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	attemptId: PasswordResetAttemptId,
 	attemptSecret: PasswordResetAttemptSecret,
 	password: BoundedPassword,
 	factor: PasswordResetFactor
 }));
-strict$3(Schema.Struct({ status: Schema.Literal("complete") }));
-strict$3(Schema.Struct({ spaceId: HubSpaceId }));
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({ status: Schema.Literal("complete") }));
+strict$4(Schema.Struct({ spaceId: HubSpaceId }));
+strict$4(Schema.Struct({
 	activeSpace: HubActiveSpaceSummary,
 	spaces: HubSpaces
 }).check(Schema.makeFilter((value) => {
@@ -1179,7 +1243,7 @@ const DesktopInstallationId = Schema.String.check(Schema.isPattern(/^install_[A-
 const NativeNodeClaimId = Schema.String.check(Schema.isPattern(/^nclaim_[A-Za-z0-9_-]{22,43}$/), Schema.isMaxLength(50)).pipe(Schema.brand("NativeNodeClaimId"));
 const NativeNodeClaimEnvironmentId = Schema.String.check(Schema.isPattern(/^env_[A-Za-z0-9_-]{22}$/), Schema.isMaxLength(26)).pipe(Schema.brand("NativeNodeClaimEnvironmentId"));
 const NativeNodeClaimPublicKey = Schema.String.check(Schema.isMinLength(43), Schema.isMaxLength(43), Schema.isPattern(/^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$/)).pipe(Schema.brand("NativeNodeClaimPublicKey"));
-const NativeNodeClaimMetadata = strict$3(Schema.Struct({
+const NativeNodeClaimMetadata = strict$4(Schema.Struct({
 	environmentId: NativeNodeClaimEnvironmentId,
 	label: Schema.Trim.check(Schema.isNonEmpty(), Schema.isMaxLength(100)),
 	platformOs: Schema.Literals([
@@ -1198,7 +1262,7 @@ const NativeNodeClaimMetadata = strict$3(Schema.Struct({
 	publicKey: NativeNodeClaimPublicKey,
 	fingerprint: HubNodePublicKeyFingerprint
 }));
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	installationId: DesktopInstallationId,
 	node: NativeNodeClaimMetadata
 }));
@@ -1207,7 +1271,7 @@ const NativeNodeClaimStartResponse = strictTimed({
 	transcriptVersion: Schema.Literal(1),
 	claimId: NativeNodeClaimId,
 	challenge: Opaque256,
-	accountId: AccountId$1,
+	accountId: HubAccountId,
 	spaceId: HubSpaceId,
 	sessionId: SessionId$1,
 	dpopKeyThumbprint: Opaque256,
@@ -1215,16 +1279,16 @@ const NativeNodeClaimStartResponse = strictTimed({
 	environmentId: NativeNodeClaimEnvironmentId,
 	nodeFingerprint: HubNodePublicKeyFingerprint
 });
-strict$3(Schema.Struct({
+strict$4(Schema.Struct({
 	claimId: NativeNodeClaimId,
 	challenge: Opaque256,
 	signature: Schema.String.check(Schema.isMinLength(86), Schema.isMaxLength(86), Schema.isPattern(/^[A-Za-z0-9_-]{85}[AQgw]$/)),
-	idempotencyKey: IdempotencyKey
+	idempotencyKey: IdempotencyKey$1
 }));
-const NativeNodeClaimFinishResponse = strict$3(Schema.Struct({
+const NativeNodeClaimFinishResponse = strict$4(Schema.Struct({
 	status: Schema.Literal("claimed"),
 	disposition: Schema.Literals(["created", "reconnected"]),
-	node: strict$3(Schema.Struct({
+	node: strict$4(Schema.Struct({
 		id: RelayNodeId,
 		activeKeyId: Schema.String.check(Schema.isPattern(/^nkey_[A-Za-z0-9_-]{22}$/), Schema.isMaxLength(27)),
 		environmentId: NativeNodeClaimEnvironmentId,
@@ -1233,10 +1297,10 @@ const NativeNodeClaimFinishResponse = strict$3(Schema.Struct({
 		effectiveRole: Schema.Literal("owner")
 	}))
 }));
-Schema.Union([strict$3(Schema.Struct({
+Schema.Union([strict$4(Schema.Struct({
 	error: Schema.Literal("node_claim_rejected"),
 	retryable: Schema.Literal(false)
-})), strict$3(Schema.Struct({
+})), strict$4(Schema.Struct({
 	error: Schema.Literal("node_claim_unavailable"),
 	retryable: Schema.Literal(true),
 	retryAfterMs: Schema.optional(Schema.Int.check(Schema.isGreaterThanOrEqualTo(0), Schema.isLessThanOrEqualTo(3e5)))
@@ -1248,7 +1312,7 @@ const NATIVE_HANDOFF_CALLBACK_URIS = [
 	"ryco://hosted/complete"
 ];
 const NATIVE_HANDOFF_MAX_URL_CHARS = 2048;
-const strict$2 = (schema) => schema.annotate({ parseOptions: { onExcessProperty: "error" } });
+const strict$3 = (schema) => schema.annotate({ parseOptions: { onExcessProperty: "error" } });
 const Base64Url256$1 = Schema.String.check(Schema.isMinLength(43), Schema.isMaxLength(43), Schema.isPattern(/^[A-Za-z0-9_-]{43}$/));
 const isBase64Url256 = Schema.is(Base64Url256$1);
 const NativeHandoffId = Base64Url256$1.pipe(Schema.brand("NativeHandoffId"));
@@ -1257,7 +1321,7 @@ const NativeHandoffCode = Base64Url256$1.pipe(Schema.brand("NativeHandoffCode"))
 const NativeHandoffCodeVerifier = Base64Url256$1.pipe(Schema.brand("NativeHandoffCodeVerifier"));
 const NativeHandoffCodeChallenge = Base64Url256$1.pipe(Schema.brand("NativeHandoffCodeChallenge"));
 const NativeHandoffCallbackUri = Schema.Literals(NATIVE_HANDOFF_CALLBACK_URIS);
-const EpochMs = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0));
+const EpochMs$1 = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0));
 const BoundedDeviceLabel = Schema.Trim.check(Schema.isNonEmpty(), Schema.isMaxLength(64));
 const RelyingPartyId = Schema.String.check(Schema.isNonEmpty(), Schema.isMaxLength(253), Schema.isPattern(/^(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)(?:\.(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?))*$/i));
 const DisplayName = Schema.Trim.check(Schema.isNonEmpty(), Schema.isMaxLength(64));
@@ -1269,28 +1333,28 @@ const NativeIdentityLoginMethod = Schema.Literals([
 	"recovery_code"
 ]);
 const uniqueNonEmpty = (item, maximum) => Schema.Array(item).check(Schema.isMinLength(1), Schema.isMaxLength(maximum), Schema.makeFilter((values) => new Set(values).size === values.length ? void 0 : "values must be unique"));
-const NativeIdentityAntiBot = Schema.Union([strict$2(Schema.Struct({ provider: Schema.Literal("bypass") })), strict$2(Schema.Struct({
+const NativeIdentityAntiBot = Schema.Union([strict$3(Schema.Struct({ provider: Schema.Literal("bypass") })), strict$3(Schema.Struct({
 	provider: Schema.Literal("turnstile"),
 	siteKey: NativeIdentityTurnstileSiteKey
 }))]);
-const NativeIdentityCapability = strict$2(Schema.Struct({
+const NativeIdentityCapability = strict$3(Schema.Struct({
 	version: Schema.Literal(2),
-	email: strict$2(Schema.Struct({
+	email: strict$3(Schema.Struct({
 		verification: Schema.Literal("required"),
 		antiBot: NativeIdentityAntiBot
 	})),
-	signup: Schema.Union([strict$2(Schema.Struct({ status: Schema.Literal("disabled") })), strict$2(Schema.Struct({
+	signup: Schema.Union([strict$3(Schema.Struct({ status: Schema.Literal("disabled") })), strict$3(Schema.Struct({
 		status: Schema.Literal("enabled"),
 		primaryCredentials: uniqueNonEmpty(NativeIdentityPrimaryCredential, 2)
 	}))]),
-	login: strict$2(Schema.Struct({
+	login: strict$3(Schema.Struct({
 		methods: uniqueNonEmpty(NativeIdentityLoginMethod, 3),
-		passwordSecondFactor: strict$2(Schema.Struct({
+		passwordSecondFactor: strict$3(Schema.Struct({
 			totp: Schema.Literal("when_enrolled"),
 			fallback: Schema.Literal("verified_email_code")
 		}))
 	})),
-	recovery: strict$2(Schema.Struct({
+	recovery: strict$3(Schema.Struct({
 		recoveryCode: Schema.Boolean,
 		passwordReset: Schema.Boolean
 	}))
@@ -1339,29 +1403,29 @@ function validCallbackResponse(value, outcome) {
 }
 const ApprovedCallbackUrl = Schema.String.check(Schema.makeFilter((value) => validCallbackResponse(value, "approved") ? void 0 : "invalid approved callback URL"));
 const CancelledCallbackUrl = Schema.String.check(Schema.makeFilter((value) => validCallbackResponse(value, "cancelled") ? void 0 : "invalid cancelled callback URL"));
-strict$2(Schema.Struct({
+strict$3(Schema.Struct({
 	service: Schema.Literal("ryco-hub"),
 	protocolVersion: Schema.Literal(1),
-	nativeHandoff: strict$2(Schema.Struct({
+	nativeHandoff: strict$3(Schema.Struct({
 		mode: Schema.Literal(NATIVE_HANDOFF_MODE),
 		version: Schema.Literal(1)
 	})),
-	relyingParty: strict$2(Schema.Struct({
+	relyingParty: strict$3(Schema.Struct({
 		id: RelyingPartyId,
 		displayName: DisplayName
 	})),
 	nativeIdentity: Schema.optionalKey(NativeIdentityCapability)
 }));
-const NativeHandoffSignInPurpose = strict$2(Schema.Struct({
+const NativeHandoffSignInPurpose = strict$3(Schema.Struct({
 	kind: Schema.Literal("sign_in"),
 	providerHint: Schema.optionalKey(ExternalIdentityProvider)
 }));
-const NativeHandoffConnectExternalIdentityPurpose = strict$2(Schema.Struct({
+const NativeHandoffConnectExternalIdentityPurpose = strict$3(Schema.Struct({
 	kind: Schema.Literal("connect_external_identity"),
 	provider: ExternalIdentityProvider
 }));
 const NativeHandoffPurpose = Schema.Union([NativeHandoffSignInPurpose, NativeHandoffConnectExternalIdentityPurpose]);
-strict$2(Schema.Struct({
+strict$3(Schema.Struct({
 	redirectUri: NativeHandoffCallbackUri,
 	codeChallenge: NativeHandoffCodeChallenge,
 	codeChallengeMethod: Schema.Literal("S256"),
@@ -1369,25 +1433,25 @@ strict$2(Schema.Struct({
 	deviceLabel: BoundedDeviceLabel,
 	purpose: Schema.optionalKey(NativeHandoffPurpose)
 }));
-strict$2(Schema.Struct({
+strict$3(Schema.Struct({
 	handoffId: NativeHandoffId,
 	authorizationUrl: AuthorizationUrl,
-	expiresAt: EpochMs
+	expiresAt: EpochMs$1
 }));
-strict$2(Schema.Struct({
+strict$3(Schema.Struct({
 	status: Schema.Literal("pending"),
 	deviceLabel: BoundedDeviceLabel,
-	expiresAt: EpochMs,
+	expiresAt: EpochMs$1,
 	providerHint: Schema.optionalKey(ExternalIdentityProvider)
 }));
-strict$2(Schema.Struct({ redirectUri: ApprovedCallbackUrl }));
-strict$2(Schema.Struct({ redirectUri: CancelledCallbackUrl }));
-strict$2(Schema.Struct({
+strict$3(Schema.Struct({ redirectUri: ApprovedCallbackUrl }));
+strict$3(Schema.Struct({ redirectUri: CancelledCallbackUrl }));
+strict$3(Schema.Struct({
 	handoffId: NativeHandoffId,
 	code: NativeHandoffCode,
 	codeVerifier: NativeHandoffCodeVerifier
 }));
-strict$2(Schema.Struct({
+strict$3(Schema.Struct({
 	handoffId: NativeHandoffId,
 	code: NativeHandoffCode,
 	codeVerifier: NativeHandoffCodeVerifier,
@@ -1398,7 +1462,7 @@ const AccountId = Schema.String.check(Schema.isPattern(/^acct_[A-Za-z0-9_-]{22,4
 const SessionId = Schema.String.check(Schema.isPattern(/^sess_[A-Za-z0-9_-]{22,43}$/), Schema.isMaxLength(48));
 const SessionFamilyId = Schema.String.check(Schema.isPattern(/^sfam_[A-Za-z0-9_-]{22,43}$/), Schema.isMaxLength(48));
 const NullableSessionLabel = Schema.NullOr(Schema.Trim.check(Schema.isNonEmpty(), Schema.isMaxLength(64)));
-const NativeHandoffAccount = strict$2(Schema.Struct({
+const NativeHandoffAccount = strict$3(Schema.Struct({
 	id: AccountId,
 	displayName: Schema.Trim.check(Schema.isNonEmpty(), Schema.isMaxLength(200)),
 	role: Schema.Literals([
@@ -1406,32 +1470,241 @@ const NativeHandoffAccount = strict$2(Schema.Struct({
 		"operator",
 		"owner"
 	]),
-	createdAt: EpochMs,
+	createdAt: EpochMs$1,
 	disabledAt: Schema.Null
 }));
-const NativeHandoffSession = strict$2(Schema.Struct({
+const NativeHandoffSession = strict$3(Schema.Struct({
 	id: SessionId,
 	accountId: AccountId,
 	familyId: SessionFamilyId,
 	clientLabel: NullableSessionLabel,
 	kind: Schema.Literal("native"),
-	createdAt: EpochMs,
-	expiresAt: EpochMs,
-	lastSeenAt: EpochMs,
+	createdAt: EpochMs$1,
+	expiresAt: EpochMs$1,
+	lastSeenAt: EpochMs$1,
 	replacedBySessionId: Schema.Null,
 	revokedAt: Schema.Null,
 	revocationReasonCode: Schema.Null
 }).check(Schema.makeFilter((session) => session.expiresAt > session.createdAt && session.lastSeenAt >= session.createdAt && session.lastSeenAt <= session.expiresAt ? void 0 : "native session timestamps are inconsistent")));
-strict$2(Schema.Struct({
+strict$3(Schema.Struct({
 	account: NativeHandoffAccount,
 	session: NativeHandoffSession,
 	token: Base64Url256$1
 }).check(Schema.makeFilter((value) => value.session.accountId === value.account.id ? void 0 : "native session account does not match")));
-strict$2(Schema.Struct({
+strict$3(Schema.Struct({
 	status: Schema.Literal("connected"),
 	purpose: NativeHandoffConnectExternalIdentityPurpose,
 	externalIdentity: ExternalIdentitySummary
 }));
+const NATIVE_E2EE_MAX_GRANT_KEYS = 4;
+const HUB_DEVICE_GRANT_MAX_BYTES = 2048;
+const HUB_DEVICE_GRANT_BASE64URL_MAX_CHARS = 2731;
+const CLIENT_PREKEY_CERTIFICATE_BASE64URL_MAX_CHARS = 1459;
+const NODE_E2EE_CAPABILITY_STATEMENT_BASE64URL_MAX_CHARS = 6920;
+const strict$2 = (schema) => schema.annotate({ parseOptions: { onExcessProperty: "error" } });
+const UInt32 = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0), Schema.isLessThanOrEqualTo(4294967295));
+const EpochMs = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0), Schema.isLessThanOrEqualTo(Number.MAX_SAFE_INTEGER));
+const ExactBytes = (length) => Schema.Uint8Array.check(Schema.isMinLength(length), Schema.isMaxLength(length));
+const Base64Url = (minimum, maximum) => Schema.String.check(Schema.isMinLength(minimum), Schema.isMaxLength(maximum), Schema.isPattern(/^[A-Za-z0-9_-]+$/), Schema.makeFilter((value) => value.length % 4 === 1 ? "invalid unpadded base64url length" : void 0));
+const Base64Url32 = Base64Url(43, 43);
+const Base64UrlP256 = Base64Url(87, 87);
+const HubDeviceGrantId = Schema.String.check(Schema.isPattern(/^hgr_[A-Za-z0-9_-]{22,43}$/), Schema.isMaxLength(47)).pipe(Schema.brand("HubDeviceGrantId"));
+const NodeE2eeContinuityId = Schema.String.check(Schema.isPattern(/^nct_[A-Za-z0-9_-]{22}$/), Schema.isMaxLength(26)).pipe(Schema.brand("NodeE2eeContinuityId"));
+const NativeE2eePlatform = Schema.Literals([
+	"darwin",
+	"linux",
+	"windows",
+	"ios",
+	"android"
+]);
+const NativeE2eeReportedKeyBacking = Schema.Literals([
+	"secure-enclave",
+	"strongbox",
+	"tee",
+	"tpm",
+	"hardware-backed",
+	"unavailable"
+]);
+const NativeE2eeUsableKeyBacking = Schema.Literals([
+	"secure-enclave",
+	"strongbox",
+	"tee",
+	"tpm",
+	"hardware-backed"
+]);
+const NativeE2eeEnrollmentStatus = Schema.Literals([
+	"active",
+	"revoked",
+	"superseded"
+]);
+Schema.Literals([
+	"locally-verified",
+	"account-enrolled",
+	"web-unsigned"
+]);
+const NodeE2eeAdmissionPolicy = Schema.Literals([
+	"compatibility",
+	"require-e2ee",
+	"require-native-e2ee",
+	"require-locally-approved-native-e2ee"
+]);
+const HubDeviceGrantEnvelope = Base64Url(1, HUB_DEVICE_GRANT_BASE64URL_MAX_CHARS).pipe(Schema.brand("HubDeviceGrantEnvelope"));
+const E2eeDigestBase64Url = Base64Url32.pipe(Schema.brand("E2eeDigestBase64Url"));
+const BoundedCapabilities = Schema.Array(RelayCapability).check(Schema.isMinLength(1), Schema.isMaxLength(32), Schema.makeFilter((values) => new Set(values).size === values.length ? void 0 : "capabilities must be distinct"));
+const HubOrigin = Schema.String.check(Schema.isNonEmpty(), Schema.isMaxLength(128), Schema.isPattern(/^https?:\/\/[^\s/]+$/));
+const DeviceLabel = Schema.Trim.check(Schema.isNonEmpty(), Schema.isMaxLength(100));
+const AppVersion = Schema.String.check(Schema.isNonEmpty(), Schema.isMaxLength(64));
+const IdempotencyKey = Base64Url32.pipe(Schema.brand("NativeE2eeIdempotencyKey"));
+const ReasonCode = Schema.String.check(Schema.isMinLength(1), Schema.isMaxLength(64), Schema.isPattern(/^[a-z][a-z0-9_]*$/));
+const HubDeviceGrantClaims = strict$2(Schema.Struct({
+	version: Schema.Literal(1),
+	suiteId: Schema.Literal(2),
+	issuerHubOrigin: HubOrigin,
+	keyId: HubGrantVerificationKeyId,
+	grantId: HubDeviceGrantId,
+	accountId: HubAccountId,
+	accountAuthEpoch: E2eeAuthorizationEpoch,
+	enrollmentId: NativeE2eeEnrollmentId,
+	enrollmentRevision: NativeE2eeEnrollmentRevision,
+	deviceAuthEpoch: E2eeAuthorizationEpoch,
+	deviceIdentityAlgorithm: Schema.Literal("p256"),
+	deviceIdentityPublicKey: ExactBytes(65),
+	deviceIdentityFingerprint: ExactBytes(32),
+	deviceAgreementAlgorithm: Schema.Literal("x25519"),
+	deviceAgreementPublicKey: ExactBytes(32),
+	deviceAgreementFingerprint: ExactBytes(32),
+	clientPrekeyCertificateDigest: ExactBytes(32),
+	nodeId: RelayNodeId,
+	nodeIdentityAlgorithm: Schema.Literal("ed25519"),
+	nodeIdentityPublicKey: ExactBytes(32),
+	nodeIdentityFingerprint: ExactBytes(32),
+	nodeAgreementAlgorithm: Schema.Literal("x25519"),
+	nodeAgreementPublicKey: ExactBytes(32),
+	nodeAgreementFingerprint: ExactBytes(32),
+	nodeContinuityId: NodeE2eeContinuityId,
+	nodePolicyGeneration: UInt32,
+	nodeCapabilityStatementDigest: ExactBytes(32),
+	relayTicketId: RelayTicketId,
+	maximumRole: RelayEffectiveRole,
+	capabilities: BoundedCapabilities,
+	issuedAt: EpochMs,
+	notBefore: EpochMs,
+	expiresAt: EpochMs,
+	nonce: ExactBytes(32)
+}).check(Schema.makeFilter((claims) => claims.notBefore <= claims.issuedAt && claims.issuedAt < claims.expiresAt && claims.expiresAt - claims.issuedAt <= 12e4 ? void 0 : "invalid grant validity interval")));
+strict$2(Schema.Struct({
+	protocolVersion: Schema.Literal(1),
+	hubOrigin: HubOrigin,
+	accountId: HubAccountId,
+	enrollmentId: NativeE2eeEnrollmentId,
+	expectedEnrollmentRevision: Schema.optionalKey(UInt32),
+	identityPublicKey: Base64UrlP256,
+	identityFingerprint: Base64Url32,
+	agreementPublicKey: Base64Url32,
+	agreementFingerprint: Base64Url32,
+	clientPrekeyCertificate: Base64Url(1, CLIENT_PREKEY_CERTIFICATE_BASE64URL_MAX_CHARS),
+	clientPrekeyCertificateDigest: Base64Url32,
+	certificateExpiresAt: EpochMs,
+	platform: NativeE2eePlatform,
+	appVersion: AppVersion,
+	reportedKeyBacking: NativeE2eeUsableKeyBacking,
+	deviceLabel: DeviceLabel,
+	requestedMaximumRole: RelayEffectiveRole,
+	requestedCapabilities: BoundedCapabilities,
+	enrollmentNonce: Base64Url32,
+	idempotencyKey: IdempotencyKey
+}));
+const AccountE2eeDeviceSummary = strict$2(Schema.Struct({
+	enrollmentId: NativeE2eeEnrollmentId,
+	enrollmentRevision: NativeE2eeEnrollmentRevision,
+	accountAuthEpoch: E2eeAuthorizationEpoch,
+	deviceAuthEpoch: E2eeAuthorizationEpoch,
+	platform: NativeE2eePlatform,
+	appVersion: AppVersion,
+	reportedKeyBacking: NativeE2eeReportedKeyBacking,
+	deviceLabel: DeviceLabel,
+	identityFingerprint: Base64Url32,
+	agreementFingerprint: Base64Url32,
+	clientPrekeyCertificateDigest: Base64Url32,
+	certificateExpiresAt: EpochMs,
+	status: NativeE2eeEnrollmentStatus,
+	createdAt: EpochMs,
+	updatedAt: EpochMs,
+	lastUsedAt: Schema.NullOr(EpochMs),
+	revokedAt: Schema.NullOr(EpochMs)
+}).check(Schema.makeFilter((device) => {
+	if (device.updatedAt < device.createdAt) return "updatedAt must not precede createdAt";
+	if (device.lastUsedAt !== null && device.lastUsedAt < device.createdAt) return "lastUsedAt must not precede createdAt";
+	if (device.revokedAt !== null && device.revokedAt < device.createdAt) return "revokedAt must not precede createdAt";
+	if (device.status === "active" && device.revokedAt !== null) return "active enrollment cannot have revokedAt";
+	if (device.status !== "active" && device.revokedAt === null) return "inactive enrollment requires revokedAt";
+})));
+strict$2(Schema.Struct({
+	protocolVersion: Schema.Literal(1),
+	enrollment: AccountE2eeDeviceSummary
+}));
+strict$2(Schema.Struct({
+	protocolVersion: Schema.Literal(1),
+	devices: Schema.Array(AccountE2eeDeviceSummary).check(Schema.isMaxLength(128), Schema.makeFilter((devices) => new Set(devices.map((device) => `${device.enrollmentId}:${device.enrollmentRevision}`)).size === devices.length ? void 0 : "device enrollment revisions must be distinct"))
+}));
+strict$2(Schema.Struct({
+	expectedEnrollmentRevision: NativeE2eeEnrollmentRevision,
+	deviceLabel: DeviceLabel
+}));
+strict$2(Schema.Struct({
+	expectedEnrollmentRevision: NativeE2eeEnrollmentRevision,
+	reasonCode: ReasonCode
+}));
+strict$2(Schema.Struct({
+	protocolVersion: Schema.Literal(1),
+	enrollment: AccountE2eeDeviceSummary
+}));
+const HubGrantVerificationKey = strict$2(Schema.Struct({
+	keyId: HubGrantVerificationKeyId,
+	publicKey: Base64Url32,
+	notBefore: EpochMs,
+	notAfter: EpochMs
+}).check(Schema.makeFilter((key) => key.notAfter > key.notBefore ? void 0 : "notAfter must be after notBefore")));
+const HubGrantVerificationKeys = Schema.Array(HubGrantVerificationKey).check(Schema.isMinLength(1), Schema.isMaxLength(NATIVE_E2EE_MAX_GRANT_KEYS), Schema.makeFilter((keys) => new Set(keys.map((key) => key.keyId)).size === keys.length ? void 0 : "grant verification key ids must be distinct"));
+strict$2(Schema.Struct({
+	protocolVersion: Schema.Literal(1),
+	generation: E2eeKeysetGeneration,
+	keys: HubGrantVerificationKeys
+}));
+strict$2(Schema.Struct({
+	protocolVersion: Schema.Literal(1),
+	nodeId: RelayNodeId,
+	capability: RelayCapability,
+	protocolMajor: Schema.Literal(1),
+	protocolMinor: Schema.Literal(3),
+	suiteId: Schema.Literal(2),
+	enrollmentId: NativeE2eeEnrollmentId,
+	enrollmentRevision: NativeE2eeEnrollmentRevision,
+	clientPrekeyCertificateDigest: Base64Url32
+}));
+strict$2(Schema.Struct({
+	protocolVersion: Schema.Literal(1),
+	ticket: Base64Url(43, 86),
+	ticketId: RelayTicketId,
+	expiresAt: EpochMs,
+	protocolMajor: Schema.Literal(1),
+	protocolMinor: Schema.Literal(3),
+	suiteId: Schema.Literal(2),
+	deviceGrant: HubDeviceGrantEnvelope,
+	deviceGrantDigest: E2eeDigestBase64Url,
+	nodeCapabilityStatement: Base64Url(1, NODE_E2EE_CAPABILITY_STATEMENT_BASE64URL_MAX_CHARS),
+	nodeCapabilityStatementDigest: E2eeDigestBase64Url,
+	keysetGeneration: E2eeKeysetGeneration,
+	capability: RelayCapability,
+	effectiveRole: RelayEffectiveRole
+}));
+strict$2(Schema.Struct({
+	protocolVersion: Schema.Literal(1),
+	enrollmentId: NativeE2eeEnrollmentId,
+	enrollmentRevision: NativeE2eeEnrollmentRevision,
+	accountAuthEpoch: E2eeAuthorizationEpoch,
+	deviceAuthEpoch: E2eeAuthorizationEpoch
+}));
 const LOCAL_INTRODUCTION_DESCRIPTOR_PATH = "/api/desktop/e2ee/local-introduction/descriptor";
 const LOCAL_INTRODUCTION_COMPLETE_PATH = "/api/desktop/e2ee/local-introduction/complete";
 const LOCAL_INTRODUCTION_CONTROL_HEADER = "x-ryco-desktop-control";
@@ -3023,6 +3296,28 @@ const ThreadGoalStatus = Schema.Literals([
 	"budgetLimited",
 	"complete"
 ]);
+const ThreadGoalUpdate = Schema.Struct({
+	objective: Schema.optional(ThreadGoalObjective),
+	status: Schema.optional(ThreadGoalStatus),
+	tokenBudget: Schema.optional(Schema.NullOr(PositiveInt))
+});
+const ThreadGoalSynchronization = Schema.Struct({
+	requestId: Schema.String,
+	state: Schema.Literals([
+		"pending",
+		"failed",
+		"unsupported"
+	]),
+	action: Schema.Literals(["set", "clear"]),
+	startTurn: Schema.optional(Schema.Boolean),
+	deferUntilTurn: Schema.optional(Schema.Boolean),
+	fields: Schema.optional(Schema.Array(Schema.Literals([
+		"objective",
+		"status",
+		"tokenBudget"
+	]))),
+	error: Schema.optional(Schema.String)
+});
 const ThreadGoal = Schema.Struct({
 	objective: ThreadGoalObjective,
 	status: ThreadGoalStatus,
@@ -3030,7 +3325,9 @@ const ThreadGoal = Schema.Struct({
 	tokensUsed: NonNegativeInt,
 	timeUsedSeconds: NonNegativeInt,
 	createdAt: IsoDateTime,
-	updatedAt: IsoDateTime
+	updatedAt: IsoDateTime,
+	/** Local delivery state. Absent when the native provider has confirmed the goal. */
+	synchronization: Schema.optional(ThreadGoalSynchronization)
 });
 const ThreadGoalEventOrigin = Schema.Literals(["client", "provider"]);
 //#endregion
@@ -3320,7 +3617,30 @@ const ContextHandoffInspectionSummaryInput = Schema.Struct({
 	threadId: ThreadId,
 	handoffId: ContextHandoffId
 });
+const CONTEXT_HANDOFF_MAX_INPUT_CHARS = 14e5;
+const ModelContextWindowMetadata = Schema.Array(Schema.Struct({
+	slug: Schema.String,
+	aliases: Schema.optional(Schema.Array(Schema.String)),
+	defaultContextWindow: Schema.optional(Schema.String),
+	contextWindowTokens: Schema.optional(Schema.Record(Schema.String, Schema.Number)),
+	fixedContextWindowTokens: Schema.optional(Schema.Number)
+}));
+const ContextHandoffInputBudget = Schema.Struct({
+	maxInputChars: PositiveInt,
+	budgetSource: Schema.Literals([
+		"default",
+		"manifest",
+		"slug"
+	]),
+	contextWindowTokens: Schema.NullOr(PositiveInt)
+});
+const ContextHandoffAppliedBudget = Schema.Struct({
+	maxInputChars: Schema.optional(Schema.NullOr(PositiveInt)),
+	budgetSource: Schema.optional(Schema.NullOr(ContextHandoffInputBudget.fields.budgetSource)),
+	contextWindowTokens: Schema.optional(Schema.NullOr(PositiveInt))
+});
 const ContextHandoffInspectionSummary = Schema.Struct({
+	...ContextHandoffAppliedBudget.fields,
 	threadId: ThreadId,
 	handoffId: ContextHandoffId,
 	status: Schema.Literals([
@@ -3446,15 +3766,20 @@ const PROVIDER_SEND_TURN_MAX_FILE_BYTES = 52428800;
 const PROVIDER_SEND_TURN_MAX_ATTACHMENT_TOTAL_BYTES = 52428800;
 const PROVIDER_SEND_TURN_MAX_IMAGE_DATA_URL_CHARS = 14e6;
 const PROVIDER_SEND_TURN_MAX_FILE_DATA_URL_CHARS = 7e7;
-const ChatAttachmentId = TrimmedNonEmptyString.check(Schema.isMaxLength(128), Schema.isPattern(/^[a-z0-9_-]+$/i));
+const CHAT_ATTACHMENT_ID_MAX_CHARS = 128;
+const FILE_ATTACHMENT_UPLOAD_TOKEN_MAX_CHARS = 256;
+const ChatAttachmentId = TrimmedNonEmptyString.check(Schema.isMaxLength(CHAT_ATTACHMENT_ID_MAX_CHARS), Schema.isPattern(/^[a-z0-9_-]+$/i));
 const ChatAttachmentName = TrimmedNonEmptyString.check(Schema.isMaxLength(255), Schema.isPattern(/^[^/\\\p{Cc}]+$/u));
 const ChatAttachmentMimeType = TrimmedNonEmptyString.check(Schema.isMaxLength(100), Schema.isPattern(/^[a-z0-9][a-z0-9!#$&^_.+-]*\/[a-z0-9][a-z0-9!#$&^_.+-]*$/i));
+const UnknownChatAttachmentType = Schema.String.check(Schema.makeFilter((type) => type === "image" || type === "file" ? "reserved chat attachment type" : true));
 const ChatImageAttachment = Schema.Struct({
 	type: Schema.Literal("image"),
 	id: ChatAttachmentId,
 	name: ChatAttachmentName,
 	mimeType: ChatAttachmentMimeType.check(Schema.isPattern(/^image\//i)),
-	sizeBytes: NonNegativeInt.check(Schema.isLessThanOrEqualTo(PROVIDER_SEND_TURN_MAX_IMAGE_BYTES))
+	sizeBytes: NonNegativeInt.check(Schema.isLessThanOrEqualTo(PROVIDER_SEND_TURN_MAX_IMAGE_BYTES)),
+	width: Schema.optional(NonNegativeInt),
+	height: Schema.optional(NonNegativeInt)
 });
 const UploadChatImageAttachment = Schema.Struct({
 	type: Schema.Literal("image"),
@@ -3468,17 +3793,66 @@ const ChatFileAttachment = Schema.Struct({
 	id: ChatAttachmentId,
 	name: ChatAttachmentName,
 	mimeType: ChatAttachmentMimeType,
-	sizeBytes: NonNegativeInt.check(Schema.isLessThanOrEqualTo(PROVIDER_SEND_TURN_MAX_FILE_BYTES))
+	sizeBytes: NonNegativeInt.check(Schema.isLessThanOrEqualTo(PROVIDER_SEND_TURN_MAX_FILE_BYTES)),
+	width: Schema.optional(NonNegativeInt),
+	height: Schema.optional(NonNegativeInt)
+});
+const CHAT_ATTACHMENT_READ_CHUNK_BYTES = 262144;
+const ChatAttachmentReadChunkInput = Schema.Struct({
+	threadId: ThreadId,
+	messageId: MessageId,
+	attachmentId: ChatAttachmentId,
+	offset: NonNegativeInt.check(Schema.isLessThanOrEqualTo(PROVIDER_SEND_TURN_MAX_FILE_BYTES))
+});
+const ChatAttachmentReadChunkResult = Schema.Struct({
+	dataBase64: Schema.String.check(Schema.isMaxLength(4 * Math.ceil(CHAT_ATTACHMENT_READ_CHUNK_BYTES / 3))),
+	offset: NonNegativeInt,
+	totalBytes: NonNegativeInt.check(Schema.isLessThanOrEqualTo(PROVIDER_SEND_TURN_MAX_FILE_BYTES))
 });
+var ChatAttachmentReadError = class extends Schema.TaggedError()("ChatAttachmentReadError", { message: Schema.String }) {};
+const FileAttachmentUploadToken = TrimmedNonEmptyString.check(Schema.isMaxLength(FILE_ATTACHMENT_UPLOAD_TOKEN_MAX_CHARS));
 const UploadChatFileAttachment = Schema.Struct({
 	type: Schema.Literal("file"),
 	name: ChatAttachmentName,
 	mimeType: ChatAttachmentMimeType,
 	sizeBytes: NonNegativeInt.check(Schema.isLessThanOrEqualTo(PROVIDER_SEND_TURN_MAX_FILE_BYTES)),
-	dataUrl: TrimmedNonEmptyString.check(Schema.isMaxLength(PROVIDER_SEND_TURN_MAX_FILE_DATA_URL_CHARS))
+	dataUrl: Schema.optionalKey(TrimmedNonEmptyString.check(Schema.isMaxLength(PROVIDER_SEND_TURN_MAX_FILE_DATA_URL_CHARS))),
+	uploadToken: Schema.optionalKey(FileAttachmentUploadToken)
+}).check(Schema.makeFilter((attachment) => {
+	const hasDataUrl = attachment.dataUrl !== void 0;
+	return hasDataUrl !== (attachment.uploadToken !== void 0) ? true : {
+		path: ["dataUrl"],
+		issue: hasDataUrl ? "provide either dataUrl or uploadToken, not both" : "provide exactly one of dataUrl or uploadToken"
+	};
+}));
+const FileAttachmentCreateUploadUrlInput = Schema.Struct({
+	threadId: ThreadId,
+	name: ChatAttachmentName,
+	mimeType: ChatAttachmentMimeType,
+	sizeBytes: NonNegativeInt.check(Schema.isLessThanOrEqualTo(PROVIDER_SEND_TURN_MAX_FILE_BYTES))
+});
+const FileAttachmentCreateUploadUrlResult = Schema.Struct({
+	uploadToken: FileAttachmentUploadToken,
+	expiresAt: IsoDateTime,
+	maxUploadBytes: NonNegativeInt
 });
-const ChatAttachment = Schema.Union([ChatImageAttachment, ChatFileAttachment]);
-const UploadChatAttachment = Schema.Union([UploadChatImageAttachment, UploadChatFileAttachment]);
+const ChatUnknownAttachment = Schema.Struct({
+	type: UnknownChatAttachmentType,
+	id: Schema.optional(ChatAttachmentId),
+	name: Schema.optional(ChatAttachmentName),
+	mimeType: Schema.optional(Schema.String),
+	sizeBytes: Schema.optional(NonNegativeInt)
+});
+const ChatAttachment = Schema.Union([
+	ChatImageAttachment,
+	ChatFileAttachment,
+	ChatUnknownAttachment
+]);
+const UploadChatAttachment = Schema.Union([
+	UploadChatImageAttachment,
+	UploadChatFileAttachment,
+	ChatUnknownAttachment
+]);
 const ChatAttachments = Schema.Array(ChatAttachment).check(Schema.isMaxLength(8));
 const UploadChatAttachments = Schema.Array(UploadChatAttachment).check(Schema.isMaxLength(8));
 const ProjectScriptIcon = Schema.Literals([
@@ -3639,6 +4013,8 @@ const OrchestrationThread = Schema.Struct({
 	archivedAt: Schema.NullOr(IsoDateTime).pipe(Schema.withDecodingDefault(Effect.succeed(null))),
 	settledOverride: Schema.NullOr(ThreadSettlementOverride).pipe(Schema.withDecodingDefault(Effect.succeed(null))),
 	settledAt: Schema.NullOr(IsoDateTime).pipe(Schema.withDecodingDefault(Effect.succeed(null))),
+	snoozedUntil: Schema.optional(Schema.NullOr(IsoDateTime)),
+	snoozedAt: Schema.optional(Schema.NullOr(IsoDateTime)),
 	deletedAt: Schema.NullOr(IsoDateTime),
 	messages: Schema.Array(OrchestrationMessage),
 	proposedPlans: Schema.Array(OrchestrationProposedPlan).pipe(Schema.withDecodingDefault(Effect.succeed([]))),
@@ -3699,6 +4075,8 @@ const OrchestrationThreadShell = Schema.Struct({
 	archivedAt: Schema.NullOr(IsoDateTime).pipe(Schema.withDecodingDefault(Effect.succeed(null))),
 	settledOverride: Schema.NullOr(ThreadSettlementOverride).pipe(Schema.withDecodingDefault(Effect.succeed(null))),
 	settledAt: Schema.NullOr(IsoDateTime).pipe(Schema.withDecodingDefault(Effect.succeed(null))),
+	snoozedUntil: Schema.optional(Schema.NullOr(IsoDateTime)),
+	snoozedAt: Schema.optional(Schema.NullOr(IsoDateTime)),
 	session: Schema.NullOr(OrchestrationSession),
 	latestUserMessageAt: Schema.NullOr(IsoDateTime),
 	hasPendingApprovals: Schema.Boolean,
@@ -3921,6 +4299,17 @@ const ThreadUnarchiveCommand = Schema.Struct({
 	commandId: CommandId,
 	threadId: ThreadId
 });
+const ThreadSnoozeCommand = Schema.Struct({
+	type: Schema.Literal("thread.snooze"),
+	commandId: CommandId,
+	threadId: ThreadId,
+	snoozedUntil: IsoDateTime
+});
+const ThreadUnsnoozeCommand = Schema.Struct({
+	type: Schema.Literal("thread.unsnooze"),
+	commandId: CommandId,
+	threadId: ThreadId
+});
 const ThreadSettleCommand = Schema.Struct({
 	type: Schema.Literal("thread.settle"),
 	commandId: CommandId,
@@ -3964,11 +4353,10 @@ const ThreadTokenModeSetCommand = Schema.Struct({
 });
 const ThreadGoalSetCommand = Schema.Struct({
 	type: Schema.Literal("thread.goal.set"),
+	startTurn: Schema.optional(Schema.Boolean),
 	commandId: CommandId,
 	threadId: ThreadId,
-	objective: Schema.optional(ThreadGoalObjective),
-	status: Schema.optional(ThreadGoalStatus),
-	tokenBudget: Schema.optional(Schema.NullOr(PositiveInt)),
+	...ThreadGoalUpdate.fields,
 	createdAt: IsoDateTime
 });
 const ThreadGoalClearCommand = Schema.Struct({
@@ -3989,6 +4377,7 @@ const ThreadTurnStartBootstrapCreateThread = Schema.Struct({
 	createdAt: IsoDateTime
 });
 const ThreadTurnStartBootstrapPrepareWorktree = Schema.Struct({
+	fetchOrigin: Schema.optional(Schema.Boolean),
 	projectCwd: TrimmedNonEmptyString,
 	baseBranch: TrimmedNonEmptyString,
 	branch: Schema.optional(TrimmedNonEmptyString)
@@ -4013,6 +4402,7 @@ const ThreadTurnStartCommand = Schema.Struct({
 	runtimeMode: RuntimeMode.pipe(Schema.withDecodingDefault(Effect.succeed(DEFAULT_RUNTIME_MODE))),
 	interactionMode: ProviderInteractionMode.pipe(Schema.withDecodingDefault(Effect.succeed(DEFAULT_PROVIDER_INTERACTION_MODE))),
 	tokenMode: Schema.optionalKey(AgentTokenMode),
+	goal: Schema.optional(ThreadGoalUpdate),
 	bootstrap: Schema.optional(ThreadTurnStartBootstrap),
 	sourceProposedPlan: Schema.optional(SourceProposedPlanReference),
 	sourceControlContexts: Schema.optional(Schema.Array(ComposerSourceControlContext)),
@@ -4033,6 +4423,7 @@ const ClientThreadTurnStartCommand = Schema.Struct({
 	runtimeMode: RuntimeMode,
 	interactionMode: ProviderInteractionMode,
 	tokenMode: Schema.optionalKey(AgentTokenMode),
+	goal: Schema.optional(ThreadGoalUpdate),
 	bootstrap: Schema.optional(ThreadTurnStartBootstrap),
 	sourceProposedPlan: Schema.optional(SourceProposedPlanReference),
 	sourceControlContexts: Schema.optional(Schema.Array(ComposerSourceControlContext)),
@@ -4199,6 +4590,8 @@ const DispatchableClientOrchestrationCommand = Schema.Union([
 	ThreadDeleteCommand,
 	ThreadArchiveCommand,
 	ThreadUnarchiveCommand,
+	ThreadSnoozeCommand,
+	ThreadUnsnoozeCommand,
 	ThreadSettleCommand,
 	ThreadUnsettleCommand,
 	ThreadMetaUpdateCommand,
@@ -4234,6 +4627,8 @@ const ClientOrchestrationCommand = Schema.Union([
 	ThreadDeleteCommand,
 	ThreadArchiveCommand,
 	ThreadUnarchiveCommand,
+	ThreadSnoozeCommand,
+	ThreadUnsnoozeCommand,
 	ThreadSettleCommand,
 	ThreadUnsettleCommand,
 	ThreadMetaUpdateCommand,
@@ -4281,6 +4676,8 @@ const ThreadMessageAssistantCompleteCommand = Schema.Struct({
 	commandId: CommandId,
 	threadId: ThreadId,
 	messageId: MessageId,
+	text: Schema.optional(Schema.String),
+	attachments: Schema.optional(Schema.Array(ChatAttachment)),
 	turnId: Schema.optional(TurnId),
 	createdAt: IsoDateTime
 });
@@ -4362,15 +4759,30 @@ const ThreadGoalSyncCommand = Schema.Struct({
 	commandId: CommandId,
 	threadId: ThreadId,
 	goal: ThreadGoal,
+	expectedRequestId: Schema.optional(Schema.String),
 	createdAt: IsoDateTime
 });
 const ThreadGoalProviderClearCommand = Schema.Struct({
 	type: Schema.Literal("thread.goal.provider-clear"),
 	commandId: CommandId,
 	threadId: ThreadId,
+	expectedRequestId: Schema.optional(Schema.String),
 	createdAt: IsoDateTime
 });
 const InternalOrchestrationCommand = Schema.Union([
+	Schema.Struct({
+		type: Schema.Literal("thread.history.restore"),
+		commandId: CommandId,
+		threadId: ThreadId,
+		providerInstanceId: ProviderInstanceId,
+		runtimeSessionId: RuntimeSessionId,
+		expectedUpdatedAt: IsoDateTime,
+		messages: Schema.Array(OrchestrationMessage),
+		activities: Schema.Array(OrchestrationThreadActivity),
+		completedTurnIds: Schema.Array(TurnId),
+		failedTurnIds: Schema.Array(TurnId),
+		createdAt: IsoDateTime
+	}),
 	ThreadSessionSetCommand,
 	ThreadMessageAssistantDeltaCommand,
 	ThreadMessageAssistantCompleteCommand,
@@ -4392,6 +4804,8 @@ const OrchestrationEventType = Schema.Literals([
 	"thread.deleted",
 	"thread.archived",
 	"thread.unarchived",
+	"thread.snoozed",
+	"thread.unsnoozed",
 	"thread.settled",
 	"thread.unsettled",
 	"thread.meta-updated",
@@ -4496,6 +4910,16 @@ const ThreadUnarchivedPayload = Schema.Struct({
 	threadId: ThreadId,
 	updatedAt: IsoDateTime
 });
+const ThreadSnoozedPayload = Schema.Struct({
+	threadId: ThreadId,
+	snoozedUntil: IsoDateTime,
+	snoozedAt: IsoDateTime,
+	updatedAt: IsoDateTime
+});
+const ThreadUnsnoozedPayload = Schema.Struct({
+	threadId: ThreadId,
+	updatedAt: IsoDateTime
+});
 const ThreadSettledPayload = Schema.Struct({
 	threadId: ThreadId,
 	settledAt: IsoDateTime,
@@ -4784,6 +5208,16 @@ const OrchestrationEvent = Schema.Union([
 		type: Schema.Literal("thread.unarchived"),
 		payload: ThreadUnarchivedPayload
 	}),
+	Schema.Struct({
+		...EventBaseFields,
+		type: Schema.Literal("thread.snoozed"),
+		payload: ThreadSnoozedPayload
+	}),
+	Schema.Struct({
+		...EventBaseFields,
+		type: Schema.Literal("thread.unsnoozed"),
+		payload: ThreadUnsnoozedPayload
+	}),
 	Schema.Struct({
 		...EventBaseFields,
 		type: Schema.Literal("thread.settled"),
@@ -5227,6 +5661,10 @@ var OrchestrationReplayEventsError = class extends Schema.TaggedError()("Orchest
 	message: TrimmedNonEmptyString,
 	cause: Schema.optional(Schema.Defect())
 }) {};
+var FileAttachmentCreateUploadUrlError = class extends Schema.TaggedError()("FileAttachmentCreateUploadUrlError", {
+	message: TrimmedNonEmptyString,
+	cause: Schema.optional(Schema.Defect())
+}) {};
 const ProviderSessionStatus = Schema.Literals([
 	"connecting",
 	"ready",
@@ -5270,7 +5708,7 @@ const ProviderSessionStartInput = Schema.Struct({
 });
 const ProviderSendTurnInput = Schema.Struct({
 	threadId: ThreadId,
-	input: Schema.optional(TrimmedNonEmptyString.check(Schema.isMaxLength(PROVIDER_SEND_TURN_MAX_INPUT_CHARS))),
+	input: Schema.optional(TrimmedNonEmptyString.check(Schema.isMaxLength(CONTEXT_HANDOFF_MAX_INPUT_CHARS))),
 	attachments: Schema.optional(Schema.Array(ChatAttachment).check(Schema.isMaxLength(8))),
 	sourceControlContexts: Schema.optional(Schema.Array(ComposerSourceControlContext).check(Schema.isMaxLength(10))),
 	modelSelection: Schema.optional(ModelSelection),
@@ -6467,7 +6905,7 @@ const AiFocusRefreshIntervalMs = Schema$1.Literals([
 const ClientSettingsSchema = Schema$1.Struct({
 	aiFocusEnabled: Schema$1.Boolean.pipe(Schema$1.withDecodingDefault(Effect.succeed(false))),
 	aiFocusRefreshIntervalMs: AiFocusRefreshIntervalMs.pipe(Schema$1.withDecodingDefault(Effect.succeed(6e5))),
-	autoOpenPlanSidebar: Schema$1.Boolean.pipe(Schema$1.withDecodingDefault(Effect.succeed(false))),
+	autoOpenPlanSidebar: Schema$1.Boolean.pipe(Schema$1.withDecodingDefault(Effect.succeed(true))),
 	confirmThreadArchive: Schema$1.Boolean.pipe(Schema$1.withDecodingDefault(Effect.succeed(false))),
 	confirmThreadDelete: Schema$1.Boolean.pipe(Schema$1.withDecodingDefault(Effect.succeed(true))),
 	confirmThreadUnpin: Schema$1.Boolean.pipe(Schema$1.withDecodingDefault(Effect.succeed(false))),
@@ -6821,6 +7259,7 @@ const ServerProviderModel = Schema.Struct({
 	shortName: Schema.optional(TrimmedNonEmptyString),
 	subProvider: Schema.optional(TrimmedNonEmptyString),
 	aliases: Schema.optional(Schema.Array(TrimmedNonEmptyString)),
+	maxContextTokens: Schema.optional(PositiveInt),
 	isDefault: Schema.optional(Schema.Boolean),
 	isLegacy: Schema.optional(Schema.Boolean),
 	isCustom: Schema.Boolean,
@@ -6881,10 +7320,10 @@ const ServerProviderRateLimitCredits = Schema.Struct({
 	balance: Schema.optional(TrimmedNonEmptyString)
 });
 /**
-* Account-scoped rate-limit snapshot attached to a provider. Currently
-* populated only by the Codex driver (one snapshot per Codex provider
-* instance, since each instance can target a different `CODEX_HOME` /
-* ChatGPT account). Other drivers leave it absent.
+* Account-scoped rate-limit snapshot attached to a provider. Populated by the
+* drivers that can surface usage limits (Codex, Claude, and OpenCode Go);
+* each instance yields one snapshot since accounts differ per instance.
+* Other drivers leave it absent.
 */
 const ServerProviderRateLimits = Schema.Struct({
 	limitId: Schema.optional(TrimmedNonEmptyString),
@@ -6892,6 +7331,7 @@ const ServerProviderRateLimits = Schema.Struct({
 	planType: Schema.optional(TrimmedNonEmptyString),
 	primary: Schema.optional(ServerProviderRateLimitWindow),
 	secondary: Schema.optional(ServerProviderRateLimitWindow),
+	tertiary: Schema.optional(ServerProviderRateLimitWindow),
 	credits: Schema.optional(ServerProviderRateLimitCredits),
 	rateLimitReachedType: Schema.optional(TrimmedNonEmptyString)
 });
@@ -7069,6 +7509,206 @@ var ServerProviderUpdateError = class extends Schema.TaggedError()("ServerProvid
 	}
 };
 //#endregion
+//#region ../../packages/contracts/src/resourceTelemetry.ts
+const DiagnosticsPowerSnapshot = Schema.Struct({
+	idleState: Schema.String,
+	idleSeconds: Schema.Number,
+	onBattery: Schema.Boolean,
+	thermalState: Schema.String,
+	speedLimitPercent: Schema.NullOr(Schema.Number),
+	suspended: Schema.Boolean,
+	locked: Schema.optional(Schema.NullOr(Schema.Boolean)),
+	lowPowerMode: Schema.optional(Schema.NullOr(Schema.Boolean)),
+	updatedAt: Schema.optional(IsoDateTime),
+	stale: Schema.optional(Schema.Boolean)
+});
+const ResourceTelemetryIoSemantics = Schema.Literals([
+	"storage",
+	"logical",
+	"all-io",
+	"unavailable"
+]);
+const ResourceTelemetryProcessCategory = Schema.Literals([
+	"server",
+	"server-child",
+	"provider-root",
+	"terminal-root",
+	"electron-main",
+	"electron-renderer",
+	"electron-gpu",
+	"electron-utility",
+	"resource-monitor",
+	"unknown-ryco"
+]);
+const ResourceTelemetrySourceStatus = Schema.Literals([
+	"starting",
+	"healthy",
+	"degraded",
+	"unavailable",
+	"stopped"
+]);
+const ResourceTelemetryProcessIdentity = Schema.Struct({
+	pid: PositiveInt,
+	startTimeMs: NonNegativeInt
+});
+Schema.Struct({
+	pid: PositiveInt,
+	startTimeMs: Schema.optional(NonNegativeInt)
+});
+Schema.Struct({
+	cumulativeCpuTime: Schema.Boolean,
+	currentCpuPercent: Schema.Boolean,
+	residentMemory: Schema.Boolean,
+	virtualMemory: Schema.Boolean,
+	ioBytes: Schema.Boolean,
+	processStartTime: Schema.Boolean,
+	processTree: Schema.Boolean
+});
+Schema.Struct({
+	pid: PositiveInt,
+	ppid: NonNegativeInt,
+	startTimeMs: NonNegativeInt,
+	runTimeMs: NonNegativeInt,
+	name: Schema.String,
+	command: Schema.String,
+	status: Schema.String,
+	cpuPercent: Schema.Number,
+	cpuTimeMs: NonNegativeInt,
+	residentBytes: NonNegativeInt,
+	virtualBytes: NonNegativeInt,
+	ioReadBytes: NonNegativeInt,
+	ioWriteBytes: NonNegativeInt,
+	ioSemantics: Schema.Literals(["storage", "all-io"])
+});
+const ResourceTelemetryProcess = Schema.Struct({
+	identity: ResourceTelemetryProcessIdentity,
+	ppid: NonNegativeInt,
+	childPids: Schema.Array(PositiveInt),
+	depth: NonNegativeInt,
+	name: Schema.String,
+	command: Schema.String,
+	status: Schema.String,
+	category: ResourceTelemetryProcessCategory,
+	electronType: Schema.optional(Schema.String),
+	electronServiceName: Schema.optional(Schema.String),
+	cpuPercent: Schema.Number,
+	cpuTimeMs: NonNegativeInt,
+	residentBytes: NonNegativeInt,
+	peakResidentBytes: NonNegativeInt,
+	virtualBytes: NonNegativeInt,
+	ioReadBytes: NonNegativeInt,
+	ioWriteBytes: NonNegativeInt,
+	ioReadBytesPerSecond: Schema.Number,
+	ioWriteBytesPerSecond: Schema.Number,
+	ioSemantics: ResourceTelemetryIoSemantics,
+	idleWakeupsPerSecond: Schema.optional(Schema.Number),
+	runTimeMs: NonNegativeInt,
+	firstSeenAt: IsoDateTime,
+	lastSeenAt: IsoDateTime
+});
+const ResourceTelemetryAggregate = Schema.Struct({
+	processCount: NonNegativeInt,
+	currentCpuPercent: Schema.Number,
+	cpuTimeMs: NonNegativeInt,
+	currentRssBytes: NonNegativeInt,
+	peakRssBytes: NonNegativeInt,
+	ioReadBytes: NonNegativeInt,
+	ioWriteBytes: NonNegativeInt,
+	ioReadBytesPerSecond: Schema.Number,
+	ioWriteBytesPerSecond: Schema.Number,
+	processStarts: NonNegativeInt,
+	processExits: NonNegativeInt
+});
+const ResourceTelemetryGroups = Schema.Struct({
+	backend: ResourceTelemetryAggregate,
+	electron: ResourceTelemetryAggregate,
+	monitor: ResourceTelemetryAggregate,
+	allRyco: ResourceTelemetryAggregate
+});
+const ResourceTelemetrySourceHealth = Schema.Struct({
+	status: ResourceTelemetrySourceStatus,
+	lastSampleAt: Schema.NullOr(IsoDateTime),
+	lastError: Schema.NullOr(TrimmedNonEmptyString)
+});
+const ResourceTelemetryHealth = Schema.Struct({
+	native: ResourceTelemetrySourceHealth,
+	desktop: ResourceTelemetrySourceHealth,
+	sidecarVersion: Schema.NullOr(TrimmedNonEmptyString),
+	sidecarPid: Schema.NullOr(PositiveInt),
+	restartCount: NonNegativeInt,
+	collectionDurationMicros: NonNegativeInt,
+	scannedProcessCount: NonNegativeInt,
+	retainedProcessCount: NonNegativeInt,
+	inaccessibleProcessCount: NonNegativeInt
+});
+const ResourceAttributionEntry = Schema.Struct({
+	component: TrimmedNonEmptyString,
+	operation: TrimmedNonEmptyString,
+	logicalReadBytes: NonNegativeInt,
+	logicalWriteBytes: NonNegativeInt,
+	count: NonNegativeInt,
+	durationMs: NonNegativeInt
+});
+const ResourceAttributionSnapshot = Schema.Struct({
+	readAt: IsoDateTime,
+	entries: Schema.Array(ResourceAttributionEntry)
+});
+const ResourceTelemetrySnapshot = Schema.Struct({
+	readAt: IsoDateTime,
+	sampleIntervalMs: NonNegativeInt,
+	processes: Schema.Array(ResourceTelemetryProcess),
+	groups: ResourceTelemetryGroups,
+	power: Schema.NullOr(DiagnosticsPowerSnapshot),
+	speedLimitPercent: Schema.NullOr(Schema.Number),
+	attribution: ResourceAttributionSnapshot,
+	health: ResourceTelemetryHealth
+});
+const ResourceTelemetryHistoryInput = Schema.Struct({
+	windowMs: NonNegativeInt,
+	bucketMs: NonNegativeInt
+});
+const ResourceTelemetryHistoryBucket = Schema.Struct({
+	startedAt: IsoDateTime,
+	endedAt: IsoDateTime,
+	avgCpuPercent: Schema.Number,
+	maxCpuPercent: Schema.Number,
+	maxRssBytes: NonNegativeInt,
+	ioReadBytes: NonNegativeInt,
+	ioWriteBytes: NonNegativeInt,
+	maxProcessCount: NonNegativeInt
+});
+const ResourceTelemetryProcessSummary = Schema.Struct({
+	identity: ResourceTelemetryProcessIdentity,
+	ppid: NonNegativeInt,
+	depth: NonNegativeInt,
+	name: Schema.String,
+	command: Schema.String,
+	category: ResourceTelemetryProcessCategory,
+	firstSeenAt: IsoDateTime,
+	lastSeenAt: IsoDateTime,
+	currentCpuPercent: Schema.Number,
+	avgCpuPercent: Schema.Number,
+	maxCpuPercent: Schema.Number,
+	cpuTimeMs: NonNegativeInt,
+	currentRssBytes: NonNegativeInt,
+	peakRssBytes: NonNegativeInt,
+	ioReadBytes: NonNegativeInt,
+	ioWriteBytes: NonNegativeInt,
+	ioSemantics: ResourceTelemetryIoSemantics,
+	sampleCount: NonNegativeInt
+});
+const ResourceTelemetryHistory = Schema.Struct({
+	totalCpuTimeMs: Schema.optional(NonNegativeInt),
+	readAt: IsoDateTime,
+	windowMs: NonNegativeInt,
+	bucketMs: NonNegativeInt,
+	sampleIntervalMs: NonNegativeInt,
+	retainedSampleCount: NonNegativeInt,
+	buckets: Schema.Array(ResourceTelemetryHistoryBucket),
+	topProcesses: Schema.Array(ResourceTelemetryProcessSummary),
+	health: ResourceTelemetryHealth
+});
+//#endregion
 //#region ../../packages/contracts/src/diagnostics.ts
 const DiagnosticsWarning = Schema.Struct({
 	code: TrimmedNonEmptyString,
@@ -7106,7 +7746,13 @@ const DiagnosticsResourceSample = Schema.Struct({
 	cpu: DiagnosticsResourceCpu,
 	eventLoopDelayMs: Schema.optional(Schema.Number)
 });
+const DiagnosticsHostResources = Schema.Struct({
+	cpuCount: NonNegativeInt,
+	totalMemoryBytes: NonNegativeInt,
+	availableMemoryBytes: NonNegativeInt
+});
 const DiagnosticsResources = Schema.Struct({
+	host: Schema.optional(DiagnosticsHostResources),
 	current: DiagnosticsResourceSample,
 	history: Schema.Array(DiagnosticsResourceSample)
 });
@@ -7193,7 +7839,28 @@ const DiagnosticsDurationBucket = Schema.Struct({
 	maxMs: Schema.optional(NonNegativeInt),
 	count: NonNegativeInt
 });
+const DiagnosticsTraceSummary = Schema.Struct({
+	parseErrorCount: NonNegativeInt,
+	scannedFilePaths: Schema.Array(TrimmedNonEmptyString),
+	firstSpanAt: Schema.NullOr(IsoDateTime),
+	lastSpanAt: Schema.NullOr(IsoDateTime),
+	failureCount: NonNegativeInt,
+	interruptionCount: NonNegativeInt,
+	slowSpanThresholdMs: NonNegativeInt,
+	slowSpanCount: NonNegativeInt,
+	logLevelCounts: Schema.Record(Schema.String, NonNegativeInt),
+	latestWarningAndErrorLogs: Schema.Array(Schema.Struct({
+		traceId: TrimmedNonEmptyString,
+		spanId: TrimmedNonEmptyString,
+		spanName: TrimmedNonEmptyString,
+		level: TrimmedNonEmptyString,
+		message: Schema.String,
+		seenAt: IsoDateTime
+	})),
+	partialFailure: Schema.Boolean
+});
 const DiagnosticsTracing = Schema.Struct({
+	summary: Schema.optional(DiagnosticsTraceSummary),
 	retainedSpanCount: NonNegativeInt,
 	recentSpans: Schema.Array(DiagnosticsSpan),
 	slowestSpans: Schema.Array(DiagnosticsSpan),
@@ -7273,6 +7940,37 @@ const DiagnosticsLimits = Schema.Struct({
 	resourceSampleLimit: NonNegativeInt,
 	fileTailBytes: NonNegativeInt
 });
+const DiagnosticsProcessEntry = Schema.Struct({
+	pid: NonNegativeInt,
+	ppid: NonNegativeInt,
+	startTimeMs: NonNegativeInt,
+	command: Schema.String,
+	status: Schema.String,
+	cpuPercent: Schema.Number,
+	rssBytes: NonNegativeInt,
+	elapsed: Schema.String,
+	depth: NonNegativeInt,
+	childPids: Schema.Array(NonNegativeInt)
+});
+const DiagnosticsProcessTree = Schema.Struct({
+	readAt: IsoDateTime,
+	serverPid: NonNegativeInt,
+	processes: Schema.Array(DiagnosticsProcessEntry),
+	totalCpuPercent: Schema.Number,
+	totalRssBytes: NonNegativeInt,
+	error: Schema.optional(Schema.String)
+});
+const DiagnosticsSignalProcessInput = Schema.Struct({
+	pid: NonNegativeInt,
+	startTimeMs: NonNegativeInt,
+	signal: Schema.Literals(["SIGINT", "SIGKILL"])
+});
+const DiagnosticsSignalProcessResult = Schema.Struct({
+	pid: NonNegativeInt,
+	signal: Schema.Literals(["SIGINT", "SIGKILL"]),
+	signaled: Schema.Boolean,
+	message: Schema.optional(Schema.String)
+});
 const DiagnosticsSnapshot = Schema.Struct({
 	generatedAt: IsoDateTime,
 	serverStartedAt: IsoDateTime,
@@ -7281,6 +7979,8 @@ const DiagnosticsSnapshot = Schema.Struct({
 	observability: DiagnosticsObservability,
 	resources: DiagnosticsResources,
 	liveProcesses: DiagnosticsLiveProcesses,
+	processTree: Schema.optional(DiagnosticsProcessTree),
+	telemetry: Schema.optional(ResourceTelemetrySnapshot),
 	tracing: DiagnosticsTracing,
 	failures: DiagnosticsFailures,
 	client: DiagnosticsClient,
@@ -7925,12 +8625,15 @@ const GitRunStackedActionInput = Schema.Struct({
 	filePaths: Schema.optional(Schema.Array(TrimmedNonEmptyStringSchema).check(Schema.isMinLength(1)))
 });
 const VcsListRefsInput = Schema.Struct({
+	fetchOrigin: Schema.optional(Schema.Boolean),
+	originOnly: Schema.optional(Schema.Boolean),
 	cwd: TrimmedNonEmptyStringSchema,
 	query: Schema.optional(TrimmedNonEmptyStringSchema.check(Schema.isMaxLength(256))),
 	cursor: Schema.optional(NonNegativeInt),
 	limit: Schema.optional(PositiveInt.check(Schema.isLessThanOrEqualTo(GIT_LIST_BRANCHES_MAX_LIMIT)))
 });
 const VcsCreateWorktreeInput = Schema.Struct({
+	fetchOrigin: Schema.optional(Schema.Boolean),
 	cwd: TrimmedNonEmptyStringSchema,
 	refName: TrimmedNonEmptyStringSchema,
 	newRefName: Schema.optional(TrimmedNonEmptyStringSchema),
@@ -9072,6 +9775,7 @@ const agentControlSlug = TrimmedNonEmptyString.check(Schema.isMaxLength(64), Sch
 const AgentControlCapability = agentControlSlug.pipe(Schema.brand("AgentControlCapability"));
 const AGENT_CONTROL_CAPABILITIES = {
 	read: AgentControlCapability.make("read"),
+	attachFile: AgentControlCapability.make("files.attach"),
 	createThreads: AgentControlCapability.make("threads.create"),
 	sendMessage: AgentControlCapability.make("threads.send-message"),
 	interruptThread: AgentControlCapability.make("threads.interrupt"),
@@ -9088,6 +9792,8 @@ const AGENT_CONTROL_CAPABILITIES = {
 	readDevices: AgentControlCapability.make("devices.read"),
 	readDeviceContent: AgentControlCapability.make("devices.content.read"),
 	controlDevices: AgentControlCapability.make("devices.control"),
+	controlComputer: AgentControlCapability.make("computer.control"),
+	controlBrowser: AgentControlCapability.make("browser.control"),
 	externalListProjects: AgentControlCapability.make("external.projects.list"),
 	externalCreateTask: AgentControlCapability.make("external.tasks.create"),
 	externalReadTask: AgentControlCapability.make("external.tasks.read"),
@@ -10751,6 +11457,8 @@ const WS_METHODS = {
 	projectsReadFileBinary: "projects.readFileBinary",
 	projectsWriteFile: "projects.writeFile",
 	projectsStageFileReference: "projects.stageFileReference",
+	chatAttachmentsCreateFileUpload: "chatAttachments.createFileUpload",
+	chatAttachmentsReadChunk: "chatAttachments.readChunk",
 	shellOpenInEditor: "shell.openInEditor",
 	filesystemBrowse: "filesystem.browse",
 	vcsPull: "vcs.pull",
@@ -10795,6 +11503,9 @@ const WS_METHODS = {
 	serverCheckOpinionatedPlugins: "server.checkOpinionatedPlugins",
 	serverInstallOpinionatedPlugin: "server.installOpinionatedPlugin",
 	serverGetDiagnosticsSnapshot: "server.getDiagnosticsSnapshot",
+	serverGetResourceTelemetryHistory: "server.getResourceTelemetryHistory",
+	serverRetryResourceTelemetry: "server.retryResourceTelemetry",
+	serverSignalDiagnosticProcess: "server.signalDiagnosticProcess",
 	serverGetStatistics: "server.getStatistics",
 	serverGetUsageSummary: "server.getUsageSummary",
 	mcpListWorkspaces: "mcp.listWorkspaces",
@@ -10854,6 +11565,7 @@ const WS_METHODS = {
 	subscribeAuthAccess: "subscribeAuthAccess"
 };
 const GitCreateWorktreeForProjectInput = Schema.Struct({
+	fetchOrigin: Schema.optional(Schema.Boolean),
 	projectId: ProjectId,
 	intent: CreateWorktreeIntent,
 	worktreeLocation: Schema.optional(WorktreeCheckoutLocation)
@@ -10989,6 +11701,21 @@ const WsServerGetDiagnosticsSnapshotRpc = Rpc.make(WS_METHODS.serverGetDiagnosti
 	success: DiagnosticsSnapshot,
 	error: Schema.Union([DiagnosticsError, AuthRpcError])
 });
+const WsServerGetResourceTelemetryHistoryRpc = Rpc.make(WS_METHODS.serverGetResourceTelemetryHistory, {
+	payload: ResourceTelemetryHistoryInput,
+	success: ResourceTelemetryHistory,
+	error: Schema.Union([DiagnosticsError, AuthRpcError])
+});
+const WsServerRetryResourceTelemetryRpc = Rpc.make(WS_METHODS.serverRetryResourceTelemetry, {
+	payload: Schema.Struct({}),
+	success: ResourceTelemetrySnapshot,
+	error: Schema.Union([DiagnosticsError, AuthRpcError])
+});
+const WsServerSignalDiagnosticProcessRpc = Rpc.make(WS_METHODS.serverSignalDiagnosticProcess, {
+	payload: DiagnosticsSignalProcessInput,
+	success: DiagnosticsSignalProcessResult,
+	error: Schema.Union([DiagnosticsError, AuthRpcError])
+});
 const WsServerGetStatisticsRpc = Rpc.make(WS_METHODS.serverGetStatistics, {
 	payload: Schema.Struct({}),
 	success: StatisticsSnapshot,
@@ -11340,6 +12067,16 @@ const WsProjectsStageFileReferenceRpc = Rpc.make(WS_METHODS.projectsStageFileRef
 	success: ProjectStageFileReferenceResult,
 	error: Schema.Union([ProjectStageFileReferenceError, AuthRpcError])
 });
+const WsChatAttachmentsCreateFileUploadRpc = Rpc.make(WS_METHODS.chatAttachmentsCreateFileUpload, {
+	payload: FileAttachmentCreateUploadUrlInput,
+	success: FileAttachmentCreateUploadUrlResult,
+	error: Schema.Union([FileAttachmentCreateUploadUrlError, AuthRpcError])
+});
+const WsChatAttachmentsReadChunkRpc = Rpc.make(WS_METHODS.chatAttachmentsReadChunk, {
+	payload: ChatAttachmentReadChunkInput,
+	success: ChatAttachmentReadChunkResult,
+	error: Schema.Union([ChatAttachmentReadError, AuthRpcError])
+});
 const WsShellOpenInEditorRpc = Rpc.make(WS_METHODS.shellOpenInEditor, {
 	payload: OpenInEditorInput,
 	error: Schema.Union([OpenError, AuthRpcError])
@@ -11719,14 +12456,142 @@ const WsAgentControlDisconnectMcpInstallationRpc = Rpc.make(AGENT_CONTROL_WS_MET
 	success: AgentControlMcpInstallationMutationResult,
 	error: Schema.Union([AgentControlExternalRpcError, AuthRpcError])
 });
-const WsRpcGroup = RpcGroup.make(WsServerGetConfigRpc, WsServerGetAdvertisedEndpointsRpc, WsServerGetDiagnosticsMetricsRpc, WsServerGetStatisticsRpc, WsServerGetUsageSummaryRpc, WsServerRefreshProvidersRpc, WsServerUpdateProviderRpc, WsServerUpsertKeybindingRpc, WsKeybindingsReplaceCustomRpc, WsServerGetSettingsRpc, WsServerUpdateSettingsRpc, WsServerGetDiagnosticsSnapshotRpc, WsServerDiscoverSourceControlRpc, WsServerListOpinionatedPluginsRpc, WsServerCheckOpinionatedPluginsRpc, WsServerInstallOpinionatedPluginRpc, WsMcpListWorkspacesRpc, WsMcpListServersRpc, WsMcpUpsertServerRpc, WsMcpSetServerEnabledRpc, WsMcpRemoveServerRpc, WsMcpReloadServersRpc, WsMcpStartOauthLoginRpc, WsSourceControlLookupRepositoryRpc, WsSourceControlSearchRepositoriesRpc, WsSourceControlCloneRepositoryRpc, WsSourceControlPublishRepositoryRpc, WsSourceControlListIssuesRpc, WsSourceControlGetIssueRpc, WsSourceControlSearchIssuesRpc, WsSourceControlListChangeRequestsRpc, WsSourceControlSearchChangeRequestsRpc, WsSourceControlGetChangeRequestDetailRpc, WsSourceControlGetChangeRequestDiffRpc, WsSourceControlMergeChangeRequestRpc, WsSourceControlCreateIssueRpc, WsSourceControlAddIssueCommentRpc, WsSourceControlAddIssueCommentReactionRpc, WsSourceControlAddChangeRequestCommentRpc, WsSourceControlAddChangeRequestCommentReactionRpc, WsSourceControlListIssueLabelsRpc, WsSourceControlListIssueAssigneesRpc, WsSourceControlListWorkflowRunsRpc, WsSourceControlGetWorkflowRunJobsRpc, WsSourceControlGetWorkflowJobLogRpc, WsSourceControlRerunWorkflowRpc, WsTextGenerationGenerateIssueContentRpc, WsTextGenerationGenerateBranchNameRpc, WsAtlassianListConnectionsRpc, WsAtlassianStartOAuthRpc, WsAtlassianDisconnectRpc, WsAtlassianRefreshRpc, WsAtlassianListResourcesRpc, WsAtlassianGetProjectLinkRpc, WsAtlassianSaveProjectLinkRpc, WsAtlassianSaveManualBitbucketTokenRpc, WsAtlassianSaveManualJiraTokenRpc, WsWorkItemsListProjectsRpc, WsWorkItemsListRpc, WsWorkItemsSearchRpc, WsWorkItemsGetRpc, WsWorkItemsAddCommentRpc, WsWorkItemsEditCommentRpc, WsWorkItemsUpdateRpc, WsWorkItemsListTransitionsRpc, WsWorkItemsTransitionRpc, WsProjectsListEntriesRpc, WsProjectsSearchEntriesRpc, WsProjectsReadFileRpc, WsProjectsReadFileBinaryRpc, WsProjectsWriteFileRpc, WsProjectsStageFileReferenceRpc, WsShellOpenInEditorRpc, WsFilesystemBrowseRpc, WsSubscribeVcsStatusRpc, WsVcsPullRpc, WsVcsRefreshStatusRpc, WsGitRunStackedActionRpc, WsGitResolvePullRequestRpc, WsGitPreparePullRequestThreadRpc, WsGitCreateWorktreeForProjectRpc, WsGitFindWorktreeForOriginRpc, WsGitArchiveWorktreeRpc, WsGitRestoreWorktreeRpc, WsGitDeleteWorktreeRpc, WsThreadsSetManualBucketRpc, WsThreadsSetManualPositionRpc, WsSearchThreadMessagesRpc, WsThreadPriorityEnsureCurrentRpc, WsWorktreesSetManualPositionRpc, WsProjectsInitializeGitRpc, WsVcsListRefsRpc, WsVcsCreateWorktreeRpc, WsVcsRemoveWorktreeRpc, WsVcsCreateRefRpc, WsVcsSwitchRefRpc, WsVcsInitRpc, WsTerminalOpenRpc, WsTerminalWriteRpc, WsTerminalResizeRpc, WsTerminalClearRpc, WsTerminalRestartRpc, WsTerminalCloseRpc, WsSubscribeTerminalEventsRpc, WsSubscribeServerConfigRpc, WsSubscribeServerLifecycleRpc, WsSubscribeAuthAccessRpc, WsAgentControlListProposalsRpc, WsAgentControlGetProposalRpc, WsAgentControlAcceptProposalRpc, WsAgentControlRejectProposalRpc, WsAgentControlSubscribeProposalsRpc, WsAgentControlListIntegrationsRpc, WsAgentControlCreateIntegrationRpc, WsAgentControlUpdateIntegrationRpc, WsAgentControlResumeIntegrationPairingRpc, WsAgentControlRevokeIntegrationRpc, WsAgentControlDeleteIntegrationRpc, WsAgentControlListMcpInstallationsRpc, WsAgentControlConnectMcpInstallationRpc, WsAgentControlRepairMcpInstallationRpc, WsAgentControlDisconnectMcpInstallationRpc, WsOrchestrationDispatchCommandRpc, WsOrchestrationGetWorkflowScriptRpc, WsOrchestrationGetTaskOutputRpc, WsOrchestrationStopBackgroundTaskRpc, WsOrchestrationGetTurnDiffRpc, WsOrchestrationGetFullThreadDiffRpc, WsOrchestrationSearchThreadMessagesRpc, WsOrchestrationGetThreadWindowRpc, WsOrchestrationGetThreadHistoryPageRpc, WsOrchestrationReplayEventsRpc, WsOrchestrationReplayEventsPageRpc, WsOrchestrationSubscribeShellRpc, WsOrchestrationSubscribeThreadRpc, WsOrchestrationSubscribeThreadWindowRpc, WsContextHandoffGetInspectionSummaryRpc, WsContextHandoffListInspectionEntriesRpc, WsContextHandoffReadRawPayloadChunkRpc, WsContextHandoffReadExportChunkRpc);
+const WsRpcGroup = RpcGroup.make(WsServerGetConfigRpc, WsServerGetAdvertisedEndpointsRpc, WsServerGetDiagnosticsMetricsRpc, WsServerGetStatisticsRpc, WsServerGetUsageSummaryRpc, WsServerRefreshProvidersRpc, WsServerUpdateProviderRpc, WsServerUpsertKeybindingRpc, WsKeybindingsReplaceCustomRpc, WsServerGetSettingsRpc, WsServerUpdateSettingsRpc, WsServerGetDiagnosticsSnapshotRpc, WsServerSignalDiagnosticProcessRpc, WsServerGetResourceTelemetryHistoryRpc, WsServerRetryResourceTelemetryRpc, WsServerDiscoverSourceControlRpc, WsServerListOpinionatedPluginsRpc, WsServerCheckOpinionatedPluginsRpc, WsServerInstallOpinionatedPluginRpc, WsMcpListWorkspacesRpc, WsMcpListServersRpc, WsMcpUpsertServerRpc, WsMcpSetServerEnabledRpc, WsMcpRemoveServerRpc, WsMcpReloadServersRpc, WsMcpStartOauthLoginRpc, WsSourceControlLookupRepositoryRpc, WsSourceControlSearchRepositoriesRpc, WsSourceControlCloneRepositoryRpc, WsSourceControlPublishRepositoryRpc, WsSourceControlListIssuesRpc, WsSourceControlGetIssueRpc, WsSourceControlSearchIssuesRpc, WsSourceControlListChangeRequestsRpc, WsSourceControlSearchChangeRequestsRpc, WsSourceControlGetChangeRequestDetailRpc, WsSourceControlGetChangeRequestDiffRpc, WsSourceControlMergeChangeRequestRpc, WsSourceControlCreateIssueRpc, WsSourceControlAddIssueCommentRpc, WsSourceControlAddIssueCommentReactionRpc, WsSourceControlAddChangeRequestCommentRpc, WsSourceControlAddChangeRequestCommentReactionRpc, WsSourceControlListIssueLabelsRpc, WsSourceControlListIssueAssigneesRpc, WsSourceControlListWorkflowRunsRpc, WsSourceControlGetWorkflowRunJobsRpc, WsSourceControlGetWorkflowJobLogRpc, WsSourceControlRerunWorkflowRpc, WsTextGenerationGenerateIssueContentRpc, WsTextGenerationGenerateBranchNameRpc, WsAtlassianListConnectionsRpc, WsAtlassianStartOAuthRpc, WsAtlassianDisconnectRpc, WsAtlassianRefreshRpc, WsAtlassianListResourcesRpc, WsAtlassianGetProjectLinkRpc, WsAtlassianSaveProjectLinkRpc, WsAtlassianSaveManualBitbucketTokenRpc, WsAtlassianSaveManualJiraTokenRpc, WsWorkItemsListProjectsRpc, WsWorkItemsListRpc, WsWorkItemsSearchRpc, WsWorkItemsGetRpc, WsWorkItemsAddCommentRpc, WsWorkItemsEditCommentRpc, WsWorkItemsUpdateRpc, WsWorkItemsListTransitionsRpc, WsWorkItemsTransitionRpc, WsProjectsListEntriesRpc, WsProjectsSearchEntriesRpc, WsProjectsReadFileRpc, WsProjectsReadFileBinaryRpc, WsProjectsWriteFileRpc, WsProjectsStageFileReferenceRpc, WsChatAttachmentsCreateFileUploadRpc, WsChatAttachmentsReadChunkRpc, WsShellOpenInEditorRpc, WsFilesystemBrowseRpc, WsSubscribeVcsStatusRpc, WsVcsPullRpc, WsVcsRefreshStatusRpc, WsGitRunStackedActionRpc, WsGitResolvePullRequestRpc, WsGitPreparePullRequestThreadRpc, WsGitCreateWorktreeForProjectRpc, WsGitFindWorktreeForOriginRpc, WsGitArchiveWorktreeRpc, WsGitRestoreWorktreeRpc, WsGitDeleteWorktreeRpc, WsThreadsSetManualBucketRpc, WsThreadsSetManualPositionRpc, WsSearchThreadMessagesRpc, WsThreadPriorityEnsureCurrentRpc, WsWorktreesSetManualPositionRpc, WsProjectsInitializeGitRpc, WsVcsListRefsRpc, WsVcsCreateWorktreeRpc, WsVcsRemoveWorktreeRpc, WsVcsCreateRefRpc, WsVcsSwitchRefRpc, WsVcsInitRpc, WsTerminalOpenRpc, WsTerminalWriteRpc, WsTerminalResizeRpc, WsTerminalClearRpc, WsTerminalRestartRpc, WsTerminalCloseRpc, WsSubscribeTerminalEventsRpc, WsSubscribeServerConfigRpc, WsSubscribeServerLifecycleRpc, WsSubscribeAuthAccessRpc, WsAgentControlListProposalsRpc, WsAgentControlGetProposalRpc, WsAgentControlAcceptProposalRpc, WsAgentControlRejectProposalRpc, WsAgentControlSubscribeProposalsRpc, WsAgentControlListIntegrationsRpc, WsAgentControlCreateIntegrationRpc, WsAgentControlUpdateIntegrationRpc, WsAgentControlResumeIntegrationPairingRpc, WsAgentControlRevokeIntegrationRpc, WsAgentControlDeleteIntegrationRpc, WsAgentControlListMcpInstallationsRpc, WsAgentControlConnectMcpInstallationRpc, WsAgentControlRepairMcpInstallationRpc, WsAgentControlDisconnectMcpInstallationRpc, WsOrchestrationDispatchCommandRpc, WsOrchestrationGetWorkflowScriptRpc, WsOrchestrationGetTaskOutputRpc, WsOrchestrationStopBackgroundTaskRpc, WsOrchestrationGetTurnDiffRpc, WsOrchestrationGetFullThreadDiffRpc, WsOrchestrationSearchThreadMessagesRpc, WsOrchestrationGetThreadWindowRpc, WsOrchestrationGetThreadHistoryPageRpc, WsOrchestrationReplayEventsRpc, WsOrchestrationReplayEventsPageRpc, WsOrchestrationSubscribeShellRpc, WsOrchestrationSubscribeThreadRpc, WsOrchestrationSubscribeThreadWindowRpc, WsContextHandoffGetInspectionSummaryRpc, WsContextHandoffListInspectionEntriesRpc, WsContextHandoffReadRawPayloadChunkRpc, WsContextHandoffReadExportChunkRpc);
 /**
 * Hosted relay channels carry both groups through one lifecycle-owned encrypted
 * channel. Direct clients keep the device group on its own low-priority socket
-* so video-adjacent work cannot contend with chat RPC.
+* so video-adjacent work cannot contend with chat RPC. The explicit annotation
+* keeps the merged RPC union within the compiler's serializable type limit.
 */
 const WsHostedRpcGroup = WsRpcGroup.merge(WsDeviceRpcGroup);
 //#endregion
+//#region ../../packages/contracts/src/computerUse.ts
+const boundedText = Schema.String.check(Schema.isMaxLength(512));
+const ComputerAppAccess = Schema.Literals([
+	"ask",
+	"allow",
+	"block"
+]);
+const ComputerBrowser = Schema.Literals([
+	"ryco",
+	"chrome",
+	"brave",
+	"edge"
+]);
+const ComputerUsePolicy = Schema.Struct({
+	enabled: Schema.Boolean.pipe(Schema.withDecodingDefault(Effect.succeed(false))),
+	foregroundEnabled: Schema.Boolean.pipe(Schema.withDecodingDefault(Effect.succeed(false))),
+	apps: Schema.Record(boundedText, ComputerAppAccess).pipe(Schema.withDecodingDefault(Effect.succeed({}))),
+	browsers: Schema.Array(ComputerBrowser).pipe(Schema.withDecodingDefault(Effect.succeed([])))
+});
+const ComputerUseApp = Schema.Struct({
+	id: boundedText,
+	name: boundedText
+});
+const ComputerUseActivity = Schema.Struct({
+	threadId: Schema.String,
+	target: boundedText,
+	mode: Schema.Literals(["background", "foreground"]),
+	action: boundedText,
+	x: Schema.optionalKey(Schema.Number),
+	y: Schema.optionalKey(Schema.Number)
+});
+Schema.Struct({
+	policy: ComputerUsePolicy,
+	apps: Schema.Array(ComputerUseApp),
+	connectedBrowsers: Schema.Array(ComputerBrowser),
+	accessibility: Schema.String,
+	screenRecording: Schema.String,
+	helperAvailable: Schema.Boolean,
+	permissionInfo: Schema.optionalKey(Schema.Struct({
+		checkedAt: Schema.NullOr(Schema.String),
+		error: Schema.NullOr(boundedText),
+		appName: boundedText,
+		development: Schema.Boolean
+	})),
+	activity: Schema.NullOr(ComputerUseActivity),
+	error: Schema.NullOr(boundedText)
+});
+Schema.Struct({
+	browser: ComputerBrowser,
+	url: Schema.String,
+	token: Schema.String
+});
+/** Only the backend receives this through its private bootstrap descriptor. */
+const ComputerUseBridgeConfig = Schema.Struct({
+	url: Schema.String,
+	token: Schema.String.check(Schema.isMinLength(43), Schema.isMaxLength(43))
+});
+const ComputerUseRequest = Schema.Struct({
+	sessionId: Schema.String.check(Schema.isMinLength(1), Schema.isMaxLength(256)),
+	threadId: Schema.String.check(Schema.isMinLength(1), Schema.isMaxLength(256)),
+	turnId: Schema.String.check(Schema.isMinLength(1), Schema.isMaxLength(256)),
+	tool: Schema.Literals(["computer", "browser"]),
+	args: Schema.Record(Schema.String, Schema.Unknown)
+});
+const ComputerUseResult = Schema.Struct({
+	content: Schema.Array(Schema.Union([Schema.Struct({
+		type: Schema.Literal("text"),
+		text: Schema.String
+	}), Schema.Struct({
+		type: Schema.Literal("image"),
+		data: Schema.String,
+		mimeType: Schema.Literals(["image/png", "image/jpeg"])
+	})])),
+	isError: Schema.optionalKey(Schema.Boolean)
+});
+//#endregion
+//#region ../../packages/contracts/src/projectBrowser.ts
+const text = Schema.String.check(Schema.isMaxLength(8192));
+const ProjectBrowserTab = Schema.Struct({
+	id: Schema.String,
+	project: text,
+	title: text,
+	url: text,
+	loading: Schema.Boolean,
+	canGoBack: Schema.Boolean,
+	canGoForward: Schema.Boolean,
+	zoom: Schema.Number,
+	presentation: Schema.Literals([
+		"background",
+		"panel",
+		"window"
+	]),
+	error: Schema.NullOr(text)
+});
+Schema.Struct({ tabs: Schema.Array(ProjectBrowserTab) });
+Schema.Struct({
+	action: Schema.Literals([
+		"navigate",
+		"back",
+		"forward",
+		"reload",
+		"stop",
+		"close",
+		"zoom",
+		"devtools",
+		"popout",
+		"dock"
+	]),
+	tab: Schema.String,
+	url: Schema.optionalKey(text),
+	zoom: Schema.optionalKey(Schema.Number)
+});
+Schema.Struct({
+	owner: Schema.String.check(Schema.isMinLength(1), Schema.isMaxLength(128)),
+	tab: Schema.NullOr(Schema.String),
+	x: Schema.Number,
+	y: Schema.Number,
+	width: Schema.Number,
+	height: Schema.Number
+});
+Schema.Struct({
+	url: text,
+	port: Schema.Number,
+	process: Schema.String,
+	projectMatch: Schema.Boolean
+});
+//#endregion
 //#region ../../packages/shared/src/schemaJson.ts
 const decodeJsonResult = (schema) => {
 	const decode = Schema.decodeExit(Schema.fromJsonString(schema));
@@ -11805,4 +12670,4 @@ const collectUint8StreamText = (input) => {
 	})));
 };
 //#endregion
-export { AgentControlExternalOverviewResult as $, DESKTOP_NATIVE_NODE_CLAIM_COMMIT_PATH as $a, ThreadStatusBucketOverriddenPayload as $i, ClaudeSettings as $n, ThreadId as $o, OrchestrationEventType as $r, AgentControlMcpRecentActivityResult as $t, AGENT_CONTROL_MCP_AUTOMATION_LIST_PROMPT_MAX_CHARS as A, VcsProcessTimeoutError as Aa, ProjectionPendingApprovalDecision as Ai, AtlassianConnectionStatus as An, AuthRevokeClientSessionInput as Ao, CONTEXT_HANDOFF_INSPECTION_MAX_RESPONSE_BYTES as Ar, AgentControlMcpProposeAutomationUpdateInput as At, AGENT_CONTROL_TERMINAL_PROPOSAL_STATUSES as B, ModelCapabilities as Ba, ThreadDeletedPayload as Bi, McpProviderCapabilities as Bn, EnvironmentId$1 as Bo, DEFAULT_PROJECT_METADATA_DIR as Br, AgentControlMcpProposeProjectCreateInput as Bt, AGENT_CONTROL_DEVICE_ACTION_KINDS as C, SourceControlProviderError as Ca, PROVIDER_SEND_TURN_MAX_INPUT_CHARS as Ci, DeviceUdid as Cn, RelayChannelId as Co, ProviderSteerTurnInput as Cr, AgentControlMcpListThreadsInput as Ct, AGENT_CONTROL_EXTERNAL_MCP_TOOL_NAMES as D, VcsOutputDecodeError as Da, ProjectMetaUpdatedPayload as Di, AtlassianCapability as Dn, AuthBootstrapInput as Do, CONTEXT_HANDOFF_ACTIVITY_KIND as Dr, AgentControlMcpOrchestrationEventsResult as Dt, AGENT_CONTROL_EXTERNAL_MCP_TOOLS as E, VcsDriverKind as Ea, ProjectDeletedPayload as Ei, ThreadPriorityRpcError as En, RelayProtocolVersion as Eo, AgentTokenMode as Er, AgentControlMcpOperationalReadInput as Et, AGENT_CONTROL_MCP_TOOLS as F, DEFAULT_GIT_TEXT_GENERATION_MODEL as Fa, RuntimeMode as Fi, McpInventoryResource as Fn, AtlassianResourceId as Fo, ContextHandoffDigest as Fr, AgentControlMcpProposeDeviceInstallInput as Ft, AgentControlAutomationDefinition as G, DEFAULT_TERMINAL_ID as Ga, ThreadMetaUpdatedPayload as Gi, McpServerWritableConfig as Gn, PositiveInt as Go, OrchestrationAggregateKind as Gr, AgentControlMcpReadAutomationInput as Gt, AgentControlActionKind as H, ProviderInstanceId as Ha, ThreadGoalUpdatedPayload as Hi, McpServer as Hn, IsoDateTime as Ho, ModelSelection as Hr, AgentControlMcpProposeProjectUpdateInput as Ht, AGENT_CONTROL_MCP_TOOL_NAMES as I, DEFAULT_GIT_TEXT_GENERATION_MODEL_BY_PROVIDER as Ia, ThreadActivityAppendedPayload as Ii, McpInventoryResourceTemplate as In, AuthSessionId as Io, ContextHandoffEndpointSnapshot as Ir, AgentControlMcpProposeDeviceLaunchInput as It, AgentControlAutomationRunId as J, TerminalNotRunningError as Ja, ThreadRevertedPayload as Ji, McpWorkspaceId as Jn, RuntimeItemId as Jo, OrchestrationCheckpointSummary as Jr, AgentControlMcpReadDeviceContentInput as Jt, AgentControlAutomationId as K, TerminalCwdError as Ka, ThreadPriorityProjectedRanking as Ki, McpSettingsError as Kn, ProjectId as Ko, OrchestrationCheckpointFile as Kr, AgentControlMcpReadAutomationResult as Kt, AGENT_CONTROL_MCP_WAIT_TIMEOUT_MS_DEFAULT as L, DEFAULT_GIT_TEXT_GENERATION_OPTIONS_BY_PROVIDER as La, ThreadArchivedPayload as Li, McpInventoryTool as Ln, CheckpointRef as Lo, ContextHandoffInspectionError as Lr, AgentControlMcpProposeDeviceOpenUrlInput as Lt, AGENT_CONTROL_MCP_OPERATIONAL_RANGE_MAX_MS as M, ThreadPriorityBatchId as Ma, ProviderApprovalDecision as Mi, GitCommandError as Mn, AuthRpcError as Mo, ChatAttachment as Mr, AgentControlMcpProposeDeviceBootInput as Mt, AGENT_CONTROL_MCP_OPERATIONAL_RETENTION_MS as N, ThreadPriorityCandidateId as Na, ProviderInteractionMode as Ni, GitManagerError as Nn, ApprovalRequestId as No, ClientOrchestrationCommand as Nr, AgentControlMcpProposeDeviceDetachInput as Nt, AGENT_CONTROL_EXTERNAL_PAIRING_CODE_TTL_MS as O, VcsProcessExitError as Oa, ProjectMetadataDir as Oi, AtlassianConnectionError as On, AuthClientMetadataDeviceType as Oo, CONTEXT_HANDOFF_ERROR_MAX_CHARS as Or, AgentControlMcpProposeAutomationCancelInput as Ot, AGENT_CONTROL_MCP_READ_THREAD_TEXT_BUDGET_CHARS as P, ThreadPriorityFingerprint as Pa, ProviderSessionRuntimeStatus as Pi, TextGenerationError as Pn, AtlassianConnectionId as Po, ContextHandoffActivityPayload as Pr, AgentControlMcpProposeDeviceInputInput as Pt, AgentControlExternalIntegration as Q, OpenError as Qa, ThreadSettlementOverride as Qi, ServerProviderUpdateError as Qn, RuntimeTaskId as Qo, OrchestrationEventMetadata as Qr, AgentControlMcpReadThreadResult as Qt, AGENT_CONTROL_MCP_WAIT_TIMEOUT_MS_MAX as R, DEFAULT_MODEL as Ra, ThreadAttachedToWorktreePayload as Ri, McpListServersResult as Rn, CommandId as Ro, ContextHandoffMode as Rr, AgentControlMcpProposeDeviceRecordingInput as Rt, AGENT_CONTROL_CAPABILITIES as S, SOURCE_CONTROL_WORKFLOW_LOG_MAX_BYTES as Sa, PROVIDER_SEND_TURN_MAX_IMAGE_BYTES as Si, DeviceRpcError as Sn, RelayCapability as So, ProviderSessionStartInput as Sr, AgentControlMcpListProjectsResult as St, AGENT_CONTROL_EXTERNAL_CREDENTIAL_AUDIENCE as T, truncateSourceControlDetailContent as Ta, ProjectCreatedPayload as Ti, ThreadPriorityCandidateRanking as Tn, RelayFrame as To, ProviderStopSessionInput as Tr, AgentControlMcpMutationResult as Tt, AgentControlActionPlan as U, defaultInstanceIdForDriver as Ua, ThreadInteractionModeSetPayload as Ui, McpServerConfig as Un, MessageId as Uo, ORCHESTRATION_WS_METHODS as Ur, AgentControlMcpProposeSettingsChangeInput as Ut, AGENT_CONTROL_WS_METHODS as V, ProviderDriverKind as Va, ThreadGoalClearedPayload as Vi, McpProviderSupport as Vn, EventId as Vo, DEFAULT_PROVIDER_INTERACTION_MODE as Vr, AgentControlMcpProposeProjectRemoveInput as Vt, AgentControlAutomation as W, isProviderDriverKind as Wa, ThreadMessageSentPayload as Wi, McpServerName as Wn, NonNegativeInt as Wo, OrchestrationActorKind as Wr, AgentControlMcpProviderRuntimeEventsResult as Wt, AgentControlExternalCapabilitiesResult as X, TerminalSubscriptionResyncError as Xa, ThreadSessionSetPayload as Xi, UsageReadError as Xn, RuntimeSessionId as Xo, OrchestrationDispatchCommandError as Xr, AgentControlMcpReadDeviceStateResult as Xt, AgentControlCapability as Y, TerminalSessionLookupError as Ya, ThreadRuntimeModeSetPayload as Yi, OpinionatedPluginError as Yn, RuntimeRequestId as Yo, OrchestrationCommandReceiptStatus as Yr, AgentControlMcpReadDeviceStateInput as Yt, AgentControlExternalCreateTaskInput as Z, EDITORS as Za, ThreadSettledPayload as Zi, ServerProvider as Zn, RuntimeSubagentId as Zo, OrchestrationEvent as Zr, AgentControlMcpReadThreadInput as Zt, ProjectWriteFileError as _, ThreadGoal as _a, OrchestrationThreadHistoryCursor as _i, AgentControlRpcError as _n, RELAY_MAX_DATA_CHUNK_BYTES as _o, isToolLifecycleItemType as _r, AgentControlMcpListAutomationsInput as _t, WS_METHODS as a, TurnDispatchMode as aa, OrchestrationGetWorkflowScriptError as ai, AgentControlOperationId as an, LOCAL_INTRODUCTION_COMPLETE_PATH as ao, OpenCodeSettings as ar, AgentControlIntegrationId as at, AGENT_CONTROL_AUTOMATION_MIN_INTERVAL_MS as b, WorkItemProviderError as ba, PROVIDER_SEND_TURN_MAX_ATTACHMENT_TOTAL_BYTES as bi, DEVICE_SWIPE_DURATION_MAX_MS as bn, RELAY_MAX_RPC_MESSAGE_BYTES as bo, ProviderRespondToUserInputInput as br, AgentControlMcpListDevicesResult as bt, WsRpcGroup as c, WorktreeDeletedPayload as ca, OrchestrationProposedPlanId as ci, AgentControlPlanDigest as cn, LOCAL_INTRODUCTION_MAX_BODY_BYTES as co, ThreadEnvMode as cr, AgentControlMcpControlRequestResult as ct, PROJECT_STAGE_FILE_MAX_BYTES as d, WorktreeRestoredPayload as da, OrchestrationSession as di, AgentControlProposal as dn, HubEnrollmentCeremonyDetail as do, KeybindingsConfigError as dr, AgentControlMcpDiagnosticsSummaryResult as dt, ThreadTokenModeSetPayload as ea, OrchestrationGetFullThreadDiffError as ei, AgentControlMcpSendMessageInput as en, DESKTOP_NATIVE_NODE_CLAIM_DESCRIPTOR_PATH as eo, CodexSettings as er, TrimmedNonEmptyString as es, AgentControlExternalProjectScope as et, ProjectListEntriesError as f, WorktreeSourceControlStateUpdatedPayload as fa, OrchestrationSessionStatus as fi, AgentControlProposalId as fn, HubEnrollmentStartResult as fo, MODEL_PICKER_JUMP_KEYBINDING_COMMANDS as fr, AgentControlMcpInstallation as ft, ProjectStageFileReferenceError as g, WorktreeId as ga, OrchestrationThreadActivityTone as gi, AgentControlRiskTag as gn, RELAY_MAX_CONTROL_FRAME_BYTES as go, ToolLifecycleItemType as gr, AgentControlMcpListAutomationRunsResult as gt, ProjectSearchEntriesError as h, Worktree as ha, OrchestrationThread as hi, AgentControlResultEnvelope as hn, RELAY_FRAME_TYPES as ho, RuntimeSubagentStatus as hr, AgentControlMcpListAutomationRunsInput as ht, fromLenientJson as i, ThreadUnsettledPayload as ia, OrchestrationGetTurnDiffResult as ii, AgentControlOperation as in, DesktopNativeNodeClaimSignRequest as io, GrokSettings as ir, AgentControlExternalWaitForTaskInput as it, AGENT_CONTROL_MCP_MESSAGE_TEXT_MAX_CHARS as j, VcsUnsupportedOperationError as ja, ProjectionPendingApprovalStatus as ji, AtlassianProduct as jn, AuthRevokePairingLinkInput as jo, CONTEXT_HANDOFF_WS_METHODS as jr, AgentControlMcpProposeDeviceAttachInput as jt, AGENT_CONTROL_EXTERNAL_PROPOSAL_TTL_MS as k, VcsProcessSpawnError as ka, ProjectScript as ki, AtlassianConnectionKind as kn, AuthCreatePairingCredentialInput as ko, CONTEXT_HANDOFF_INSPECTION_CHUNK_MAX_BYTES as kr, AgentControlMcpProposeAutomationCreateInput as kt, FilesystemBrowseError as l, WorktreeManualPositionSetPayload as la, OrchestrationReadModel as li, AgentControlPrincipal as ln, LocalIntroductionCompleteRequest as lo, KeybindingRule as lr, AgentControlMcpCreateThreadsInput as lt, ProjectReadFileError as m, StatusBucket as ma, OrchestrationStopBackgroundTaskError as mi, AgentControlRequestId as mn, RELAY_AUTHENTICATION_DEADLINE_MS as mo, THREAD_JUMP_KEYBINDING_COMMANDS as mr, AgentControlMcpInterruptThreadInput as mt, decodeJsonResult as n, ThreadTurnInterruptRequestedPayload as na, OrchestrationGetTaskOutputError as ni, AgentControlMcpUpdateThreadInput as nn, DESKTOP_NATIVE_NODE_CLAIM_SIGN_PATH as no, CursorSettings as nr, AgentControlExternalTaskId as nt, WsDeviceRpcGroup as o, WorktreeArchivedPayload as oa, OrchestrationMessage as oi, AgentControlOperationState as on, LOCAL_INTRODUCTION_CONTROL_HEADER as oo, ServerSettings as or, AgentControlMcpCapabilitiesResult as ot, ProjectReadFileBinaryError as p, PullRequestState as pa, OrchestrationShellSnapshot as pi, AgentControlProposalStatus as pn, HubIdentitySummary as po, ResolvedKeybindingRule as pr, AgentControlMcpInstallationId as pt, AgentControlAutomationRun as q, TerminalHistoryError as qa, ThreadProposedPlanUpsertedPayload as qi, McpWorkspace as qn, ProviderItemId as qo, OrchestrationCheckpointStatus as qr, AgentControlMcpReadControlRequestInput as qt, formatSchemaError as r, ThreadUnarchivedPayload as ra, OrchestrationGetTurnDiffError as ri, AgentControlMcpWaitForControlRequestInput as rn, DesktopNativeNodeClaimCommitRequest as ro, DEFAULT_SERVER_SETTINGS as rr, AgentControlExternalTaskIdInput as rt, WsHostedRpcGroup as s, WorktreeCreatedPayload as sa, OrchestrationMessageRole as si, AgentControlOperationStatus as sn, LOCAL_INTRODUCTION_DESCRIPTOR_PATH as so, ServerSettingsError as sr, AgentControlMcpContextResult as st, collectUint8StreamText as t, ThreadTurnDiffCompletedPayload as ta, OrchestrationGetSnapshotError as ti, AgentControlMcpSettingsSummaryResult as tn, DESKTOP_NATIVE_NODE_CLAIM_MAX_BODY_BYTES as to, CopilotSettings as tr, TurnId as ts, AgentControlExternalRpcError as tt, PROJECT_READ_FILE_BINARY_MAX_BYTES as u, WorktreeMetaUpdatedPayload as ua, OrchestrationReplayEventsError as ui, AgentControlPromptSummary as un, HubConnectorStatus as uo, KeybindingsConfig as ur, AgentControlMcpDiagnosticsSummaryInput as ut, AGENT_CONTROL_ACTION_CAPABILITIES as v, WORK_ITEM_DETAIL_BODY_MAX_BYTES as va, OrchestrationThreadHistoryError as vi, DEVICE_CAPABILITY_LABELS as vn, RELAY_MAX_DATA_FRAME_BYTES as vo, ProviderInterruptTurnInput as vr, AgentControlMcpListAutomationsResult as vt, AGENT_CONTROL_ERROR_CODES as w, SourceControlRepositoryError as wa, ProjectAvatarSetPayload as wi, ThreadPriorityBatchSnapshot as wn, RelayEffectiveRole as wo, ProviderStopBackgroundTaskInput as wr, AgentControlMcpListThreadsResult as wt, AGENT_CONTROL_AUTOMATION_PROPOSAL_TTL_MS as x, WorkItemProviderKind as xa, PROVIDER_SEND_TURN_MAX_FILE_BYTES as xi, DEVICE_WS_METHODS as xn, RELAY_SUPPORTED_VERSION_RANGE as xo, ProviderSendTurnInput as xr, AgentControlMcpListProjectsInput as xt, AGENT_CONTROL_AUTOMATION_MAX_HORIZON_MS as y, WORK_ITEM_DETAIL_COMMENT_BODY_MAX_BYTES as ya, OrchestrationWorktreeShell as yi, DEVICE_FRAME_MAGIC as yn, RELAY_MAX_RETRY_AFTER_MS as yo, ProviderRespondToRequestInput as yr, AgentControlMcpListDevicesInput as yt, AGENT_CONTROL_RISK_TAGS as z, MODEL_SLUG_ALIASES_BY_PROVIDER as za, ThreadCreatedPayload as zi, McpOauthLoginResult as zn, ContextHandoffId as zo, DEFAULT_AGENT_TOKEN_MODE as zr, AgentControlMcpProposeDeviceShutdownInput as zt };
+export { AgentControlExternalCapabilitiesResult as $, ProviderInstanceId as $a, ThreadMessageSentPayload as $i, UsageReadError as $n, CheckpointRef as $o, OrchestrationActorKind as $r, AgentControlMcpReadDeviceStateResult as $t, AGENT_CONTROL_EXTERNAL_MCP_TOOL_NAMES as A, WORK_ITEM_DETAIL_COMMENT_BODY_MAX_BYTES as Aa, PROVIDER_SEND_TURN_MAX_FILE_BYTES as Ai, AtlassianCapability as An, RELAY_AUTHENTICATION_DEADLINE_MS as Ao, CHAT_ATTACHMENT_READ_CHUNK_BYTES as Ar, AgentControlMcpOrchestrationEventsResult as At, AGENT_CONTROL_MCP_WAIT_TIMEOUT_MS_DEFAULT as B, VcsProcessSpawnError as Ba, ProjectionPendingApprovalStatus as Bi, McpInventoryTool as Bn, RelayEffectiveRole as Bo, ContextHandoffActivityPayload as Br, AgentControlMcpProposeDeviceOpenUrlInput as Bt, AGENT_CONTROL_AUTOMATION_MIN_INTERVAL_MS as C, WorktreeSourceControlStateUpdatedPayload as Ca, OrchestrationStopBackgroundTaskError as Ci, DEVICE_SWIPE_DURATION_MAX_MS as Cn, NATIVE_E2EE_MAX_GRANT_KEYS as Co, ProviderRespondToUserInputInput as Cr, AgentControlMcpListDevicesResult as Ct, AGENT_CONTROL_ERROR_CODES as D, WorktreeId as Da, OrchestrationThreadHistoryError as Di, ThreadPriorityBatchSnapshot as Dn, HubEnrollmentStartResult as Do, ProviderStopBackgroundTaskInput as Dr, AgentControlMcpListThreadsResult as Dt, AGENT_CONTROL_DEVICE_ACTION_KINDS as E, Worktree as Ea, OrchestrationThreadHistoryCursor as Ei, DeviceUdid as En, HubEnrollmentCeremonyDetail as Eo, ProviderSteerTurnInput as Er, AgentControlMcpListThreadsInput as Et, AGENT_CONTROL_MCP_OPERATIONAL_RANGE_MAX_MS as F, SourceControlRepositoryError as Fa, ProjectDeletedPayload as Fi, GitCommandError as Fn, RELAY_MAX_RETRY_AFTER_MS as Fo, CONTEXT_HANDOFF_MAX_INPUT_CHARS as Fr, AgentControlMcpProposeDeviceBootInput as Ft, AgentControlActionKind as G, ThreadPriorityFingerprint as Ga, ThreadActivityAppendedPayload as Gi, McpServer as Gn, AuthCreatePairingCredentialInput as Go, ContextHandoffMode as Gr, AgentControlMcpProposeProjectUpdateInput as Gt, AGENT_CONTROL_RISK_TAGS as H, VcsUnsupportedOperationError as Ha, ProviderInteractionMode as Hi, McpOauthLoginResult as Hn, RelayProtocolVersion as Ho, ContextHandoffDigest as Hr, AgentControlMcpProposeDeviceShutdownInput as Ht, AGENT_CONTROL_MCP_OPERATIONAL_RETENTION_MS as I, truncateSourceControlDetailContent as Ia, ProjectMetaUpdatedPayload as Ii, GitManagerError as In, RELAY_MAX_RPC_MESSAGE_BYTES as Io, CONTEXT_HANDOFF_WS_METHODS as Ir, AgentControlMcpProposeDeviceDetachInput as It, AgentControlAutomationDefinition as J, DEFAULT_GIT_TEXT_GENERATION_OPTIONS_BY_PROVIDER as Ja, ThreadCreatedPayload as Ji, McpServerWritableConfig as Jn, AuthRpcError as Jo, DEFAULT_PROVIDER_INTERACTION_MODE as Jr, AgentControlMcpReadAutomationInput as Jt, AgentControlActionPlan as K, DEFAULT_GIT_TEXT_GENERATION_MODEL as Ka, ThreadArchivedPayload as Ki, McpServerConfig as Kn, AuthRevokeClientSessionInput as Ko, DEFAULT_AGENT_TOKEN_MODE as Kr, AgentControlMcpProposeSettingsChangeInput as Kt, AGENT_CONTROL_MCP_READ_THREAD_TEXT_BUDGET_CHARS as L, VcsDriverKind as La, ProjectMetadataDir as Li, TextGenerationError as Ln, RELAY_SUPPORTED_VERSION_RANGE as Lo, ChatAttachment as Lr, AgentControlMcpProposeDeviceInputInput as Lt, AGENT_CONTROL_EXTERNAL_PROPOSAL_TTL_MS as M, WorkItemProviderKind as Ma, PROVIDER_SEND_TURN_MAX_INPUT_CHARS as Mi, AtlassianConnectionKind as Mn, RELAY_MAX_CONTROL_FRAME_BYTES as Mo, CONTEXT_HANDOFF_ERROR_MAX_CHARS as Mr, AgentControlMcpProposeAutomationCreateInput as Mt, AGENT_CONTROL_MCP_AUTOMATION_LIST_PROMPT_MAX_CHARS as N, SOURCE_CONTROL_WORKFLOW_LOG_MAX_BYTES as Na, ProjectAvatarSetPayload as Ni, AtlassianConnectionStatus as Nn, RELAY_MAX_DATA_CHUNK_BYTES as No, CONTEXT_HANDOFF_INSPECTION_CHUNK_MAX_BYTES as Nr, AgentControlMcpProposeAutomationUpdateInput as Nt, AGENT_CONTROL_EXTERNAL_CREDENTIAL_AUDIENCE as O, ThreadGoal as Oa, OrchestrationWorktreeShell as Oi, ThreadPriorityCandidateRanking as On, HubIdentitySummary as Oo, ProviderStopSessionInput as Or, AgentControlMcpMutationResult as Ot, AGENT_CONTROL_MCP_MESSAGE_TEXT_MAX_CHARS as P, SourceControlProviderError as Pa, ProjectCreatedPayload as Pi, AtlassianProduct as Pn, RELAY_MAX_DATA_FRAME_BYTES as Po, CONTEXT_HANDOFF_INSPECTION_MAX_RESPONSE_BYTES as Pr, AgentControlMcpProposeDeviceAttachInput as Pt, AgentControlCapability as Q, ProviderDriverKind as Qa, ThreadInteractionModeSetPayload as Qi, OpinionatedPluginError as Qn, AuthSessionId as Qo, ORCHESTRATION_WS_METHODS as Qr, AgentControlMcpReadDeviceStateInput as Qt, AGENT_CONTROL_MCP_TOOLS as R, VcsOutputDecodeError as Ra, ProjectScript as Ri, McpInventoryResource as Rn, RelayCapability as Ro, ChatAttachmentReadError as Rr, AgentControlMcpProposeDeviceInstallInput as Rt, AGENT_CONTROL_AUTOMATION_MAX_HORIZON_MS as S, WorktreeRestoredPayload as Sa, OrchestrationShellSnapshot as Si, DEVICE_FRAME_MAGIC as Sn, HubDeviceGrantClaims as So, ProviderRespondToRequestInput as Sr, AgentControlMcpListDevicesInput as St, AGENT_CONTROL_CAPABILITIES as T, StatusBucket as Ta, OrchestrationThreadActivityTone as Ti, DeviceRpcError as Tn, HubConnectorStatus as To, ProviderSessionStartInput as Tr, AgentControlMcpListProjectsResult as Tt, AGENT_CONTROL_TERMINAL_PROPOSAL_STATUSES as U, ThreadPriorityBatchId as Ua, ProviderSessionRuntimeStatus as Ui, McpProviderCapabilities as Un, AuthBootstrapInput as Uo, ContextHandoffEndpointSnapshot as Ur, AgentControlMcpProposeProjectCreateInput as Ut, AGENT_CONTROL_MCP_WAIT_TIMEOUT_MS_MAX as V, VcsProcessTimeoutError as Va, ProviderApprovalDecision as Vi, McpListServersResult as Vn, RelayFrame as Vo, ContextHandoffAppliedBudget as Vr, AgentControlMcpProposeDeviceRecordingInput as Vt, AGENT_CONTROL_WS_METHODS as W, ThreadPriorityCandidateId as Wa, RuntimeMode as Wi, McpProviderSupport as Wn, AuthClientMetadataDeviceType as Wo, ContextHandoffInspectionError as Wr, AgentControlMcpProposeProjectRemoveInput as Wt, AgentControlAutomationRun as X, MODEL_SLUG_ALIASES_BY_PROVIDER as Xa, ThreadGoalClearedPayload as Xi, McpWorkspace as Xn, AtlassianConnectionId as Xo, ModelContextWindowMetadata as Xr, AgentControlMcpReadControlRequestInput as Xt, AgentControlAutomationId as Y, DEFAULT_MODEL as Ya, ThreadDeletedPayload as Yi, McpSettingsError as Yn, ApprovalRequestId as Yo, FileAttachmentCreateUploadUrlError as Yr, AgentControlMcpReadAutomationResult as Yt, AgentControlAutomationRunId as Z, ModelCapabilities as Za, ThreadGoalUpdatedPayload as Zi, McpWorkspaceId as Zn, AtlassianResourceId as Zo, ModelSelection as Zr, AgentControlMcpReadDeviceContentInput as Zt, ProjectReadFileError as _, WorktreeArchivedPayload as _a, OrchestrationProposedPlanId as _i, AgentControlRequestId as _n, LOCAL_INTRODUCTION_CONTROL_HEADER as _o, THREAD_JUMP_KEYBINDING_COMMANDS as _r, TurnId as _s, AgentControlMcpInterruptThreadInput as _t, ComputerUseBridgeConfig as a, ThreadSessionSetPayload as aa, OrchestrationDispatchCommandError as ai, AgentControlMcpUpdateThreadInput as an, TerminalNotRunningError as ao, CursorSettings as ar, MessageId as as, AgentControlExternalTaskId as at, ProjectWriteFileError as b, WorktreeManualPositionSetPayload as ba, OrchestrationSession as bi, AgentControlRpcError as bn, LocalIntroductionCompleteRequest as bo, isToolLifecycleItemType as br, AgentControlMcpListAutomationsInput as bt, WS_METHODS as c, ThreadSnoozedPayload as ca, OrchestrationEventType as ci, AgentControlOperationId as cn, EDITORS as co, OpenCodeSettings as cr, ProjectId as cs, AgentControlIntegrationId as ct, WsRpcGroup as d, ThreadTurnDiffCompletedPayload as da, OrchestrationGetTaskOutputError as di, AgentControlPlanDigest as dn, DESKTOP_NATIVE_NODE_CLAIM_DESCRIPTOR_PATH as do, ThreadEnvMode as dr, RuntimeRequestId as ds, AgentControlMcpControlRequestResult as dt, ThreadMetaUpdatedPayload as ea, OrchestrationAggregateKind as ei, AgentControlMcpReadThreadInput as en, defaultInstanceIdForDriver as eo, ServerProvider as er, CommandId as es, AgentControlExternalCreateTaskInput as et, FilesystemBrowseError as f, ThreadTurnInterruptRequestedPayload as fa, OrchestrationGetTurnDiffError as fi, AgentControlPrincipal as fn, DESKTOP_NATIVE_NODE_CLAIM_MAX_BODY_BYTES as fo, KeybindingRule as fr, RuntimeSessionId as fs, AgentControlMcpCreateThreadsInput as ft, ProjectReadFileBinaryError as g, TurnDispatchMode as ga, OrchestrationMessageRole as gi, AgentControlProposalStatus as gn, LOCAL_INTRODUCTION_COMPLETE_PATH as go, ResolvedKeybindingRule as gr, TrimmedNonEmptyString as gs, AgentControlMcpInstallationId as gt, ProjectListEntriesError as h, ThreadUnsnoozedPayload as ha, OrchestrationMessage as hi, AgentControlProposalId as hn, DesktopNativeNodeClaimSignRequest as ho, MODEL_PICKER_JUMP_KEYBINDING_COMMANDS as hr, ThreadId as hs, AgentControlMcpInstallation as ht, fromLenientJson as i, ThreadRuntimeModeSetPayload as ia, OrchestrationCommandReceiptStatus as ii, AgentControlMcpSettingsSummaryResult as in, TerminalHistoryError as io, CopilotSettings as ir, IsoDateTime as is, AgentControlExternalRpcError as it, AGENT_CONTROL_EXTERNAL_PAIRING_CODE_TTL_MS as j, WorkItemProviderError as ja, PROVIDER_SEND_TURN_MAX_IMAGE_BYTES as ji, AtlassianConnectionError as jn, RELAY_FRAME_TYPES as jo, CONTEXT_HANDOFF_ACTIVITY_KIND as jr, AgentControlMcpProposeAutomationCancelInput as jt, AGENT_CONTROL_EXTERNAL_MCP_TOOLS as k, WORK_ITEM_DETAIL_BODY_MAX_BYTES as ka, PROVIDER_SEND_TURN_MAX_ATTACHMENT_TOTAL_BYTES as ki, ThreadPriorityRpcError as kn, HubGrantVerificationKeyId as ko, AgentTokenMode as kr, AgentControlMcpOperationalReadInput as kt, WsDeviceRpcGroup as l, ThreadStatusBucketOverriddenPayload as la, OrchestrationGetFullThreadDiffError as li, AgentControlOperationState as ln, OpenError as lo, ServerSettings as lr, ProviderItemId as ls, AgentControlMcpCapabilitiesResult as lt, PROJECT_STAGE_FILE_MAX_BYTES as m, ThreadUnsettledPayload as ma, OrchestrationGetWorkflowScriptError as mi, AgentControlProposal as mn, DesktopNativeNodeClaimCommitRequest as mo, KeybindingsConfigError as mr, RuntimeTaskId as ms, AgentControlMcpDiagnosticsSummaryResult as mt, decodeJsonResult as n, ThreadProposedPlanUpsertedPayload as na, OrchestrationCheckpointStatus as ni, AgentControlMcpRecentActivityResult as nn, DEFAULT_TERMINAL_ID as no, ClaudeSettings as nr, EnvironmentId$1 as ns, AgentControlExternalOverviewResult as nt, ComputerUseRequest as o, ThreadSettledPayload as oa, OrchestrationEvent as oi, AgentControlMcpWaitForControlRequestInput as on, TerminalSessionLookupError as oo, DEFAULT_SERVER_SETTINGS as or, NonNegativeInt as os, AgentControlExternalTaskIdInput as ot, PROJECT_READ_FILE_BINARY_MAX_BYTES as p, ThreadUnarchivedPayload as pa, OrchestrationGetTurnDiffResult as pi, AgentControlPromptSummary as pn, DESKTOP_NATIVE_NODE_CLAIM_SIGN_PATH as po, KeybindingsConfig as pr, RuntimeSubagentId as ps, AgentControlMcpDiagnosticsSummaryInput as pt, AgentControlAutomation as q, DEFAULT_GIT_TEXT_GENERATION_MODEL_BY_PROVIDER as qa, ThreadAttachedToWorktreePayload as qi, McpServerName as qn, AuthRevokePairingLinkInput as qo, DEFAULT_PROJECT_METADATA_DIR as qr, AgentControlMcpProviderRuntimeEventsResult as qt, formatSchemaError as r, ThreadRevertedPayload as ra, OrchestrationCheckpointSummary as ri, AgentControlMcpSendMessageInput as rn, TerminalCwdError as ro, CodexSettings as rr, EventId as rs, AgentControlExternalProjectScope as rt, ComputerUseResult as s, ThreadSettlementOverride as sa, OrchestrationEventMetadata as si, AgentControlOperation as sn, TerminalSubscriptionResyncError as so, GrokSettings as sr, PositiveInt as ss, AgentControlExternalWaitForTaskInput as st, collectUint8StreamText as t, ThreadPriorityProjectedRanking as ta, OrchestrationCheckpointFile as ti, AgentControlMcpReadThreadResult as tn, isProviderDriverKind as to, ServerProviderUpdateError as tr, ContextHandoffId as ts, AgentControlExternalIntegration as tt, WsHostedRpcGroup as u, ThreadTokenModeSetPayload as ua, OrchestrationGetSnapshotError as ui, AgentControlOperationStatus as un, DESKTOP_NATIVE_NODE_CLAIM_COMMIT_PATH as uo, ServerSettingsError as ur, RuntimeItemId as us, AgentControlMcpContextResult as ut, ProjectSearchEntriesError as v, WorktreeCreatedPayload as va, OrchestrationReadModel as vi, AgentControlResultEnvelope as vn, LOCAL_INTRODUCTION_DESCRIPTOR_PATH as vo, RuntimeSubagentStatus as vr, AgentControlMcpListAutomationRunsInput as vt, AGENT_CONTROL_AUTOMATION_PROPOSAL_TTL_MS as w, PullRequestState as wa, OrchestrationThread as wi, DEVICE_WS_METHODS as wn, NodeE2eeAdmissionPolicy as wo, ProviderSendTurnInput as wr, AgentControlMcpListProjectsInput as wt, AGENT_CONTROL_ACTION_CAPABILITIES as x, WorktreeMetaUpdatedPayload as xa, OrchestrationSessionStatus as xi, DEVICE_CAPABILITY_LABELS as xn, HUB_DEVICE_GRANT_MAX_BYTES as xo, ProviderInterruptTurnInput as xr, AgentControlMcpListAutomationsResult as xt, ProjectStageFileReferenceError as y, WorktreeDeletedPayload as ya, OrchestrationReplayEventsError as yi, AgentControlRiskTag as yn, LOCAL_INTRODUCTION_MAX_BODY_BYTES as yo, ToolLifecycleItemType as yr, AgentControlMcpListAutomationRunsResult as yt, AGENT_CONTROL_MCP_TOOL_NAMES as z, VcsProcessExitError as za, ProjectionPendingApprovalDecision as zi, McpInventoryResourceTemplate as zn, RelayChannelId as zo, ClientOrchestrationCommand as zr, AgentControlMcpProposeDeviceLaunchInput as zt };