ryco-cli 0.1.20 → 0.1.22

package/dist/{collectUint8StreamText-CDu-bszH.cjs → collectUint8StreamText-DStwNTTK.cjs}

@@ -262,8 +262,10 @@ const ExecutionEnvironmentPlatform = effect.Schema.Struct({
 });
 const ExecutionEnvironmentCapabilities = effect.Schema.Struct({
 	repositoryIdentity: effect.Schema.Boolean.pipe(effect.Schema.withDecodingDefault(effect.Effect.succeed(false))),
+	threadSnooze: effect.Schema.optional(effect.Schema.Boolean),
 	threadSettlement: effect.Schema.Boolean.pipe(effect.Schema.withDecodingDefault(effect.Effect.succeed(false))),
-	threadPriorityRanking: effect.Schema.Boolean.pipe(effect.Schema.withDecodingDefault(effect.Effect.succeed(false)))
+	threadPriorityRanking: effect.Schema.Boolean.pipe(effect.Schema.withDecodingDefault(effect.Effect.succeed(false))),
+	fileAttachments: effect.Schema.optional(effect.Schema.Struct({ maxUploadBytes: NonNegativeInt }))
 });
 const ExecutionEnvironmentDescriptor = effect.Schema.Struct({
 	environmentId: EnvironmentId$1,
@@ -365,6 +367,7 @@ const AdvertisedEndpoint = effect.Schema.Struct({
 	isDefault: effect.Schema.optional(effect.Schema.Boolean),
 	description: effect.Schema.optional(TrimmedNonEmptyString)
 });
+const RELAY_E2EE_CAPABILITY_STATEMENT_MAX_BYTES = 5190;
 const RELAY_MAX_CONTROL_FRAME_BYTES = 262144;
 const RELAY_MAX_DATA_CHUNK_BYTES = 262144;
 const RELAY_MAX_DATA_FRAME_OVERHEAD_BYTES = 1024;
@@ -427,7 +430,11 @@ const RELAY_FRAME_TYPES = [
 	"channel.close",
 	"ping",
 	"pong",
-	"error"
+	"error",
+	"node.e2ee.statement",
+	"node.e2ee.statement.ack",
+	"e2ee.verifier-keys",
+	"e2ee.enrollment-revoked"
 ];
 const RELAY_PROTOCOL_ERROR_CODES = [
 	"invalid_encoding",
@@ -438,7 +445,7 @@ const RELAY_PROTOCOL_ERROR_CODES = [
 	...RELAY_CLOSE_REASONS
 ];
 const UInt16 = effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(0), effect.Schema.isLessThanOrEqualTo(65535));
-const UInt32 = effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(0), effect.Schema.isLessThanOrEqualTo(4294967295));
+const UInt32$1 = effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(0), effect.Schema.isLessThanOrEqualTo(4294967295));
 const RetryAfterMs = effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(0), effect.Schema.isLessThanOrEqualTo(RELAY_MAX_RETRY_AFTER_MS));
 const ProtocolFields = {
 	protocolMajor: UInt16,
@@ -457,11 +464,25 @@ const RelayEffectiveRole = effect.Schema.Literals([
 const RelayProtocolErrorCode = effect.Schema.Literals(RELAY_PROTOCOL_ERROR_CODES);
 const RelayNodeId = effect.Schema.String.check(effect.Schema.isPattern(/^node_[A-Za-z0-9_-]{22,43}$/), effect.Schema.isMaxLength(48)).pipe(effect.Schema.brand("RelayNodeId"));
 const RelayChannelId = effect.Schema.String.check(effect.Schema.isPattern(/^ch_[A-Za-z0-9_-]{22}$/), effect.Schema.isMaxLength(25)).pipe(effect.Schema.brand("RelayChannelId"));
-const RelaySequence = UInt32.pipe(effect.Schema.brand("RelaySequence"));
+const NativeE2eeEnrollmentId = effect.Schema.String.check(effect.Schema.isPattern(/^enr_[A-Za-z0-9_-]{22,43}$/), effect.Schema.isMaxLength(47)).pipe(effect.Schema.brand("NativeE2eeEnrollmentId"));
+const HubGrantVerificationKeyId = effect.Schema.String.check(effect.Schema.isPattern(/^hgk_[A-Za-z0-9_-]{22,43}$/), effect.Schema.isMaxLength(47)).pipe(effect.Schema.brand("HubGrantVerificationKeyId"));
+const RelayTicketId = effect.Schema.String.check(effect.Schema.isPattern(/^rtk_[A-Za-z0-9_-]{22,43}$/), effect.Schema.isMaxLength(47)).pipe(effect.Schema.brand("RelayTicketId"));
+const NativeE2eeEnrollmentRevision = UInt32$1.check(effect.Schema.isGreaterThanOrEqualTo(1)).pipe(effect.Schema.brand("NativeE2eeEnrollmentRevision"));
+const E2eeAuthorizationEpoch = UInt32$1.pipe(effect.Schema.brand("E2eeAuthorizationEpoch"));
+const E2eeKeysetGeneration = UInt32$1.pipe(effect.Schema.brand("E2eeKeysetGeneration"));
+const RelayConnectorGeneration = UInt32$1.pipe(effect.Schema.brand("RelayConnectorGeneration"));
+const RelaySequence = UInt32$1.pipe(effect.Schema.brand("RelaySequence"));
 const RelayHeartbeatNonce = boundedBytes(8, 8);
 const RelayAuthenticationNonce = boundedBytes(32, 32);
 const RelaySignatureMaterial = boundedBytes(64, 512);
 const RelayTicketMaterial = boundedBytes(32, 64);
+const RelayE2eeDigest = boundedBytes(32, 32).pipe(effect.Schema.brand("RelayE2eeDigest"));
+const RelayAccountGrantContext = effect.Schema.Tuple([
+	effect.Schema.Literal(2),
+	RelayTicketId,
+	RelayE2eeDigest,
+	RelayE2eeDigest
+]);
 const RelayLimits = effect.Schema.Struct({
 	maxControlFrameBytes: effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(RELAY_MIN_CONTROL_FRAME_BYTES), effect.Schema.isLessThanOrEqualTo(RELAY_MAX_CONTROL_FRAME_BYTES)),
 	maxDataChunkBytes: effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(RELAY_MIN_DATA_CHUNK_BYTES), effect.Schema.isLessThanOrEqualTo(RELAY_MAX_DATA_CHUNK_BYTES)),
@@ -490,7 +511,11 @@ const minorVersionSupportsCloseReason = (protocolMinor, reason) => reason === vo
 const minorVersionSupportsAuthorizedChannel = (input) => {
 	const hasCapability = input.capability !== void 0;
 	const hasEffectiveRole = input.effectiveRole !== void 0;
-	if (input.protocolMinor >= 2) return hasCapability && hasEffectiveRole ? void 0 : "protocol minor version 2 or newer requires channel authorization metadata";
+	if (input.accountGrantContext !== void 0 && input.protocolMinor < 3) return "account grant context requires protocol minor version 3 or newer";
+	if (input.protocolMinor >= 2) {
+		if (!hasCapability || !hasEffectiveRole) return "protocol minor version 2 or newer requires channel authorization metadata";
+		return;
+	}
 	return !hasCapability && !hasEffectiveRole ? void 0 : "channel authorization metadata requires protocol minor version 2 or newer";
 };
 const RelayNodeAuthHandshake = effect.Schema.Struct({
@@ -518,8 +543,43 @@ const RelayChannelOpenFrame = effect.Schema.Struct({
 	...ProtocolFields,
 	channelId: RelayChannelId,
 	capability: effect.Schema.optionalKey(RelayCapability),
-	effectiveRole: effect.Schema.optionalKey(RelayEffectiveRole)
+	effectiveRole: effect.Schema.optionalKey(RelayEffectiveRole),
+	accountGrantContext: effect.Schema.optionalKey(RelayAccountGrantContext)
 }).check(effect.Schema.makeFilter(minorVersionSupportsAuthorizedChannel));
+const minor3Frame = (fields) => effect.Schema.Struct({
+	...fields,
+	...ProtocolFields
+}).check(effect.Schema.makeFilter((frame) => frame.protocolMinor >= 3 ? void 0 : "frame requires protocol minor version 3 or newer"));
+const RelayNodeE2eeStatementFrame = minor3Frame({
+	type: effect.Schema.Literal("node.e2ee.statement"),
+	connectorGeneration: RelayConnectorGeneration,
+	statement: boundedBytes(1, RELAY_E2EE_CAPABILITY_STATEMENT_MAX_BYTES),
+	statementDigest: RelayE2eeDigest,
+	expiresAt: effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(0), effect.Schema.isLessThanOrEqualTo(Number.MAX_SAFE_INTEGER))
+});
+const RelayNodeE2eeStatementAckFrame = minor3Frame({
+	type: effect.Schema.Literal("node.e2ee.statement.ack"),
+	connectorGeneration: RelayConnectorGeneration,
+	statementDigest: RelayE2eeDigest
+});
+const RelayHubGrantVerificationKey = effect.Schema.Struct({
+	keyId: HubGrantVerificationKeyId,
+	publicKey: boundedBytes(32, 32),
+	notBefore: effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(0), effect.Schema.isLessThanOrEqualTo(Number.MAX_SAFE_INTEGER)),
+	notAfter: effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(0), effect.Schema.isLessThanOrEqualTo(Number.MAX_SAFE_INTEGER))
+}).check(effect.Schema.makeFilter((key) => key.notAfter > key.notBefore ? void 0 : "notAfter must be after notBefore"));
+const RelayE2eeVerifierKeysFrame = minor3Frame({
+	type: effect.Schema.Literal("e2ee.verifier-keys"),
+	generation: E2eeKeysetGeneration,
+	keys: effect.Schema.Array(RelayHubGrantVerificationKey).check(effect.Schema.isMinLength(1), effect.Schema.isMaxLength(4), effect.Schema.makeFilter((keys) => new Set(keys.map((key) => key.keyId)).size === keys.length ? void 0 : "grant verification key ids must be distinct"))
+});
+const RelayE2eeEnrollmentRevokedFrame = minor3Frame({
+	type: effect.Schema.Literal("e2ee.enrollment-revoked"),
+	enrollmentId: NativeE2eeEnrollmentId,
+	enrollmentRevision: NativeE2eeEnrollmentRevision,
+	accountAuthEpoch: E2eeAuthorizationEpoch,
+	deviceAuthEpoch: E2eeAuthorizationEpoch
+});
 const RelayChannelAcceptFrame = effect.Schema.Struct({
 	type: effect.Schema.Literal("channel.accept"),
 	...ProtocolFields,
@@ -573,7 +633,7 @@ const RelaySupportedVersionRange = effect.Schema.Struct({
 const RELAY_SUPPORTED_VERSION_RANGE = RelaySupportedVersionRange.make({
 	protocolMajor: 1,
 	minimumMinor: 0,
-	maximumMinor: 2
+	maximumMinor: 3
 });
 const RelayErrorFrame = effect.Schema.Struct({
 	type: effect.Schema.Literal("error"),
@@ -604,7 +664,11 @@ const RelayControlFrame = effect.Schema.Union([
 	RelayChannelCloseFrame,
 	RelayPingFrame,
 	RelayPongFrame,
-	RelayErrorFrame
+	RelayErrorFrame,
+	RelayNodeE2eeStatementFrame,
+	RelayNodeE2eeStatementAckFrame,
+	RelayE2eeVerifierKeysFrame,
+	RelayE2eeEnrollmentRevokedFrame
 ]);
 const RelayFrame = effect.Schema.Union([RelayControlFrame, RelayDataFrame]);
 //#endregion
@@ -660,7 +724,7 @@ const HubConnectorStatus = effect.Schema.Struct({
 	if (status.state === "degraded" && status.degradedMode === void 0) return "degraded status requires degradedMode";
 	if (status.state !== "degraded" && status.degradedMode !== void 0) return "degradedMode is allowed only for degraded status";
 	if (status.state === "online") {
-		if (status.protocolMajor !== 1 || status.protocolMinor !== 2) return "online status requires the supported relay protocol";
+		if (status.protocolMajor !== 1 || status.protocolMinor === void 0 || status.protocolMinor < 2 || status.protocolMinor > 3) return "online status requires the supported relay protocol";
 	} else if (status.protocolMajor !== void 0 || status.protocolMinor !== void 0) return "protocol is exposed only while online";
 	if (status.nextRetryAt !== void 0 && status.degradedMode !== "backing_off") return "nextRetryAt requires backing_off";
 	if (status.state !== "online" && status.activeChannels !== 0) return "active channels require online status";
@@ -731,16 +795,16 @@ const HubEnrollmentStartResult = effect.Schema.Struct({
 	...HubEnrollmentCeremonyDetail.fields
 });
 const HOSTED_IDENTITY_MAX_ANTI_BOT_ASSERTION_CHARS = 8192;
-const strict$3 = (schema) => schema.annotate({ parseOptions: { onExcessProperty: "error" } });
-const EpochMs$1 = effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(0));
+const strict$4 = (schema) => schema.annotate({ parseOptions: { onExcessProperty: "error" } });
+const EpochMs$2 = effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(0));
 const Opaque256 = effect.Schema.String.check(effect.Schema.isMinLength(43), effect.Schema.isMaxLength(43), effect.Schema.isPattern(/^[A-Za-z0-9_-]{43}$/));
-const AccountId$1 = effect.Schema.String.check(effect.Schema.isPattern(/^acct_[A-Za-z0-9_-]{22,43}$/), effect.Schema.isMaxLength(48));
+const HubAccountId = effect.Schema.String.check(effect.Schema.isPattern(/^acct_[A-Za-z0-9_-]{22,43}$/), effect.Schema.isMaxLength(48));
 const SessionId$1 = effect.Schema.String.check(effect.Schema.isPattern(/^sess_[A-Za-z0-9_-]{22,43}$/), effect.Schema.isMaxLength(48));
 const BoundedDisplayName = effect.Schema.Trim.check(effect.Schema.isNonEmpty(), effect.Schema.isMaxLength(200));
 const BoundedSpaceDisplayName = effect.Schema.Trim.check(effect.Schema.isNonEmpty(), effect.Schema.isMaxLength(100));
 const BoundedPassword = effect.Schema.String.check(effect.Schema.isMinLength(12), effect.Schema.isMaxLength(256));
 const AntiBotAssertion = effect.Schema.String.check(effect.Schema.isNonEmpty(), effect.Schema.isMaxLength(HOSTED_IDENTITY_MAX_ANTI_BOT_ASSERTION_CHARS));
-const IdempotencyKey = Opaque256.pipe(effect.Schema.brand("HostedIdentityIdempotencyKey"));
+const IdempotencyKey$1 = Opaque256.pipe(effect.Schema.brand("HostedIdentityIdempotencyKey"));
 const SignupAttemptSecret = Opaque256.pipe(effect.Schema.brand("PublicSignupAttemptSecret"));
 const SignupActivationSecret = Opaque256.pipe(effect.Schema.brand("PublicSignupActivationSecret"));
 const PasswordLoginAttemptSecret = Opaque256.pipe(effect.Schema.brand("PasswordLoginAttemptSecret"));
@@ -753,10 +817,10 @@ const MailToken = Opaque256.pipe(effect.Schema.brand("HostedIdentityMailToken"))
 const EmailCode = effect.Schema.String.check(effect.Schema.isPattern(/^[0-9]{6}$/));
 const TotpCode = effect.Schema.String.check(effect.Schema.isPattern(/^[0-9]{6}$/));
 const JsonObject = effect.Schema.Unknown.check(effect.Schema.makeFilter((value) => typeof value === "object" && value !== null && !Array.isArray(value) ? void 0 : "value must be an object"));
-const strictTimed = (fields) => strict$3(effect.Schema.Struct({
+const strictTimed = (fields) => strict$4(effect.Schema.Struct({
 	...fields,
-	issuedAt: EpochMs$1,
-	expiresAt: EpochMs$1
+	issuedAt: EpochMs$2,
+	expiresAt: EpochMs$2
 }).check(effect.Schema.makeFilter((value) => {
 	const timed = value;
 	return timed.expiresAt > timed.issuedAt ? void 0 : "expiresAt must be after issuedAt";
@@ -774,14 +838,14 @@ const HubNormalizedEmail = effect.Schema.String.check(effect.Schema.isMinLength(
 const HubLoginIdentifier = effect.Schema.Union([HubUsername, HubNormalizedEmail]).pipe(effect.Schema.brand("HubLoginIdentifier"));
 const PublicSignupTurnstileSiteKey = effect.Schema.String.check(effect.Schema.isMinLength(10), effect.Schema.isMaxLength(128), effect.Schema.isPattern(/^[A-Za-z0-9_-]+$/));
 effect.Schema.Union([
-	strict$3(effect.Schema.Struct({ status: effect.Schema.Literal("disabled") })),
-	strict$3(effect.Schema.Struct({
+	strict$4(effect.Schema.Struct({ status: effect.Schema.Literal("disabled") })),
+	strict$4(effect.Schema.Struct({
 		status: effect.Schema.Literal("enabled"),
-		antiBot: strict$3(effect.Schema.Struct({ provider: effect.Schema.Literal("bypass") }))
+		antiBot: strict$4(effect.Schema.Struct({ provider: effect.Schema.Literal("bypass") }))
 	})),
-	strict$3(effect.Schema.Struct({
+	strict$4(effect.Schema.Struct({
 		status: effect.Schema.Literal("enabled"),
-		antiBot: strict$3(effect.Schema.Struct({
+		antiBot: strict$4(effect.Schema.Struct({
 			provider: effect.Schema.Literal("turnstile"),
 			siteKey: PublicSignupTurnstileSiteKey
 		}))
@@ -789,21 +853,21 @@ effect.Schema.Union([
 ]);
 const ExternalIdentityProvider = effect.Schema.Literal("github");
 const ExternalIdentityLogin = effect.Schema.Trim.check(effect.Schema.isNonEmpty(), effect.Schema.isMaxLength(100), effect.Schema.isPattern(/^[A-Za-z0-9-]+$/));
-const ExternalIdentitySummary = strict$3(effect.Schema.Struct({
+const ExternalIdentitySummary = strict$4(effect.Schema.Struct({
 	provider: ExternalIdentityProvider,
 	login: ExternalIdentityLogin,
 	displayName: effect.Schema.NullOr(BoundedDisplayName),
-	connectedAt: EpochMs$1,
-	lastUsedAt: effect.Schema.NullOr(EpochMs$1)
+	connectedAt: EpochMs$2,
+	lastUsedAt: effect.Schema.NullOr(EpochMs$2)
 }).check(effect.Schema.makeFilter((value) => value.lastUsedAt === null || value.lastUsedAt >= value.connectedAt ? void 0 : "lastUsedAt must not precede connectedAt")));
-const ExternalIdentityProviderPolicy = strict$3(effect.Schema.Struct({
+const ExternalIdentityProviderPolicy = strict$4(effect.Schema.Struct({
 	provider: ExternalIdentityProvider,
 	login: effect.Schema.Literal(true),
 	signup: effect.Schema.Boolean,
 	link: effect.Schema.Literal(true)
 }));
 const ExternalIdentityProviders = effect.Schema.Array(ExternalIdentityProviderPolicy).check(effect.Schema.isMaxLength(1), effect.Schema.makeFilter((providers) => new Set(providers.map((provider) => provider.provider)).size === providers.length ? void 0 : "external identity providers must be unique"));
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	version: effect.Schema.Literal(1),
 	providers: ExternalIdentityProviders
 }));
@@ -823,14 +887,14 @@ const GitHubAuthorizationUrl = effect.Schema.String.check(effect.Schema.isNonEmp
 		return "authorization URL must be absolute";
 	}
 }));
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	provider: ExternalIdentityProvider,
 	intent: effect.Schema.Literals(["authenticate", "link"]),
 	returnTo: effect.Schema.optionalKey(ExternalIdentityReturnPath)
 }));
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	authorizationUrl: GitHubAuthorizationUrl,
-	expiresAt: EpochMs$1
+	expiresAt: EpochMs$2
 }));
 const ExternalIdentityPendingErrorCode = effect.Schema.Literals([
 	"external_provider_unavailable",
@@ -843,72 +907,72 @@ const ExternalIdentityPendingErrorCode = effect.Schema.Literals([
 	"username_unavailable"
 ]);
 effect.Schema.Union([
-	strict$3(effect.Schema.Struct({ status: effect.Schema.Literal("none") })),
-	strict$3(effect.Schema.Struct({
+	strict$4(effect.Schema.Struct({ status: effect.Schema.Literal("none") })),
+	strict$4(effect.Schema.Struct({
 		status: effect.Schema.Literal("signup"),
 		provider: ExternalIdentityProvider,
 		suggestedUsername: effect.Schema.NullOr(HubUsername),
 		displayName: effect.Schema.NullOr(BoundedDisplayName),
-		expiresAt: EpochMs$1
+		expiresAt: EpochMs$2
 	})),
-	strict$3(effect.Schema.Struct({
+	strict$4(effect.Schema.Struct({
 		status: effect.Schema.Literal("link"),
 		externalIdentity: ExternalIdentitySummary,
-		expiresAt: EpochMs$1
+		expiresAt: EpochMs$2
 	})),
-	strict$3(effect.Schema.Struct({
+	strict$4(effect.Schema.Struct({
 		status: effect.Schema.Literal("error"),
 		provider: ExternalIdentityProvider,
 		code: ExternalIdentityPendingErrorCode
 	}))
 ]);
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	provider: ExternalIdentityProvider,
 	username: HubUsername,
 	antiBotAssertion: AntiBotAssertion,
-	idempotencyKey: IdempotencyKey
+	idempotencyKey: IdempotencyKey$1
 }));
-strict$3(effect.Schema.Struct({ totpCode: effect.Schema.optionalKey(TotpCode) }));
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({ totpCode: effect.Schema.optionalKey(TotpCode) }));
+strict$4(effect.Schema.Struct({
 	status: effect.Schema.Literal("connected"),
 	externalIdentity: ExternalIdentitySummary
 }));
-strict$3(effect.Schema.Struct({ totpCode: effect.Schema.optionalKey(TotpCode) }));
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({ totpCode: effect.Schema.optionalKey(TotpCode) }));
+strict$4(effect.Schema.Struct({
 	status: effect.Schema.Literal("disconnected"),
 	signedOut: effect.Schema.Boolean
 }));
 const ExternalIdentitySummaries = effect.Schema.Array(ExternalIdentitySummary).check(effect.Schema.isMaxLength(1), effect.Schema.makeFilter((identities) => new Set(identities.map((identity) => identity.provider)).size === identities.length ? void 0 : "external identity providers must be unique"));
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	passwordConfigured: effect.Schema.Boolean,
 	totpEnrolled: effect.Schema.Boolean,
 	emailDeliveryConfigured: effect.Schema.Boolean,
-	email: effect.Schema.NullOr(strict$3(effect.Schema.Struct({
+	email: effect.Schema.NullOr(strict$4(effect.Schema.Struct({
 		address: HubNormalizedEmail,
 		verified: effect.Schema.Boolean
 	}))),
 	externalIdentities: ExternalIdentitySummaries
 }));
-const HubActiveSpaceSummary = strict$3(effect.Schema.Struct({
+const HubActiveSpaceSummary = strict$4(effect.Schema.Struct({
 	id: HubSpaceId,
 	kind: HubSpaceKind,
 	displayName: BoundedSpaceDisplayName,
 	role: HubSpaceRole
 }));
-const HubPublicAccount = strict$3(effect.Schema.Struct({
-	id: AccountId$1,
+const HubPublicAccount = strict$4(effect.Schema.Struct({
+	id: HubAccountId,
 	username: HubUsername,
 	displayName: BoundedDisplayName,
-	createdAt: EpochMs$1,
+	createdAt: EpochMs$2,
 	disabledAt: effect.Schema.Null
 }));
-const HubPublicBrowserSession = strict$3(effect.Schema.Struct({
+const HubPublicBrowserSession = strict$4(effect.Schema.Struct({
 	id: SessionId$1,
-	accountId: AccountId$1,
+	accountId: HubAccountId,
 	activeSpaceId: HubSpaceId,
-	createdAt: EpochMs$1,
-	expiresAt: EpochMs$1,
-	lastSeenAt: EpochMs$1,
+	createdAt: EpochMs$2,
+	expiresAt: EpochMs$2,
+	lastSeenAt: EpochMs$2,
 	revokedAt: effect.Schema.Null,
 	revocationReasonCode: effect.Schema.Null
 }).check(effect.Schema.makeFilter((session) => session.expiresAt > session.createdAt && session.lastSeenAt >= session.createdAt && session.lastSeenAt <= session.expiresAt ? void 0 : "browser session timestamps are inconsistent")));
@@ -926,11 +990,11 @@ function hubSessionIdentityConsistency(value) {
 	const matches = value.spaces.filter((space) => space.id === value.activeSpace.id);
 	return matches.length === 1 && matches[0]?.role === value.activeSpace.role ? void 0 : "active space must appear exactly once in spaces";
 }
-const HubBrowserSessionResponse = strict$3(effect.Schema.Struct({
+const HubBrowserSessionResponse = strict$4(effect.Schema.Struct({
 	...HubSessionIdentityFields,
 	csrfToken: effect.Schema.String.check(effect.Schema.isNonEmpty(), effect.Schema.isMaxLength(4096))
 }).check(effect.Schema.makeFilter(hubSessionIdentityConsistency)));
-const HubSessionIdentity = strict$3(effect.Schema.Struct(HubSessionIdentityFields).check(effect.Schema.makeFilter(hubSessionIdentityConsistency)));
+const HubSessionIdentity = strict$4(effect.Schema.Struct(HubSessionIdentityFields).check(effect.Schema.makeFilter(hubSessionIdentityConsistency)));
 const NativeIdentityAttemptId = effect.Schema.String.check(effect.Schema.isPattern(/^nident_[A-Za-z0-9_-]{22,43}$/), effect.Schema.isMaxLength(50)).pipe(effect.Schema.brand("NativeIdentityAttemptId"));
 const NativeIdentityLoginAttemptId = effect.Schema.String.check(effect.Schema.isPattern(/^nlogin_[A-Za-z0-9_-]{22,43}$/), effect.Schema.isMaxLength(50)).pipe(effect.Schema.brand("NativeIdentityLoginAttemptId"));
 const NativeIdentityResetAttemptId = effect.Schema.String.check(effect.Schema.isPattern(/^nreset_[A-Za-z0-9_-]{22,43}$/), effect.Schema.isMaxLength(50)).pipe(effect.Schema.brand("NativeIdentityResetAttemptId"));
@@ -939,7 +1003,7 @@ const NativeIdentityTimedAttempt = {
 	attemptSecret: NativeIdentityAttemptSecret,
 	resendAfterMs: effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(0), effect.Schema.isLessThanOrEqualTo(9e5))
 };
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	email: HubNormalizedEmail,
 	antiBotAssertion: AntiBotAssertion
 }));
@@ -947,14 +1011,14 @@ strictTimed({
 	status: effect.Schema.Literal("accepted"),
 	...NativeIdentityTimedAttempt
 });
-const NativeIdentityMailboxProof = effect.Schema.Union([strict$3(effect.Schema.Struct({
+const NativeIdentityMailboxProof = effect.Schema.Union([strict$4(effect.Schema.Struct({
 	kind: effect.Schema.Literal("link_token"),
 	token: MailToken
-})), strict$3(effect.Schema.Struct({
+})), strict$4(effect.Schema.Struct({
 	kind: effect.Schema.Literal("email_code"),
 	code: EmailCode
 }))]);
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	attemptId: NativeIdentityAttemptId,
 	attemptSecret: NativeIdentityAttemptSecret,
 	proof: NativeIdentityMailboxProof
@@ -972,41 +1036,41 @@ const NativeIdentityActivation = {
 	attemptId: NativeIdentityAttemptId,
 	activationSecret: NativeIdentityActivationSecret
 };
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	...NativeIdentityActivation,
 	username: HubUsername
 }));
-strict$3(effect.Schema.Struct({ status: effect.Schema.Literal("claimed") }));
-strict$3(effect.Schema.Struct(NativeIdentityActivation));
-strict$3(effect.Schema.Struct({ options: JsonObject }));
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({ status: effect.Schema.Literal("claimed") }));
+strict$4(effect.Schema.Struct(NativeIdentityActivation));
+strict$4(effect.Schema.Struct({ options: JsonObject }));
+strict$4(effect.Schema.Struct({
 	...NativeIdentityActivation,
 	response: JsonObject,
-	idempotencyKey: IdempotencyKey
+	idempotencyKey: IdempotencyKey$1
 }));
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	...NativeIdentityActivation,
 	password: BoundedPassword,
-	idempotencyKey: IdempotencyKey
+	idempotencyKey: IdempotencyKey$1
 }));
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	status: effect.Schema.Literal("complete"),
 	identity: HubSessionIdentity,
 	token: NativeIdentitySessionToken
 }));
 const NativeIdentityRecoveryCodes = effect.Schema.Array(effect.Schema.String.check(effect.Schema.isNonEmpty(), effect.Schema.isMaxLength(512))).check(effect.Schema.isMinLength(1), effect.Schema.isMaxLength(256));
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	status: effect.Schema.Literal("complete"),
 	identity: HubSessionIdentity,
 	token: NativeIdentitySessionToken,
 	recoveryCodes: NativeIdentityRecoveryCodes
 }));
-effect.Schema.Union([strict$3(effect.Schema.Struct({
+effect.Schema.Union([strict$4(effect.Schema.Struct({
 	kind: effect.Schema.Literal("username"),
 	username: HubUsername,
 	password: BoundedPassword,
 	antiBotAssertion: effect.Schema.optionalKey(AntiBotAssertion)
-})), strict$3(effect.Schema.Struct({
+})), strict$4(effect.Schema.Struct({
 	kind: effect.Schema.Literal("verified_email"),
 	...NativeIdentityActivation,
 	password: BoundedPassword
@@ -1017,22 +1081,22 @@ strictTimed({
 	attemptSecret: NativeIdentityAttemptSecret,
 	factor: effect.Schema.Literals(["totp", "email_code"])
 });
-effect.Schema.Union([strict$3(effect.Schema.Struct({
+effect.Schema.Union([strict$4(effect.Schema.Struct({
 	attemptId: NativeIdentityLoginAttemptId,
 	attemptSecret: NativeIdentityAttemptSecret,
 	factor: effect.Schema.Literal("totp"),
 	code: TotpCode
-})), strict$3(effect.Schema.Struct({
+})), strict$4(effect.Schema.Struct({
 	attemptId: NativeIdentityLoginAttemptId,
 	attemptSecret: NativeIdentityAttemptSecret,
 	factor: effect.Schema.Literal("email_code"),
 	code: EmailCode
 }))]);
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	code: effect.Schema.String.check(effect.Schema.isNonEmpty(), effect.Schema.isMaxLength(512)),
-	idempotencyKey: IdempotencyKey
+	idempotencyKey: IdempotencyKey$1
 }));
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	identifier: HubLoginIdentifier,
 	antiBotAssertion: effect.Schema.optionalKey(AntiBotAssertion)
 }));
@@ -1042,7 +1106,7 @@ strictTimed({
 	attemptSecret: NativeIdentityAttemptSecret,
 	resendAfterMs: effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(0), effect.Schema.isLessThanOrEqualTo(9e5))
 });
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	attemptId: NativeIdentityResetAttemptId,
 	attemptSecret: NativeIdentityAttemptSecret,
 	proof: NativeIdentityMailboxProof
@@ -1053,17 +1117,17 @@ strictTimed({
 	resetSecret: NativeIdentityResetSecret,
 	requiresTotp: effect.Schema.Boolean
 });
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	attemptId: NativeIdentityResetAttemptId,
 	resetSecret: NativeIdentityResetSecret,
 	password: BoundedPassword,
-	factor: effect.Schema.Union([strict$3(effect.Schema.Struct({ kind: effect.Schema.Literal("none") })), strict$3(effect.Schema.Struct({
+	factor: effect.Schema.Union([strict$4(effect.Schema.Struct({ kind: effect.Schema.Literal("none") })), strict$4(effect.Schema.Struct({
 		kind: effect.Schema.Literal("totp"),
 		code: TotpCode
 	}))])
 }));
-strict$3(effect.Schema.Struct({ status: effect.Schema.Literal("complete") }));
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({ status: effect.Schema.Literal("complete") }));
+strict$4(effect.Schema.Struct({
 	attemptId: effect.Schema.Union([
 		NativeIdentityAttemptId,
 		NativeIdentityLoginAttemptId,
@@ -1071,9 +1135,9 @@ strict$3(effect.Schema.Struct({
 	]),
 	attemptSecret: effect.Schema.Union([NativeIdentityAttemptSecret, NativeIdentityActivationSecret])
 }));
-strict$3(effect.Schema.Struct({ status: effect.Schema.Literal("cancelled") }));
+strict$4(effect.Schema.Struct({ status: effect.Schema.Literal("cancelled") }));
 const PublicSignupAttemptId = effect.Schema.String.check(effect.Schema.isPattern(/^signup_[A-Za-z0-9_-]{22,43}$/), effect.Schema.isMaxLength(50)).pipe(effect.Schema.brand("PublicSignupAttemptId"));
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	username: HubUsername,
 	email: HubNormalizedEmail,
 	antiBotAssertion: AntiBotAssertion,
@@ -1085,14 +1149,14 @@ strictTimed({
 	attemptSecret: SignupAttemptSecret,
 	resendAfterMs: effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(0), effect.Schema.isLessThanOrEqualTo(9e5))
 });
-const PublicSignupMailboxProof = effect.Schema.Union([strict$3(effect.Schema.Struct({
+const PublicSignupMailboxProof = effect.Schema.Union([strict$4(effect.Schema.Struct({
 	kind: effect.Schema.Literal("link_token"),
 	token: MailToken
-})), strict$3(effect.Schema.Struct({
+})), strict$4(effect.Schema.Struct({
 	kind: effect.Schema.Literal("email_code"),
 	code: EmailCode
 }))]);
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	attemptId: PublicSignupAttemptId,
 	attemptSecret: SignupAttemptSecret,
 	proof: PublicSignupMailboxProof
@@ -1106,26 +1170,26 @@ const PublicSignupActivation = {
 	attemptId: PublicSignupAttemptId,
 	activationSecret: SignupActivationSecret
 };
-strict$3(effect.Schema.Struct(PublicSignupActivation));
-strict$3(effect.Schema.Struct({ options: JsonObject }));
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct(PublicSignupActivation));
+strict$4(effect.Schema.Struct({ options: JsonObject }));
+strict$4(effect.Schema.Struct({
 	...PublicSignupActivation,
 	response: JsonObject,
-	idempotencyKey: IdempotencyKey
+	idempotencyKey: IdempotencyKey$1
 }));
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	...PublicSignupActivation,
 	password: BoundedPassword,
-	idempotencyKey: IdempotencyKey
+	idempotencyKey: IdempotencyKey$1
 }));
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	status: effect.Schema.Literal("complete"),
 	identity: HubBrowserSessionResponse,
 	recoveryCodes: effect.Schema.Array(effect.Schema.String.check(effect.Schema.isNonEmpty(), effect.Schema.isMaxLength(512))).check(effect.Schema.isMinLength(1), effect.Schema.isMaxLength(256))
 }));
 const PasswordLoginAttemptId = effect.Schema.String.check(effect.Schema.isPattern(/^login_[A-Za-z0-9_-]{22,43}$/), effect.Schema.isMaxLength(49)).pipe(effect.Schema.brand("PasswordLoginAttemptId"));
 const PasswordLoginFactor = effect.Schema.Literals(["totp", "email_code"]);
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	identifier: HubLoginIdentifier,
 	password: BoundedPassword,
 	antiBotAssertion: effect.Schema.optional(AntiBotAssertion)
@@ -1136,43 +1200,43 @@ strictTimed({
 	attemptSecret: PasswordLoginAttemptSecret,
 	factor: PasswordLoginFactor
 });
-effect.Schema.Union([strict$3(effect.Schema.Struct({
+effect.Schema.Union([strict$4(effect.Schema.Struct({
 	attemptId: PasswordLoginAttemptId,
 	attemptSecret: PasswordLoginAttemptSecret,
 	factor: effect.Schema.Literal("totp"),
 	code: TotpCode
-})), strict$3(effect.Schema.Struct({
+})), strict$4(effect.Schema.Struct({
 	attemptId: PasswordLoginAttemptId,
 	attemptSecret: PasswordLoginAttemptSecret,
 	factor: effect.Schema.Literal("email_code"),
 	code: EmailCode
 }))]);
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	identifier: HubLoginIdentifier,
 	antiBotAssertion: effect.Schema.optional(AntiBotAssertion)
 }));
-strict$3(effect.Schema.Struct({ status: effect.Schema.Literal("accepted") }));
+strict$4(effect.Schema.Struct({ status: effect.Schema.Literal("accepted") }));
 const PasswordResetAttemptId = effect.Schema.String.check(effect.Schema.isPattern(/^reset_[A-Za-z0-9_-]{22,43}$/), effect.Schema.isMaxLength(49)).pipe(effect.Schema.brand("PasswordResetAttemptId"));
-strict$3(effect.Schema.Struct({ token: MailToken }));
+strict$4(effect.Schema.Struct({ token: MailToken }));
 strictTimed({
 	status: effect.Schema.Literal("verified"),
 	attemptId: PasswordResetAttemptId,
 	attemptSecret: PasswordResetAttemptSecret,
 	requiresTotp: effect.Schema.Boolean
 });
-const PasswordResetFactor = effect.Schema.Union([strict$3(effect.Schema.Struct({ kind: effect.Schema.Literal("none") })), strict$3(effect.Schema.Struct({
+const PasswordResetFactor = effect.Schema.Union([strict$4(effect.Schema.Struct({ kind: effect.Schema.Literal("none") })), strict$4(effect.Schema.Struct({
 	kind: effect.Schema.Literal("totp"),
 	code: TotpCode
 }))]);
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	attemptId: PasswordResetAttemptId,
 	attemptSecret: PasswordResetAttemptSecret,
 	password: BoundedPassword,
 	factor: PasswordResetFactor
 }));
-strict$3(effect.Schema.Struct({ status: effect.Schema.Literal("complete") }));
-strict$3(effect.Schema.Struct({ spaceId: HubSpaceId }));
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({ status: effect.Schema.Literal("complete") }));
+strict$4(effect.Schema.Struct({ spaceId: HubSpaceId }));
+strict$4(effect.Schema.Struct({
 	activeSpace: HubActiveSpaceSummary,
 	spaces: HubSpaces
 }).check(effect.Schema.makeFilter((value) => {
@@ -1184,7 +1248,7 @@ const DesktopInstallationId = effect.Schema.String.check(effect.Schema.isPattern
 const NativeNodeClaimId = effect.Schema.String.check(effect.Schema.isPattern(/^nclaim_[A-Za-z0-9_-]{22,43}$/), effect.Schema.isMaxLength(50)).pipe(effect.Schema.brand("NativeNodeClaimId"));
 const NativeNodeClaimEnvironmentId = effect.Schema.String.check(effect.Schema.isPattern(/^env_[A-Za-z0-9_-]{22}$/), effect.Schema.isMaxLength(26)).pipe(effect.Schema.brand("NativeNodeClaimEnvironmentId"));
 const NativeNodeClaimPublicKey = effect.Schema.String.check(effect.Schema.isMinLength(43), effect.Schema.isMaxLength(43), effect.Schema.isPattern(/^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$/)).pipe(effect.Schema.brand("NativeNodeClaimPublicKey"));
-const NativeNodeClaimMetadata = strict$3(effect.Schema.Struct({
+const NativeNodeClaimMetadata = strict$4(effect.Schema.Struct({
 	environmentId: NativeNodeClaimEnvironmentId,
 	label: effect.Schema.Trim.check(effect.Schema.isNonEmpty(), effect.Schema.isMaxLength(100)),
 	platformOs: effect.Schema.Literals([
@@ -1203,7 +1267,7 @@ const NativeNodeClaimMetadata = strict$3(effect.Schema.Struct({
 	publicKey: NativeNodeClaimPublicKey,
 	fingerprint: HubNodePublicKeyFingerprint
 }));
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	installationId: DesktopInstallationId,
 	node: NativeNodeClaimMetadata
 }));
@@ -1212,7 +1276,7 @@ const NativeNodeClaimStartResponse = strictTimed({
 	transcriptVersion: effect.Schema.Literal(1),
 	claimId: NativeNodeClaimId,
 	challenge: Opaque256,
-	accountId: AccountId$1,
+	accountId: HubAccountId,
 	spaceId: HubSpaceId,
 	sessionId: SessionId$1,
 	dpopKeyThumbprint: Opaque256,
@@ -1220,16 +1284,16 @@ const NativeNodeClaimStartResponse = strictTimed({
 	environmentId: NativeNodeClaimEnvironmentId,
 	nodeFingerprint: HubNodePublicKeyFingerprint
 });
-strict$3(effect.Schema.Struct({
+strict$4(effect.Schema.Struct({
 	claimId: NativeNodeClaimId,
 	challenge: Opaque256,
 	signature: effect.Schema.String.check(effect.Schema.isMinLength(86), effect.Schema.isMaxLength(86), effect.Schema.isPattern(/^[A-Za-z0-9_-]{85}[AQgw]$/)),
-	idempotencyKey: IdempotencyKey
+	idempotencyKey: IdempotencyKey$1
 }));
-const NativeNodeClaimFinishResponse = strict$3(effect.Schema.Struct({
+const NativeNodeClaimFinishResponse = strict$4(effect.Schema.Struct({
 	status: effect.Schema.Literal("claimed"),
 	disposition: effect.Schema.Literals(["created", "reconnected"]),
-	node: strict$3(effect.Schema.Struct({
+	node: strict$4(effect.Schema.Struct({
 		id: RelayNodeId,
 		activeKeyId: effect.Schema.String.check(effect.Schema.isPattern(/^nkey_[A-Za-z0-9_-]{22}$/), effect.Schema.isMaxLength(27)),
 		environmentId: NativeNodeClaimEnvironmentId,
@@ -1238,10 +1302,10 @@ const NativeNodeClaimFinishResponse = strict$3(effect.Schema.Struct({
 		effectiveRole: effect.Schema.Literal("owner")
 	}))
 }));
-effect.Schema.Union([strict$3(effect.Schema.Struct({
+effect.Schema.Union([strict$4(effect.Schema.Struct({
 	error: effect.Schema.Literal("node_claim_rejected"),
 	retryable: effect.Schema.Literal(false)
-})), strict$3(effect.Schema.Struct({
+})), strict$4(effect.Schema.Struct({
 	error: effect.Schema.Literal("node_claim_unavailable"),
 	retryable: effect.Schema.Literal(true),
 	retryAfterMs: effect.Schema.optional(effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(0), effect.Schema.isLessThanOrEqualTo(3e5)))
@@ -1253,7 +1317,7 @@ const NATIVE_HANDOFF_CALLBACK_URIS = [
 	"ryco://hosted/complete"
 ];
 const NATIVE_HANDOFF_MAX_URL_CHARS = 2048;
-const strict$2 = (schema) => schema.annotate({ parseOptions: { onExcessProperty: "error" } });
+const strict$3 = (schema) => schema.annotate({ parseOptions: { onExcessProperty: "error" } });
 const Base64Url256$1 = effect.Schema.String.check(effect.Schema.isMinLength(43), effect.Schema.isMaxLength(43), effect.Schema.isPattern(/^[A-Za-z0-9_-]{43}$/));
 const isBase64Url256 = effect.Schema.is(Base64Url256$1);
 const NativeHandoffId = Base64Url256$1.pipe(effect.Schema.brand("NativeHandoffId"));
@@ -1262,7 +1326,7 @@ const NativeHandoffCode = Base64Url256$1.pipe(effect.Schema.brand("NativeHandoff
 const NativeHandoffCodeVerifier = Base64Url256$1.pipe(effect.Schema.brand("NativeHandoffCodeVerifier"));
 const NativeHandoffCodeChallenge = Base64Url256$1.pipe(effect.Schema.brand("NativeHandoffCodeChallenge"));
 const NativeHandoffCallbackUri = effect.Schema.Literals(NATIVE_HANDOFF_CALLBACK_URIS);
-const EpochMs = effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(0));
+const EpochMs$1 = effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(0));
 const BoundedDeviceLabel = effect.Schema.Trim.check(effect.Schema.isNonEmpty(), effect.Schema.isMaxLength(64));
 const RelyingPartyId = effect.Schema.String.check(effect.Schema.isNonEmpty(), effect.Schema.isMaxLength(253), effect.Schema.isPattern(/^(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)(?:\.(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?))*$/i));
 const DisplayName = effect.Schema.Trim.check(effect.Schema.isNonEmpty(), effect.Schema.isMaxLength(64));
@@ -1274,28 +1338,28 @@ const NativeIdentityLoginMethod = effect.Schema.Literals([
 	"recovery_code"
 ]);
 const uniqueNonEmpty = (item, maximum) => effect.Schema.Array(item).check(effect.Schema.isMinLength(1), effect.Schema.isMaxLength(maximum), effect.Schema.makeFilter((values) => new Set(values).size === values.length ? void 0 : "values must be unique"));
-const NativeIdentityAntiBot = effect.Schema.Union([strict$2(effect.Schema.Struct({ provider: effect.Schema.Literal("bypass") })), strict$2(effect.Schema.Struct({
+const NativeIdentityAntiBot = effect.Schema.Union([strict$3(effect.Schema.Struct({ provider: effect.Schema.Literal("bypass") })), strict$3(effect.Schema.Struct({
 	provider: effect.Schema.Literal("turnstile"),
 	siteKey: NativeIdentityTurnstileSiteKey
 }))]);
-const NativeIdentityCapability = strict$2(effect.Schema.Struct({
+const NativeIdentityCapability = strict$3(effect.Schema.Struct({
 	version: effect.Schema.Literal(2),
-	email: strict$2(effect.Schema.Struct({
+	email: strict$3(effect.Schema.Struct({
 		verification: effect.Schema.Literal("required"),
 		antiBot: NativeIdentityAntiBot
 	})),
-	signup: effect.Schema.Union([strict$2(effect.Schema.Struct({ status: effect.Schema.Literal("disabled") })), strict$2(effect.Schema.Struct({
+	signup: effect.Schema.Union([strict$3(effect.Schema.Struct({ status: effect.Schema.Literal("disabled") })), strict$3(effect.Schema.Struct({
 		status: effect.Schema.Literal("enabled"),
 		primaryCredentials: uniqueNonEmpty(NativeIdentityPrimaryCredential, 2)
 	}))]),
-	login: strict$2(effect.Schema.Struct({
+	login: strict$3(effect.Schema.Struct({
 		methods: uniqueNonEmpty(NativeIdentityLoginMethod, 3),
-		passwordSecondFactor: strict$2(effect.Schema.Struct({
+		passwordSecondFactor: strict$3(effect.Schema.Struct({
 			totp: effect.Schema.Literal("when_enrolled"),
 			fallback: effect.Schema.Literal("verified_email_code")
 		}))
 	})),
-	recovery: strict$2(effect.Schema.Struct({
+	recovery: strict$3(effect.Schema.Struct({
 		recoveryCode: effect.Schema.Boolean,
 		passwordReset: effect.Schema.Boolean
 	}))
@@ -1344,29 +1408,29 @@ function validCallbackResponse(value, outcome) {
 }
 const ApprovedCallbackUrl = effect.Schema.String.check(effect.Schema.makeFilter((value) => validCallbackResponse(value, "approved") ? void 0 : "invalid approved callback URL"));
 const CancelledCallbackUrl = effect.Schema.String.check(effect.Schema.makeFilter((value) => validCallbackResponse(value, "cancelled") ? void 0 : "invalid cancelled callback URL"));
-strict$2(effect.Schema.Struct({
+strict$3(effect.Schema.Struct({
 	service: effect.Schema.Literal("ryco-hub"),
 	protocolVersion: effect.Schema.Literal(1),
-	nativeHandoff: strict$2(effect.Schema.Struct({
+	nativeHandoff: strict$3(effect.Schema.Struct({
 		mode: effect.Schema.Literal(NATIVE_HANDOFF_MODE),
 		version: effect.Schema.Literal(1)
 	})),
-	relyingParty: strict$2(effect.Schema.Struct({
+	relyingParty: strict$3(effect.Schema.Struct({
 		id: RelyingPartyId,
 		displayName: DisplayName
 	})),
 	nativeIdentity: effect.Schema.optionalKey(NativeIdentityCapability)
 }));
-const NativeHandoffSignInPurpose = strict$2(effect.Schema.Struct({
+const NativeHandoffSignInPurpose = strict$3(effect.Schema.Struct({
 	kind: effect.Schema.Literal("sign_in"),
 	providerHint: effect.Schema.optionalKey(ExternalIdentityProvider)
 }));
-const NativeHandoffConnectExternalIdentityPurpose = strict$2(effect.Schema.Struct({
+const NativeHandoffConnectExternalIdentityPurpose = strict$3(effect.Schema.Struct({
 	kind: effect.Schema.Literal("connect_external_identity"),
 	provider: ExternalIdentityProvider
 }));
 const NativeHandoffPurpose = effect.Schema.Union([NativeHandoffSignInPurpose, NativeHandoffConnectExternalIdentityPurpose]);
-strict$2(effect.Schema.Struct({
+strict$3(effect.Schema.Struct({
 	redirectUri: NativeHandoffCallbackUri,
 	codeChallenge: NativeHandoffCodeChallenge,
 	codeChallengeMethod: effect.Schema.Literal("S256"),
@@ -1374,25 +1438,25 @@ strict$2(effect.Schema.Struct({
 	deviceLabel: BoundedDeviceLabel,
 	purpose: effect.Schema.optionalKey(NativeHandoffPurpose)
 }));
-strict$2(effect.Schema.Struct({
+strict$3(effect.Schema.Struct({
 	handoffId: NativeHandoffId,
 	authorizationUrl: AuthorizationUrl,
-	expiresAt: EpochMs
+	expiresAt: EpochMs$1
 }));
-strict$2(effect.Schema.Struct({
+strict$3(effect.Schema.Struct({
 	status: effect.Schema.Literal("pending"),
 	deviceLabel: BoundedDeviceLabel,
-	expiresAt: EpochMs,
+	expiresAt: EpochMs$1,
 	providerHint: effect.Schema.optionalKey(ExternalIdentityProvider)
 }));
-strict$2(effect.Schema.Struct({ redirectUri: ApprovedCallbackUrl }));
-strict$2(effect.Schema.Struct({ redirectUri: CancelledCallbackUrl }));
-strict$2(effect.Schema.Struct({
+strict$3(effect.Schema.Struct({ redirectUri: ApprovedCallbackUrl }));
+strict$3(effect.Schema.Struct({ redirectUri: CancelledCallbackUrl }));
+strict$3(effect.Schema.Struct({
 	handoffId: NativeHandoffId,
 	code: NativeHandoffCode,
 	codeVerifier: NativeHandoffCodeVerifier
 }));
-strict$2(effect.Schema.Struct({
+strict$3(effect.Schema.Struct({
 	handoffId: NativeHandoffId,
 	code: NativeHandoffCode,
 	codeVerifier: NativeHandoffCodeVerifier,
@@ -1403,7 +1467,7 @@ const AccountId = effect.Schema.String.check(effect.Schema.isPattern(/^acct_[A-Z
 const SessionId = effect.Schema.String.check(effect.Schema.isPattern(/^sess_[A-Za-z0-9_-]{22,43}$/), effect.Schema.isMaxLength(48));
 const SessionFamilyId = effect.Schema.String.check(effect.Schema.isPattern(/^sfam_[A-Za-z0-9_-]{22,43}$/), effect.Schema.isMaxLength(48));
 const NullableSessionLabel = effect.Schema.NullOr(effect.Schema.Trim.check(effect.Schema.isNonEmpty(), effect.Schema.isMaxLength(64)));
-const NativeHandoffAccount = strict$2(effect.Schema.Struct({
+const NativeHandoffAccount = strict$3(effect.Schema.Struct({
 	id: AccountId,
 	displayName: effect.Schema.Trim.check(effect.Schema.isNonEmpty(), effect.Schema.isMaxLength(200)),
 	role: effect.Schema.Literals([
@@ -1411,32 +1475,241 @@ const NativeHandoffAccount = strict$2(effect.Schema.Struct({
 		"operator",
 		"owner"
 	]),
-	createdAt: EpochMs,
+	createdAt: EpochMs$1,
 	disabledAt: effect.Schema.Null
 }));
-const NativeHandoffSession = strict$2(effect.Schema.Struct({
+const NativeHandoffSession = strict$3(effect.Schema.Struct({
 	id: SessionId,
 	accountId: AccountId,
 	familyId: SessionFamilyId,
 	clientLabel: NullableSessionLabel,
 	kind: effect.Schema.Literal("native"),
-	createdAt: EpochMs,
-	expiresAt: EpochMs,
-	lastSeenAt: EpochMs,
+	createdAt: EpochMs$1,
+	expiresAt: EpochMs$1,
+	lastSeenAt: EpochMs$1,
 	replacedBySessionId: effect.Schema.Null,
 	revokedAt: effect.Schema.Null,
 	revocationReasonCode: effect.Schema.Null
 }).check(effect.Schema.makeFilter((session) => session.expiresAt > session.createdAt && session.lastSeenAt >= session.createdAt && session.lastSeenAt <= session.expiresAt ? void 0 : "native session timestamps are inconsistent")));
-strict$2(effect.Schema.Struct({
+strict$3(effect.Schema.Struct({
 	account: NativeHandoffAccount,
 	session: NativeHandoffSession,
 	token: Base64Url256$1
 }).check(effect.Schema.makeFilter((value) => value.session.accountId === value.account.id ? void 0 : "native session account does not match")));
-strict$2(effect.Schema.Struct({
+strict$3(effect.Schema.Struct({
 	status: effect.Schema.Literal("connected"),
 	purpose: NativeHandoffConnectExternalIdentityPurpose,
 	externalIdentity: ExternalIdentitySummary
 }));
+const NATIVE_E2EE_MAX_GRANT_KEYS = 4;
+const HUB_DEVICE_GRANT_MAX_BYTES = 2048;
+const HUB_DEVICE_GRANT_BASE64URL_MAX_CHARS = 2731;
+const CLIENT_PREKEY_CERTIFICATE_BASE64URL_MAX_CHARS = 1459;
+const NODE_E2EE_CAPABILITY_STATEMENT_BASE64URL_MAX_CHARS = 6920;
+const strict$2 = (schema) => schema.annotate({ parseOptions: { onExcessProperty: "error" } });
+const UInt32 = effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(0), effect.Schema.isLessThanOrEqualTo(4294967295));
+const EpochMs = effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(0), effect.Schema.isLessThanOrEqualTo(Number.MAX_SAFE_INTEGER));
+const ExactBytes = (length) => effect.Schema.Uint8Array.check(effect.Schema.isMinLength(length), effect.Schema.isMaxLength(length));
+const Base64Url = (minimum, maximum) => effect.Schema.String.check(effect.Schema.isMinLength(minimum), effect.Schema.isMaxLength(maximum), effect.Schema.isPattern(/^[A-Za-z0-9_-]+$/), effect.Schema.makeFilter((value) => value.length % 4 === 1 ? "invalid unpadded base64url length" : void 0));
+const Base64Url32 = Base64Url(43, 43);
+const Base64UrlP256 = Base64Url(87, 87);
+const HubDeviceGrantId = effect.Schema.String.check(effect.Schema.isPattern(/^hgr_[A-Za-z0-9_-]{22,43}$/), effect.Schema.isMaxLength(47)).pipe(effect.Schema.brand("HubDeviceGrantId"));
+const NodeE2eeContinuityId = effect.Schema.String.check(effect.Schema.isPattern(/^nct_[A-Za-z0-9_-]{22}$/), effect.Schema.isMaxLength(26)).pipe(effect.Schema.brand("NodeE2eeContinuityId"));
+const NativeE2eePlatform = effect.Schema.Literals([
+	"darwin",
+	"linux",
+	"windows",
+	"ios",
+	"android"
+]);
+const NativeE2eeReportedKeyBacking = effect.Schema.Literals([
+	"secure-enclave",
+	"strongbox",
+	"tee",
+	"tpm",
+	"hardware-backed",
+	"unavailable"
+]);
+const NativeE2eeUsableKeyBacking = effect.Schema.Literals([
+	"secure-enclave",
+	"strongbox",
+	"tee",
+	"tpm",
+	"hardware-backed"
+]);
+const NativeE2eeEnrollmentStatus = effect.Schema.Literals([
+	"active",
+	"revoked",
+	"superseded"
+]);
+effect.Schema.Literals([
+	"locally-verified",
+	"account-enrolled",
+	"web-unsigned"
+]);
+const NodeE2eeAdmissionPolicy = effect.Schema.Literals([
+	"compatibility",
+	"require-e2ee",
+	"require-native-e2ee",
+	"require-locally-approved-native-e2ee"
+]);
+const HubDeviceGrantEnvelope = Base64Url(1, HUB_DEVICE_GRANT_BASE64URL_MAX_CHARS).pipe(effect.Schema.brand("HubDeviceGrantEnvelope"));
+const E2eeDigestBase64Url = Base64Url32.pipe(effect.Schema.brand("E2eeDigestBase64Url"));
+const BoundedCapabilities = effect.Schema.Array(RelayCapability).check(effect.Schema.isMinLength(1), effect.Schema.isMaxLength(32), effect.Schema.makeFilter((values) => new Set(values).size === values.length ? void 0 : "capabilities must be distinct"));
+const HubOrigin = effect.Schema.String.check(effect.Schema.isNonEmpty(), effect.Schema.isMaxLength(128), effect.Schema.isPattern(/^https?:\/\/[^\s/]+$/));
+const DeviceLabel = effect.Schema.Trim.check(effect.Schema.isNonEmpty(), effect.Schema.isMaxLength(100));
+const AppVersion = effect.Schema.String.check(effect.Schema.isNonEmpty(), effect.Schema.isMaxLength(64));
+const IdempotencyKey = Base64Url32.pipe(effect.Schema.brand("NativeE2eeIdempotencyKey"));
+const ReasonCode = effect.Schema.String.check(effect.Schema.isMinLength(1), effect.Schema.isMaxLength(64), effect.Schema.isPattern(/^[a-z][a-z0-9_]*$/));
+const HubDeviceGrantClaims = strict$2(effect.Schema.Struct({
+	version: effect.Schema.Literal(1),
+	suiteId: effect.Schema.Literal(2),
+	issuerHubOrigin: HubOrigin,
+	keyId: HubGrantVerificationKeyId,
+	grantId: HubDeviceGrantId,
+	accountId: HubAccountId,
+	accountAuthEpoch: E2eeAuthorizationEpoch,
+	enrollmentId: NativeE2eeEnrollmentId,
+	enrollmentRevision: NativeE2eeEnrollmentRevision,
+	deviceAuthEpoch: E2eeAuthorizationEpoch,
+	deviceIdentityAlgorithm: effect.Schema.Literal("p256"),
+	deviceIdentityPublicKey: ExactBytes(65),
+	deviceIdentityFingerprint: ExactBytes(32),
+	deviceAgreementAlgorithm: effect.Schema.Literal("x25519"),
+	deviceAgreementPublicKey: ExactBytes(32),
+	deviceAgreementFingerprint: ExactBytes(32),
+	clientPrekeyCertificateDigest: ExactBytes(32),
+	nodeId: RelayNodeId,
+	nodeIdentityAlgorithm: effect.Schema.Literal("ed25519"),
+	nodeIdentityPublicKey: ExactBytes(32),
+	nodeIdentityFingerprint: ExactBytes(32),
+	nodeAgreementAlgorithm: effect.Schema.Literal("x25519"),
+	nodeAgreementPublicKey: ExactBytes(32),
+	nodeAgreementFingerprint: ExactBytes(32),
+	nodeContinuityId: NodeE2eeContinuityId,
+	nodePolicyGeneration: UInt32,
+	nodeCapabilityStatementDigest: ExactBytes(32),
+	relayTicketId: RelayTicketId,
+	maximumRole: RelayEffectiveRole,
+	capabilities: BoundedCapabilities,
+	issuedAt: EpochMs,
+	notBefore: EpochMs,
+	expiresAt: EpochMs,
+	nonce: ExactBytes(32)
+}).check(effect.Schema.makeFilter((claims) => claims.notBefore <= claims.issuedAt && claims.issuedAt < claims.expiresAt && claims.expiresAt - claims.issuedAt <= 12e4 ? void 0 : "invalid grant validity interval")));
+strict$2(effect.Schema.Struct({
+	protocolVersion: effect.Schema.Literal(1),
+	hubOrigin: HubOrigin,
+	accountId: HubAccountId,
+	enrollmentId: NativeE2eeEnrollmentId,
+	expectedEnrollmentRevision: effect.Schema.optionalKey(UInt32),
+	identityPublicKey: Base64UrlP256,
+	identityFingerprint: Base64Url32,
+	agreementPublicKey: Base64Url32,
+	agreementFingerprint: Base64Url32,
+	clientPrekeyCertificate: Base64Url(1, CLIENT_PREKEY_CERTIFICATE_BASE64URL_MAX_CHARS),
+	clientPrekeyCertificateDigest: Base64Url32,
+	certificateExpiresAt: EpochMs,
+	platform: NativeE2eePlatform,
+	appVersion: AppVersion,
+	reportedKeyBacking: NativeE2eeUsableKeyBacking,
+	deviceLabel: DeviceLabel,
+	requestedMaximumRole: RelayEffectiveRole,
+	requestedCapabilities: BoundedCapabilities,
+	enrollmentNonce: Base64Url32,
+	idempotencyKey: IdempotencyKey
+}));
+const AccountE2eeDeviceSummary = strict$2(effect.Schema.Struct({
+	enrollmentId: NativeE2eeEnrollmentId,
+	enrollmentRevision: NativeE2eeEnrollmentRevision,
+	accountAuthEpoch: E2eeAuthorizationEpoch,
+	deviceAuthEpoch: E2eeAuthorizationEpoch,
+	platform: NativeE2eePlatform,
+	appVersion: AppVersion,
+	reportedKeyBacking: NativeE2eeReportedKeyBacking,
+	deviceLabel: DeviceLabel,
+	identityFingerprint: Base64Url32,
+	agreementFingerprint: Base64Url32,
+	clientPrekeyCertificateDigest: Base64Url32,
+	certificateExpiresAt: EpochMs,
+	status: NativeE2eeEnrollmentStatus,
+	createdAt: EpochMs,
+	updatedAt: EpochMs,
+	lastUsedAt: effect.Schema.NullOr(EpochMs),
+	revokedAt: effect.Schema.NullOr(EpochMs)
+}).check(effect.Schema.makeFilter((device) => {
+	if (device.updatedAt < device.createdAt) return "updatedAt must not precede createdAt";
+	if (device.lastUsedAt !== null && device.lastUsedAt < device.createdAt) return "lastUsedAt must not precede createdAt";
+	if (device.revokedAt !== null && device.revokedAt < device.createdAt) return "revokedAt must not precede createdAt";
+	if (device.status === "active" && device.revokedAt !== null) return "active enrollment cannot have revokedAt";
+	if (device.status !== "active" && device.revokedAt === null) return "inactive enrollment requires revokedAt";
+})));
+strict$2(effect.Schema.Struct({
+	protocolVersion: effect.Schema.Literal(1),
+	enrollment: AccountE2eeDeviceSummary
+}));
+strict$2(effect.Schema.Struct({
+	protocolVersion: effect.Schema.Literal(1),
+	devices: effect.Schema.Array(AccountE2eeDeviceSummary).check(effect.Schema.isMaxLength(128), effect.Schema.makeFilter((devices) => new Set(devices.map((device) => `${device.enrollmentId}:${device.enrollmentRevision}`)).size === devices.length ? void 0 : "device enrollment revisions must be distinct"))
+}));
+strict$2(effect.Schema.Struct({
+	expectedEnrollmentRevision: NativeE2eeEnrollmentRevision,
+	deviceLabel: DeviceLabel
+}));
+strict$2(effect.Schema.Struct({
+	expectedEnrollmentRevision: NativeE2eeEnrollmentRevision,
+	reasonCode: ReasonCode
+}));
+strict$2(effect.Schema.Struct({
+	protocolVersion: effect.Schema.Literal(1),
+	enrollment: AccountE2eeDeviceSummary
+}));
+const HubGrantVerificationKey = strict$2(effect.Schema.Struct({
+	keyId: HubGrantVerificationKeyId,
+	publicKey: Base64Url32,
+	notBefore: EpochMs,
+	notAfter: EpochMs
+}).check(effect.Schema.makeFilter((key) => key.notAfter > key.notBefore ? void 0 : "notAfter must be after notBefore")));
+const HubGrantVerificationKeys = effect.Schema.Array(HubGrantVerificationKey).check(effect.Schema.isMinLength(1), effect.Schema.isMaxLength(NATIVE_E2EE_MAX_GRANT_KEYS), effect.Schema.makeFilter((keys) => new Set(keys.map((key) => key.keyId)).size === keys.length ? void 0 : "grant verification key ids must be distinct"));
+strict$2(effect.Schema.Struct({
+	protocolVersion: effect.Schema.Literal(1),
+	generation: E2eeKeysetGeneration,
+	keys: HubGrantVerificationKeys
+}));
+strict$2(effect.Schema.Struct({
+	protocolVersion: effect.Schema.Literal(1),
+	nodeId: RelayNodeId,
+	capability: RelayCapability,
+	protocolMajor: effect.Schema.Literal(1),
+	protocolMinor: effect.Schema.Literal(3),
+	suiteId: effect.Schema.Literal(2),
+	enrollmentId: NativeE2eeEnrollmentId,
+	enrollmentRevision: NativeE2eeEnrollmentRevision,
+	clientPrekeyCertificateDigest: Base64Url32
+}));
+strict$2(effect.Schema.Struct({
+	protocolVersion: effect.Schema.Literal(1),
+	ticket: Base64Url(43, 86),
+	ticketId: RelayTicketId,
+	expiresAt: EpochMs,
+	protocolMajor: effect.Schema.Literal(1),
+	protocolMinor: effect.Schema.Literal(3),
+	suiteId: effect.Schema.Literal(2),
+	deviceGrant: HubDeviceGrantEnvelope,
+	deviceGrantDigest: E2eeDigestBase64Url,
+	nodeCapabilityStatement: Base64Url(1, NODE_E2EE_CAPABILITY_STATEMENT_BASE64URL_MAX_CHARS),
+	nodeCapabilityStatementDigest: E2eeDigestBase64Url,
+	keysetGeneration: E2eeKeysetGeneration,
+	capability: RelayCapability,
+	effectiveRole: RelayEffectiveRole
+}));
+strict$2(effect.Schema.Struct({
+	protocolVersion: effect.Schema.Literal(1),
+	enrollmentId: NativeE2eeEnrollmentId,
+	enrollmentRevision: NativeE2eeEnrollmentRevision,
+	accountAuthEpoch: E2eeAuthorizationEpoch,
+	deviceAuthEpoch: E2eeAuthorizationEpoch
+}));
 const LOCAL_INTRODUCTION_DESCRIPTOR_PATH = "/api/desktop/e2ee/local-introduction/descriptor";
 const LOCAL_INTRODUCTION_COMPLETE_PATH = "/api/desktop/e2ee/local-introduction/complete";
 const LOCAL_INTRODUCTION_CONTROL_HEADER = "x-ryco-desktop-control";
@@ -3028,6 +3301,28 @@ const ThreadGoalStatus = effect.Schema.Literals([
 	"budgetLimited",
 	"complete"
 ]);
+const ThreadGoalUpdate = effect.Schema.Struct({
+	objective: effect.Schema.optional(ThreadGoalObjective),
+	status: effect.Schema.optional(ThreadGoalStatus),
+	tokenBudget: effect.Schema.optional(effect.Schema.NullOr(PositiveInt))
+});
+const ThreadGoalSynchronization = effect.Schema.Struct({
+	requestId: effect.Schema.String,
+	state: effect.Schema.Literals([
+		"pending",
+		"failed",
+		"unsupported"
+	]),
+	action: effect.Schema.Literals(["set", "clear"]),
+	startTurn: effect.Schema.optional(effect.Schema.Boolean),
+	deferUntilTurn: effect.Schema.optional(effect.Schema.Boolean),
+	fields: effect.Schema.optional(effect.Schema.Array(effect.Schema.Literals([
+		"objective",
+		"status",
+		"tokenBudget"
+	]))),
+	error: effect.Schema.optional(effect.Schema.String)
+});
 const ThreadGoal = effect.Schema.Struct({
 	objective: ThreadGoalObjective,
 	status: ThreadGoalStatus,
@@ -3035,7 +3330,9 @@ const ThreadGoal = effect.Schema.Struct({
 	tokensUsed: NonNegativeInt,
 	timeUsedSeconds: NonNegativeInt,
 	createdAt: IsoDateTime,
-	updatedAt: IsoDateTime
+	updatedAt: IsoDateTime,
+	/** Local delivery state. Absent when the native provider has confirmed the goal. */
+	synchronization: effect.Schema.optional(ThreadGoalSynchronization)
 });
 const ThreadGoalEventOrigin = effect.Schema.Literals(["client", "provider"]);
 //#endregion
@@ -3325,7 +3622,30 @@ const ContextHandoffInspectionSummaryInput = effect.Schema.Struct({
 	threadId: ThreadId,
 	handoffId: ContextHandoffId
 });
+const CONTEXT_HANDOFF_MAX_INPUT_CHARS = 14e5;
+const ModelContextWindowMetadata = effect.Schema.Array(effect.Schema.Struct({
+	slug: effect.Schema.String,
+	aliases: effect.Schema.optional(effect.Schema.Array(effect.Schema.String)),
+	defaultContextWindow: effect.Schema.optional(effect.Schema.String),
+	contextWindowTokens: effect.Schema.optional(effect.Schema.Record(effect.Schema.String, effect.Schema.Number)),
+	fixedContextWindowTokens: effect.Schema.optional(effect.Schema.Number)
+}));
+const ContextHandoffInputBudget = effect.Schema.Struct({
+	maxInputChars: PositiveInt,
+	budgetSource: effect.Schema.Literals([
+		"default",
+		"manifest",
+		"slug"
+	]),
+	contextWindowTokens: effect.Schema.NullOr(PositiveInt)
+});
+const ContextHandoffAppliedBudget = effect.Schema.Struct({
+	maxInputChars: effect.Schema.optional(effect.Schema.NullOr(PositiveInt)),
+	budgetSource: effect.Schema.optional(effect.Schema.NullOr(ContextHandoffInputBudget.fields.budgetSource)),
+	contextWindowTokens: effect.Schema.optional(effect.Schema.NullOr(PositiveInt))
+});
 const ContextHandoffInspectionSummary = effect.Schema.Struct({
+	...ContextHandoffAppliedBudget.fields,
 	threadId: ThreadId,
 	handoffId: ContextHandoffId,
 	status: effect.Schema.Literals([
@@ -3451,15 +3771,20 @@ const PROVIDER_SEND_TURN_MAX_FILE_BYTES = 52428800;
 const PROVIDER_SEND_TURN_MAX_ATTACHMENT_TOTAL_BYTES = 52428800;
 const PROVIDER_SEND_TURN_MAX_IMAGE_DATA_URL_CHARS = 14e6;
 const PROVIDER_SEND_TURN_MAX_FILE_DATA_URL_CHARS = 7e7;
-const ChatAttachmentId = TrimmedNonEmptyString.check(effect.Schema.isMaxLength(128), effect.Schema.isPattern(/^[a-z0-9_-]+$/i));
+const CHAT_ATTACHMENT_ID_MAX_CHARS = 128;
+const FILE_ATTACHMENT_UPLOAD_TOKEN_MAX_CHARS = 256;
+const ChatAttachmentId = TrimmedNonEmptyString.check(effect.Schema.isMaxLength(CHAT_ATTACHMENT_ID_MAX_CHARS), effect.Schema.isPattern(/^[a-z0-9_-]+$/i));
 const ChatAttachmentName = TrimmedNonEmptyString.check(effect.Schema.isMaxLength(255), effect.Schema.isPattern(/^[^/\\\p{Cc}]+$/u));
 const ChatAttachmentMimeType = TrimmedNonEmptyString.check(effect.Schema.isMaxLength(100), effect.Schema.isPattern(/^[a-z0-9][a-z0-9!#$&^_.+-]*\/[a-z0-9][a-z0-9!#$&^_.+-]*$/i));
+const UnknownChatAttachmentType = effect.Schema.String.check(effect.Schema.makeFilter((type) => type === "image" || type === "file" ? "reserved chat attachment type" : true));
 const ChatImageAttachment = effect.Schema.Struct({
 	type: effect.Schema.Literal("image"),
 	id: ChatAttachmentId,
 	name: ChatAttachmentName,
 	mimeType: ChatAttachmentMimeType.check(effect.Schema.isPattern(/^image\//i)),
-	sizeBytes: NonNegativeInt.check(effect.Schema.isLessThanOrEqualTo(PROVIDER_SEND_TURN_MAX_IMAGE_BYTES))
+	sizeBytes: NonNegativeInt.check(effect.Schema.isLessThanOrEqualTo(PROVIDER_SEND_TURN_MAX_IMAGE_BYTES)),
+	width: effect.Schema.optional(NonNegativeInt),
+	height: effect.Schema.optional(NonNegativeInt)
 });
 const UploadChatImageAttachment = effect.Schema.Struct({
 	type: effect.Schema.Literal("image"),
@@ -3473,17 +3798,66 @@ const ChatFileAttachment = effect.Schema.Struct({
 	id: ChatAttachmentId,
 	name: ChatAttachmentName,
 	mimeType: ChatAttachmentMimeType,
-	sizeBytes: NonNegativeInt.check(effect.Schema.isLessThanOrEqualTo(PROVIDER_SEND_TURN_MAX_FILE_BYTES))
+	sizeBytes: NonNegativeInt.check(effect.Schema.isLessThanOrEqualTo(PROVIDER_SEND_TURN_MAX_FILE_BYTES)),
+	width: effect.Schema.optional(NonNegativeInt),
+	height: effect.Schema.optional(NonNegativeInt)
 });
+const CHAT_ATTACHMENT_READ_CHUNK_BYTES = 262144;
+const ChatAttachmentReadChunkInput = effect.Schema.Struct({
+	threadId: ThreadId,
+	messageId: MessageId,
+	attachmentId: ChatAttachmentId,
+	offset: NonNegativeInt.check(effect.Schema.isLessThanOrEqualTo(PROVIDER_SEND_TURN_MAX_FILE_BYTES))
+});
+const ChatAttachmentReadChunkResult = effect.Schema.Struct({
+	dataBase64: effect.Schema.String.check(effect.Schema.isMaxLength(4 * Math.ceil(CHAT_ATTACHMENT_READ_CHUNK_BYTES / 3))),
+	offset: NonNegativeInt,
+	totalBytes: NonNegativeInt.check(effect.Schema.isLessThanOrEqualTo(PROVIDER_SEND_TURN_MAX_FILE_BYTES))
+});
+var ChatAttachmentReadError = class extends effect.Schema.TaggedError()("ChatAttachmentReadError", { message: effect.Schema.String }) {};
+const FileAttachmentUploadToken = TrimmedNonEmptyString.check(effect.Schema.isMaxLength(FILE_ATTACHMENT_UPLOAD_TOKEN_MAX_CHARS));
 const UploadChatFileAttachment = effect.Schema.Struct({
 	type: effect.Schema.Literal("file"),
 	name: ChatAttachmentName,
 	mimeType: ChatAttachmentMimeType,
 	sizeBytes: NonNegativeInt.check(effect.Schema.isLessThanOrEqualTo(PROVIDER_SEND_TURN_MAX_FILE_BYTES)),
-	dataUrl: TrimmedNonEmptyString.check(effect.Schema.isMaxLength(PROVIDER_SEND_TURN_MAX_FILE_DATA_URL_CHARS))
+	dataUrl: effect.Schema.optionalKey(TrimmedNonEmptyString.check(effect.Schema.isMaxLength(PROVIDER_SEND_TURN_MAX_FILE_DATA_URL_CHARS))),
+	uploadToken: effect.Schema.optionalKey(FileAttachmentUploadToken)
+}).check(effect.Schema.makeFilter((attachment) => {
+	const hasDataUrl = attachment.dataUrl !== void 0;
+	return hasDataUrl !== (attachment.uploadToken !== void 0) ? true : {
+		path: ["dataUrl"],
+		issue: hasDataUrl ? "provide either dataUrl or uploadToken, not both" : "provide exactly one of dataUrl or uploadToken"
+	};
+}));
+const FileAttachmentCreateUploadUrlInput = effect.Schema.Struct({
+	threadId: ThreadId,
+	name: ChatAttachmentName,
+	mimeType: ChatAttachmentMimeType,
+	sizeBytes: NonNegativeInt.check(effect.Schema.isLessThanOrEqualTo(PROVIDER_SEND_TURN_MAX_FILE_BYTES))
+});
+const FileAttachmentCreateUploadUrlResult = effect.Schema.Struct({
+	uploadToken: FileAttachmentUploadToken,
+	expiresAt: IsoDateTime,
+	maxUploadBytes: NonNegativeInt
 });
-const ChatAttachment = effect.Schema.Union([ChatImageAttachment, ChatFileAttachment]);
-const UploadChatAttachment = effect.Schema.Union([UploadChatImageAttachment, UploadChatFileAttachment]);
+const ChatUnknownAttachment = effect.Schema.Struct({
+	type: UnknownChatAttachmentType,
+	id: effect.Schema.optional(ChatAttachmentId),
+	name: effect.Schema.optional(ChatAttachmentName),
+	mimeType: effect.Schema.optional(effect.Schema.String),
+	sizeBytes: effect.Schema.optional(NonNegativeInt)
+});
+const ChatAttachment = effect.Schema.Union([
+	ChatImageAttachment,
+	ChatFileAttachment,
+	ChatUnknownAttachment
+]);
+const UploadChatAttachment = effect.Schema.Union([
+	UploadChatImageAttachment,
+	UploadChatFileAttachment,
+	ChatUnknownAttachment
+]);
 const ChatAttachments = effect.Schema.Array(ChatAttachment).check(effect.Schema.isMaxLength(8));
 const UploadChatAttachments = effect.Schema.Array(UploadChatAttachment).check(effect.Schema.isMaxLength(8));
 const ProjectScriptIcon = effect.Schema.Literals([
@@ -3644,6 +4018,8 @@ const OrchestrationThread = effect.Schema.Struct({
 	archivedAt: effect.Schema.NullOr(IsoDateTime).pipe(effect.Schema.withDecodingDefault(effect.Effect.succeed(null))),
 	settledOverride: effect.Schema.NullOr(ThreadSettlementOverride).pipe(effect.Schema.withDecodingDefault(effect.Effect.succeed(null))),
 	settledAt: effect.Schema.NullOr(IsoDateTime).pipe(effect.Schema.withDecodingDefault(effect.Effect.succeed(null))),
+	snoozedUntil: effect.Schema.optional(effect.Schema.NullOr(IsoDateTime)),
+	snoozedAt: effect.Schema.optional(effect.Schema.NullOr(IsoDateTime)),
 	deletedAt: effect.Schema.NullOr(IsoDateTime),
 	messages: effect.Schema.Array(OrchestrationMessage),
 	proposedPlans: effect.Schema.Array(OrchestrationProposedPlan).pipe(effect.Schema.withDecodingDefault(effect.Effect.succeed([]))),
@@ -3704,6 +4080,8 @@ const OrchestrationThreadShell = effect.Schema.Struct({
 	archivedAt: effect.Schema.NullOr(IsoDateTime).pipe(effect.Schema.withDecodingDefault(effect.Effect.succeed(null))),
 	settledOverride: effect.Schema.NullOr(ThreadSettlementOverride).pipe(effect.Schema.withDecodingDefault(effect.Effect.succeed(null))),
 	settledAt: effect.Schema.NullOr(IsoDateTime).pipe(effect.Schema.withDecodingDefault(effect.Effect.succeed(null))),
+	snoozedUntil: effect.Schema.optional(effect.Schema.NullOr(IsoDateTime)),
+	snoozedAt: effect.Schema.optional(effect.Schema.NullOr(IsoDateTime)),
 	session: effect.Schema.NullOr(OrchestrationSession),
 	latestUserMessageAt: effect.Schema.NullOr(IsoDateTime),
 	hasPendingApprovals: effect.Schema.Boolean,
@@ -3926,6 +4304,17 @@ const ThreadUnarchiveCommand = effect.Schema.Struct({
 	commandId: CommandId,
 	threadId: ThreadId
 });
+const ThreadSnoozeCommand = effect.Schema.Struct({
+	type: effect.Schema.Literal("thread.snooze"),
+	commandId: CommandId,
+	threadId: ThreadId,
+	snoozedUntil: IsoDateTime
+});
+const ThreadUnsnoozeCommand = effect.Schema.Struct({
+	type: effect.Schema.Literal("thread.unsnooze"),
+	commandId: CommandId,
+	threadId: ThreadId
+});
 const ThreadSettleCommand = effect.Schema.Struct({
 	type: effect.Schema.Literal("thread.settle"),
 	commandId: CommandId,
@@ -3969,11 +4358,10 @@ const ThreadTokenModeSetCommand = effect.Schema.Struct({
 });
 const ThreadGoalSetCommand = effect.Schema.Struct({
 	type: effect.Schema.Literal("thread.goal.set"),
+	startTurn: effect.Schema.optional(effect.Schema.Boolean),
 	commandId: CommandId,
 	threadId: ThreadId,
-	objective: effect.Schema.optional(ThreadGoalObjective),
-	status: effect.Schema.optional(ThreadGoalStatus),
-	tokenBudget: effect.Schema.optional(effect.Schema.NullOr(PositiveInt)),
+	...ThreadGoalUpdate.fields,
 	createdAt: IsoDateTime
 });
 const ThreadGoalClearCommand = effect.Schema.Struct({
@@ -3994,6 +4382,7 @@ const ThreadTurnStartBootstrapCreateThread = effect.Schema.Struct({
 	createdAt: IsoDateTime
 });
 const ThreadTurnStartBootstrapPrepareWorktree = effect.Schema.Struct({
+	fetchOrigin: effect.Schema.optional(effect.Schema.Boolean),
 	projectCwd: TrimmedNonEmptyString,
 	baseBranch: TrimmedNonEmptyString,
 	branch: effect.Schema.optional(TrimmedNonEmptyString)
@@ -4018,6 +4407,7 @@ const ThreadTurnStartCommand = effect.Schema.Struct({
 	runtimeMode: RuntimeMode.pipe(effect.Schema.withDecodingDefault(effect.Effect.succeed(DEFAULT_RUNTIME_MODE))),
 	interactionMode: ProviderInteractionMode.pipe(effect.Schema.withDecodingDefault(effect.Effect.succeed(DEFAULT_PROVIDER_INTERACTION_MODE))),
 	tokenMode: effect.Schema.optionalKey(AgentTokenMode),
+	goal: effect.Schema.optional(ThreadGoalUpdate),
 	bootstrap: effect.Schema.optional(ThreadTurnStartBootstrap),
 	sourceProposedPlan: effect.Schema.optional(SourceProposedPlanReference),
 	sourceControlContexts: effect.Schema.optional(effect.Schema.Array(ComposerSourceControlContext)),
@@ -4038,6 +4428,7 @@ const ClientThreadTurnStartCommand = effect.Schema.Struct({
 	runtimeMode: RuntimeMode,
 	interactionMode: ProviderInteractionMode,
 	tokenMode: effect.Schema.optionalKey(AgentTokenMode),
+	goal: effect.Schema.optional(ThreadGoalUpdate),
 	bootstrap: effect.Schema.optional(ThreadTurnStartBootstrap),
 	sourceProposedPlan: effect.Schema.optional(SourceProposedPlanReference),
 	sourceControlContexts: effect.Schema.optional(effect.Schema.Array(ComposerSourceControlContext)),
@@ -4204,6 +4595,8 @@ const DispatchableClientOrchestrationCommand = effect.Schema.Union([
 	ThreadDeleteCommand,
 	ThreadArchiveCommand,
 	ThreadUnarchiveCommand,
+	ThreadSnoozeCommand,
+	ThreadUnsnoozeCommand,
 	ThreadSettleCommand,
 	ThreadUnsettleCommand,
 	ThreadMetaUpdateCommand,
@@ -4239,6 +4632,8 @@ const ClientOrchestrationCommand = effect.Schema.Union([
 	ThreadDeleteCommand,
 	ThreadArchiveCommand,
 	ThreadUnarchiveCommand,
+	ThreadSnoozeCommand,
+	ThreadUnsnoozeCommand,
 	ThreadSettleCommand,
 	ThreadUnsettleCommand,
 	ThreadMetaUpdateCommand,
@@ -4286,6 +4681,8 @@ const ThreadMessageAssistantCompleteCommand = effect.Schema.Struct({
 	commandId: CommandId,
 	threadId: ThreadId,
 	messageId: MessageId,
+	text: effect.Schema.optional(effect.Schema.String),
+	attachments: effect.Schema.optional(effect.Schema.Array(ChatAttachment)),
 	turnId: effect.Schema.optional(TurnId),
 	createdAt: IsoDateTime
 });
@@ -4367,15 +4764,30 @@ const ThreadGoalSyncCommand = effect.Schema.Struct({
 	commandId: CommandId,
 	threadId: ThreadId,
 	goal: ThreadGoal,
+	expectedRequestId: effect.Schema.optional(effect.Schema.String),
 	createdAt: IsoDateTime
 });
 const ThreadGoalProviderClearCommand = effect.Schema.Struct({
 	type: effect.Schema.Literal("thread.goal.provider-clear"),
 	commandId: CommandId,
 	threadId: ThreadId,
+	expectedRequestId: effect.Schema.optional(effect.Schema.String),
 	createdAt: IsoDateTime
 });
 const InternalOrchestrationCommand = effect.Schema.Union([
+	effect.Schema.Struct({
+		type: effect.Schema.Literal("thread.history.restore"),
+		commandId: CommandId,
+		threadId: ThreadId,
+		providerInstanceId: ProviderInstanceId,
+		runtimeSessionId: RuntimeSessionId,
+		expectedUpdatedAt: IsoDateTime,
+		messages: effect.Schema.Array(OrchestrationMessage),
+		activities: effect.Schema.Array(OrchestrationThreadActivity),
+		completedTurnIds: effect.Schema.Array(TurnId),
+		failedTurnIds: effect.Schema.Array(TurnId),
+		createdAt: IsoDateTime
+	}),
 	ThreadSessionSetCommand,
 	ThreadMessageAssistantDeltaCommand,
 	ThreadMessageAssistantCompleteCommand,
@@ -4397,6 +4809,8 @@ const OrchestrationEventType = effect.Schema.Literals([
 	"thread.deleted",
 	"thread.archived",
 	"thread.unarchived",
+	"thread.snoozed",
+	"thread.unsnoozed",
 	"thread.settled",
 	"thread.unsettled",
 	"thread.meta-updated",
@@ -4501,6 +4915,16 @@ const ThreadUnarchivedPayload = effect.Schema.Struct({
 	threadId: ThreadId,
 	updatedAt: IsoDateTime
 });
+const ThreadSnoozedPayload = effect.Schema.Struct({
+	threadId: ThreadId,
+	snoozedUntil: IsoDateTime,
+	snoozedAt: IsoDateTime,
+	updatedAt: IsoDateTime
+});
+const ThreadUnsnoozedPayload = effect.Schema.Struct({
+	threadId: ThreadId,
+	updatedAt: IsoDateTime
+});
 const ThreadSettledPayload = effect.Schema.Struct({
 	threadId: ThreadId,
 	settledAt: IsoDateTime,
@@ -4789,6 +5213,16 @@ const OrchestrationEvent = effect.Schema.Union([
 		type: effect.Schema.Literal("thread.unarchived"),
 		payload: ThreadUnarchivedPayload
 	}),
+	effect.Schema.Struct({
+		...EventBaseFields,
+		type: effect.Schema.Literal("thread.snoozed"),
+		payload: ThreadSnoozedPayload
+	}),
+	effect.Schema.Struct({
+		...EventBaseFields,
+		type: effect.Schema.Literal("thread.unsnoozed"),
+		payload: ThreadUnsnoozedPayload
+	}),
 	effect.Schema.Struct({
 		...EventBaseFields,
 		type: effect.Schema.Literal("thread.settled"),
@@ -5232,6 +5666,10 @@ var OrchestrationReplayEventsError = class extends effect.Schema.TaggedError()("
 	message: TrimmedNonEmptyString,
 	cause: effect.Schema.optional(effect.Schema.Defect())
 }) {};
+var FileAttachmentCreateUploadUrlError = class extends effect.Schema.TaggedError()("FileAttachmentCreateUploadUrlError", {
+	message: TrimmedNonEmptyString,
+	cause: effect.Schema.optional(effect.Schema.Defect())
+}) {};
 const ProviderSessionStatus = effect.Schema.Literals([
 	"connecting",
 	"ready",
@@ -5275,7 +5713,7 @@ const ProviderSessionStartInput = effect.Schema.Struct({
 });
 const ProviderSendTurnInput = effect.Schema.Struct({
 	threadId: ThreadId,
-	input: effect.Schema.optional(TrimmedNonEmptyString.check(effect.Schema.isMaxLength(PROVIDER_SEND_TURN_MAX_INPUT_CHARS))),
+	input: effect.Schema.optional(TrimmedNonEmptyString.check(effect.Schema.isMaxLength(CONTEXT_HANDOFF_MAX_INPUT_CHARS))),
 	attachments: effect.Schema.optional(effect.Schema.Array(ChatAttachment).check(effect.Schema.isMaxLength(8))),
 	sourceControlContexts: effect.Schema.optional(effect.Schema.Array(ComposerSourceControlContext).check(effect.Schema.isMaxLength(10))),
 	modelSelection: effect.Schema.optional(ModelSelection),
@@ -6472,7 +6910,7 @@ const AiFocusRefreshIntervalMs = effect_Schema.Literals([
 const ClientSettingsSchema = effect_Schema.Struct({
 	aiFocusEnabled: effect_Schema.Boolean.pipe(effect_Schema.withDecodingDefault(effect.Effect.succeed(false))),
 	aiFocusRefreshIntervalMs: AiFocusRefreshIntervalMs.pipe(effect_Schema.withDecodingDefault(effect.Effect.succeed(6e5))),
-	autoOpenPlanSidebar: effect_Schema.Boolean.pipe(effect_Schema.withDecodingDefault(effect.Effect.succeed(false))),
+	autoOpenPlanSidebar: effect_Schema.Boolean.pipe(effect_Schema.withDecodingDefault(effect.Effect.succeed(true))),
 	confirmThreadArchive: effect_Schema.Boolean.pipe(effect_Schema.withDecodingDefault(effect.Effect.succeed(false))),
 	confirmThreadDelete: effect_Schema.Boolean.pipe(effect_Schema.withDecodingDefault(effect.Effect.succeed(true))),
 	confirmThreadUnpin: effect_Schema.Boolean.pipe(effect_Schema.withDecodingDefault(effect.Effect.succeed(false))),
@@ -6826,6 +7264,7 @@ const ServerProviderModel = effect.Schema.Struct({
 	shortName: effect.Schema.optional(TrimmedNonEmptyString),
 	subProvider: effect.Schema.optional(TrimmedNonEmptyString),
 	aliases: effect.Schema.optional(effect.Schema.Array(TrimmedNonEmptyString)),
+	maxContextTokens: effect.Schema.optional(PositiveInt),
 	isDefault: effect.Schema.optional(effect.Schema.Boolean),
 	isLegacy: effect.Schema.optional(effect.Schema.Boolean),
 	isCustom: effect.Schema.Boolean,
@@ -6886,10 +7325,10 @@ const ServerProviderRateLimitCredits = effect.Schema.Struct({
 	balance: effect.Schema.optional(TrimmedNonEmptyString)
 });
 /**
-* Account-scoped rate-limit snapshot attached to a provider. Currently
-* populated only by the Codex driver (one snapshot per Codex provider
-* instance, since each instance can target a different `CODEX_HOME` /
-* ChatGPT account). Other drivers leave it absent.
+* Account-scoped rate-limit snapshot attached to a provider. Populated by the
+* drivers that can surface usage limits (Codex, Claude, and OpenCode Go);
+* each instance yields one snapshot since accounts differ per instance.
+* Other drivers leave it absent.
 */
 const ServerProviderRateLimits = effect.Schema.Struct({
 	limitId: effect.Schema.optional(TrimmedNonEmptyString),
@@ -6897,6 +7336,7 @@ const ServerProviderRateLimits = effect.Schema.Struct({
 	planType: effect.Schema.optional(TrimmedNonEmptyString),
 	primary: effect.Schema.optional(ServerProviderRateLimitWindow),
 	secondary: effect.Schema.optional(ServerProviderRateLimitWindow),
+	tertiary: effect.Schema.optional(ServerProviderRateLimitWindow),
 	credits: effect.Schema.optional(ServerProviderRateLimitCredits),
 	rateLimitReachedType: effect.Schema.optional(TrimmedNonEmptyString)
 });
@@ -7074,6 +7514,206 @@ var ServerProviderUpdateError = class extends effect.Schema.TaggedError()("Serve
 	}
 };
 //#endregion
+//#region ../../packages/contracts/src/resourceTelemetry.ts
+const DiagnosticsPowerSnapshot = effect.Schema.Struct({
+	idleState: effect.Schema.String,
+	idleSeconds: effect.Schema.Number,
+	onBattery: effect.Schema.Boolean,
+	thermalState: effect.Schema.String,
+	speedLimitPercent: effect.Schema.NullOr(effect.Schema.Number),
+	suspended: effect.Schema.Boolean,
+	locked: effect.Schema.optional(effect.Schema.NullOr(effect.Schema.Boolean)),
+	lowPowerMode: effect.Schema.optional(effect.Schema.NullOr(effect.Schema.Boolean)),
+	updatedAt: effect.Schema.optional(IsoDateTime),
+	stale: effect.Schema.optional(effect.Schema.Boolean)
+});
+const ResourceTelemetryIoSemantics = effect.Schema.Literals([
+	"storage",
+	"logical",
+	"all-io",
+	"unavailable"
+]);
+const ResourceTelemetryProcessCategory = effect.Schema.Literals([
+	"server",
+	"server-child",
+	"provider-root",
+	"terminal-root",
+	"electron-main",
+	"electron-renderer",
+	"electron-gpu",
+	"electron-utility",
+	"resource-monitor",
+	"unknown-ryco"
+]);
+const ResourceTelemetrySourceStatus = effect.Schema.Literals([
+	"starting",
+	"healthy",
+	"degraded",
+	"unavailable",
+	"stopped"
+]);
+const ResourceTelemetryProcessIdentity = effect.Schema.Struct({
+	pid: PositiveInt,
+	startTimeMs: NonNegativeInt
+});
+effect.Schema.Struct({
+	pid: PositiveInt,
+	startTimeMs: effect.Schema.optional(NonNegativeInt)
+});
+effect.Schema.Struct({
+	cumulativeCpuTime: effect.Schema.Boolean,
+	currentCpuPercent: effect.Schema.Boolean,
+	residentMemory: effect.Schema.Boolean,
+	virtualMemory: effect.Schema.Boolean,
+	ioBytes: effect.Schema.Boolean,
+	processStartTime: effect.Schema.Boolean,
+	processTree: effect.Schema.Boolean
+});
+effect.Schema.Struct({
+	pid: PositiveInt,
+	ppid: NonNegativeInt,
+	startTimeMs: NonNegativeInt,
+	runTimeMs: NonNegativeInt,
+	name: effect.Schema.String,
+	command: effect.Schema.String,
+	status: effect.Schema.String,
+	cpuPercent: effect.Schema.Number,
+	cpuTimeMs: NonNegativeInt,
+	residentBytes: NonNegativeInt,
+	virtualBytes: NonNegativeInt,
+	ioReadBytes: NonNegativeInt,
+	ioWriteBytes: NonNegativeInt,
+	ioSemantics: effect.Schema.Literals(["storage", "all-io"])
+});
+const ResourceTelemetryProcess = effect.Schema.Struct({
+	identity: ResourceTelemetryProcessIdentity,
+	ppid: NonNegativeInt,
+	childPids: effect.Schema.Array(PositiveInt),
+	depth: NonNegativeInt,
+	name: effect.Schema.String,
+	command: effect.Schema.String,
+	status: effect.Schema.String,
+	category: ResourceTelemetryProcessCategory,
+	electronType: effect.Schema.optional(effect.Schema.String),
+	electronServiceName: effect.Schema.optional(effect.Schema.String),
+	cpuPercent: effect.Schema.Number,
+	cpuTimeMs: NonNegativeInt,
+	residentBytes: NonNegativeInt,
+	peakResidentBytes: NonNegativeInt,
+	virtualBytes: NonNegativeInt,
+	ioReadBytes: NonNegativeInt,
+	ioWriteBytes: NonNegativeInt,
+	ioReadBytesPerSecond: effect.Schema.Number,
+	ioWriteBytesPerSecond: effect.Schema.Number,
+	ioSemantics: ResourceTelemetryIoSemantics,
+	idleWakeupsPerSecond: effect.Schema.optional(effect.Schema.Number),
+	runTimeMs: NonNegativeInt,
+	firstSeenAt: IsoDateTime,
+	lastSeenAt: IsoDateTime
+});
+const ResourceTelemetryAggregate = effect.Schema.Struct({
+	processCount: NonNegativeInt,
+	currentCpuPercent: effect.Schema.Number,
+	cpuTimeMs: NonNegativeInt,
+	currentRssBytes: NonNegativeInt,
+	peakRssBytes: NonNegativeInt,
+	ioReadBytes: NonNegativeInt,
+	ioWriteBytes: NonNegativeInt,
+	ioReadBytesPerSecond: effect.Schema.Number,
+	ioWriteBytesPerSecond: effect.Schema.Number,
+	processStarts: NonNegativeInt,
+	processExits: NonNegativeInt
+});
+const ResourceTelemetryGroups = effect.Schema.Struct({
+	backend: ResourceTelemetryAggregate,
+	electron: ResourceTelemetryAggregate,
+	monitor: ResourceTelemetryAggregate,
+	allRyco: ResourceTelemetryAggregate
+});
+const ResourceTelemetrySourceHealth = effect.Schema.Struct({
+	status: ResourceTelemetrySourceStatus,
+	lastSampleAt: effect.Schema.NullOr(IsoDateTime),
+	lastError: effect.Schema.NullOr(TrimmedNonEmptyString)
+});
+const ResourceTelemetryHealth = effect.Schema.Struct({
+	native: ResourceTelemetrySourceHealth,
+	desktop: ResourceTelemetrySourceHealth,
+	sidecarVersion: effect.Schema.NullOr(TrimmedNonEmptyString),
+	sidecarPid: effect.Schema.NullOr(PositiveInt),
+	restartCount: NonNegativeInt,
+	collectionDurationMicros: NonNegativeInt,
+	scannedProcessCount: NonNegativeInt,
+	retainedProcessCount: NonNegativeInt,
+	inaccessibleProcessCount: NonNegativeInt
+});
+const ResourceAttributionEntry = effect.Schema.Struct({
+	component: TrimmedNonEmptyString,
+	operation: TrimmedNonEmptyString,
+	logicalReadBytes: NonNegativeInt,
+	logicalWriteBytes: NonNegativeInt,
+	count: NonNegativeInt,
+	durationMs: NonNegativeInt
+});
+const ResourceAttributionSnapshot = effect.Schema.Struct({
+	readAt: IsoDateTime,
+	entries: effect.Schema.Array(ResourceAttributionEntry)
+});
+const ResourceTelemetrySnapshot = effect.Schema.Struct({
+	readAt: IsoDateTime,
+	sampleIntervalMs: NonNegativeInt,
+	processes: effect.Schema.Array(ResourceTelemetryProcess),
+	groups: ResourceTelemetryGroups,
+	power: effect.Schema.NullOr(DiagnosticsPowerSnapshot),
+	speedLimitPercent: effect.Schema.NullOr(effect.Schema.Number),
+	attribution: ResourceAttributionSnapshot,
+	health: ResourceTelemetryHealth
+});
+const ResourceTelemetryHistoryInput = effect.Schema.Struct({
+	windowMs: NonNegativeInt,
+	bucketMs: NonNegativeInt
+});
+const ResourceTelemetryHistoryBucket = effect.Schema.Struct({
+	startedAt: IsoDateTime,
+	endedAt: IsoDateTime,
+	avgCpuPercent: effect.Schema.Number,
+	maxCpuPercent: effect.Schema.Number,
+	maxRssBytes: NonNegativeInt,
+	ioReadBytes: NonNegativeInt,
+	ioWriteBytes: NonNegativeInt,
+	maxProcessCount: NonNegativeInt
+});
+const ResourceTelemetryProcessSummary = effect.Schema.Struct({
+	identity: ResourceTelemetryProcessIdentity,
+	ppid: NonNegativeInt,
+	depth: NonNegativeInt,
+	name: effect.Schema.String,
+	command: effect.Schema.String,
+	category: ResourceTelemetryProcessCategory,
+	firstSeenAt: IsoDateTime,
+	lastSeenAt: IsoDateTime,
+	currentCpuPercent: effect.Schema.Number,
+	avgCpuPercent: effect.Schema.Number,
+	maxCpuPercent: effect.Schema.Number,
+	cpuTimeMs: NonNegativeInt,
+	currentRssBytes: NonNegativeInt,
+	peakRssBytes: NonNegativeInt,
+	ioReadBytes: NonNegativeInt,
+	ioWriteBytes: NonNegativeInt,
+	ioSemantics: ResourceTelemetryIoSemantics,
+	sampleCount: NonNegativeInt
+});
+const ResourceTelemetryHistory = effect.Schema.Struct({
+	totalCpuTimeMs: effect.Schema.optional(NonNegativeInt),
+	readAt: IsoDateTime,
+	windowMs: NonNegativeInt,
+	bucketMs: NonNegativeInt,
+	sampleIntervalMs: NonNegativeInt,
+	retainedSampleCount: NonNegativeInt,
+	buckets: effect.Schema.Array(ResourceTelemetryHistoryBucket),
+	topProcesses: effect.Schema.Array(ResourceTelemetryProcessSummary),
+	health: ResourceTelemetryHealth
+});
+//#endregion
 //#region ../../packages/contracts/src/diagnostics.ts
 const DiagnosticsWarning = effect.Schema.Struct({
 	code: TrimmedNonEmptyString,
@@ -7111,7 +7751,13 @@ const DiagnosticsResourceSample = effect.Schema.Struct({
 	cpu: DiagnosticsResourceCpu,
 	eventLoopDelayMs: effect.Schema.optional(effect.Schema.Number)
 });
+const DiagnosticsHostResources = effect.Schema.Struct({
+	cpuCount: NonNegativeInt,
+	totalMemoryBytes: NonNegativeInt,
+	availableMemoryBytes: NonNegativeInt
+});
 const DiagnosticsResources = effect.Schema.Struct({
+	host: effect.Schema.optional(DiagnosticsHostResources),
 	current: DiagnosticsResourceSample,
 	history: effect.Schema.Array(DiagnosticsResourceSample)
 });
@@ -7198,7 +7844,28 @@ const DiagnosticsDurationBucket = effect.Schema.Struct({
 	maxMs: effect.Schema.optional(NonNegativeInt),
 	count: NonNegativeInt
 });
+const DiagnosticsTraceSummary = effect.Schema.Struct({
+	parseErrorCount: NonNegativeInt,
+	scannedFilePaths: effect.Schema.Array(TrimmedNonEmptyString),
+	firstSpanAt: effect.Schema.NullOr(IsoDateTime),
+	lastSpanAt: effect.Schema.NullOr(IsoDateTime),
+	failureCount: NonNegativeInt,
+	interruptionCount: NonNegativeInt,
+	slowSpanThresholdMs: NonNegativeInt,
+	slowSpanCount: NonNegativeInt,
+	logLevelCounts: effect.Schema.Record(effect.Schema.String, NonNegativeInt),
+	latestWarningAndErrorLogs: effect.Schema.Array(effect.Schema.Struct({
+		traceId: TrimmedNonEmptyString,
+		spanId: TrimmedNonEmptyString,
+		spanName: TrimmedNonEmptyString,
+		level: TrimmedNonEmptyString,
+		message: effect.Schema.String,
+		seenAt: IsoDateTime
+	})),
+	partialFailure: effect.Schema.Boolean
+});
 const DiagnosticsTracing = effect.Schema.Struct({
+	summary: effect.Schema.optional(DiagnosticsTraceSummary),
 	retainedSpanCount: NonNegativeInt,
 	recentSpans: effect.Schema.Array(DiagnosticsSpan),
 	slowestSpans: effect.Schema.Array(DiagnosticsSpan),
@@ -7278,6 +7945,37 @@ const DiagnosticsLimits = effect.Schema.Struct({
 	resourceSampleLimit: NonNegativeInt,
 	fileTailBytes: NonNegativeInt
 });
+const DiagnosticsProcessEntry = effect.Schema.Struct({
+	pid: NonNegativeInt,
+	ppid: NonNegativeInt,
+	startTimeMs: NonNegativeInt,
+	command: effect.Schema.String,
+	status: effect.Schema.String,
+	cpuPercent: effect.Schema.Number,
+	rssBytes: NonNegativeInt,
+	elapsed: effect.Schema.String,
+	depth: NonNegativeInt,
+	childPids: effect.Schema.Array(NonNegativeInt)
+});
+const DiagnosticsProcessTree = effect.Schema.Struct({
+	readAt: IsoDateTime,
+	serverPid: NonNegativeInt,
+	processes: effect.Schema.Array(DiagnosticsProcessEntry),
+	totalCpuPercent: effect.Schema.Number,
+	totalRssBytes: NonNegativeInt,
+	error: effect.Schema.optional(effect.Schema.String)
+});
+const DiagnosticsSignalProcessInput = effect.Schema.Struct({
+	pid: NonNegativeInt,
+	startTimeMs: NonNegativeInt,
+	signal: effect.Schema.Literals(["SIGINT", "SIGKILL"])
+});
+const DiagnosticsSignalProcessResult = effect.Schema.Struct({
+	pid: NonNegativeInt,
+	signal: effect.Schema.Literals(["SIGINT", "SIGKILL"]),
+	signaled: effect.Schema.Boolean,
+	message: effect.Schema.optional(effect.Schema.String)
+});
 const DiagnosticsSnapshot = effect.Schema.Struct({
 	generatedAt: IsoDateTime,
 	serverStartedAt: IsoDateTime,
@@ -7286,6 +7984,8 @@ const DiagnosticsSnapshot = effect.Schema.Struct({
 	observability: DiagnosticsObservability,
 	resources: DiagnosticsResources,
 	liveProcesses: DiagnosticsLiveProcesses,
+	processTree: effect.Schema.optional(DiagnosticsProcessTree),
+	telemetry: effect.Schema.optional(ResourceTelemetrySnapshot),
 	tracing: DiagnosticsTracing,
 	failures: DiagnosticsFailures,
 	client: DiagnosticsClient,
@@ -7930,12 +8630,15 @@ const GitRunStackedActionInput = effect.Schema.Struct({
 	filePaths: effect.Schema.optional(effect.Schema.Array(TrimmedNonEmptyStringSchema).check(effect.Schema.isMinLength(1)))
 });
 const VcsListRefsInput = effect.Schema.Struct({
+	fetchOrigin: effect.Schema.optional(effect.Schema.Boolean),
+	originOnly: effect.Schema.optional(effect.Schema.Boolean),
 	cwd: TrimmedNonEmptyStringSchema,
 	query: effect.Schema.optional(TrimmedNonEmptyStringSchema.check(effect.Schema.isMaxLength(256))),
 	cursor: effect.Schema.optional(NonNegativeInt),
 	limit: effect.Schema.optional(PositiveInt.check(effect.Schema.isLessThanOrEqualTo(GIT_LIST_BRANCHES_MAX_LIMIT)))
 });
 const VcsCreateWorktreeInput = effect.Schema.Struct({
+	fetchOrigin: effect.Schema.optional(effect.Schema.Boolean),
 	cwd: TrimmedNonEmptyStringSchema,
 	refName: TrimmedNonEmptyStringSchema,
 	newRefName: effect.Schema.optional(TrimmedNonEmptyStringSchema),
@@ -9077,6 +9780,7 @@ const agentControlSlug = TrimmedNonEmptyString.check(effect.Schema.isMaxLength(6
 const AgentControlCapability = agentControlSlug.pipe(effect.Schema.brand("AgentControlCapability"));
 const AGENT_CONTROL_CAPABILITIES = {
 	read: AgentControlCapability.make("read"),
+	attachFile: AgentControlCapability.make("files.attach"),
 	createThreads: AgentControlCapability.make("threads.create"),
 	sendMessage: AgentControlCapability.make("threads.send-message"),
 	interruptThread: AgentControlCapability.make("threads.interrupt"),
@@ -9093,6 +9797,8 @@ const AGENT_CONTROL_CAPABILITIES = {
 	readDevices: AgentControlCapability.make("devices.read"),
 	readDeviceContent: AgentControlCapability.make("devices.content.read"),
 	controlDevices: AgentControlCapability.make("devices.control"),
+	controlComputer: AgentControlCapability.make("computer.control"),
+	controlBrowser: AgentControlCapability.make("browser.control"),
 	externalListProjects: AgentControlCapability.make("external.projects.list"),
 	externalCreateTask: AgentControlCapability.make("external.tasks.create"),
 	externalReadTask: AgentControlCapability.make("external.tasks.read"),
@@ -10756,6 +11462,8 @@ const WS_METHODS = {
 	projectsReadFileBinary: "projects.readFileBinary",
 	projectsWriteFile: "projects.writeFile",
 	projectsStageFileReference: "projects.stageFileReference",
+	chatAttachmentsCreateFileUpload: "chatAttachments.createFileUpload",
+	chatAttachmentsReadChunk: "chatAttachments.readChunk",
 	shellOpenInEditor: "shell.openInEditor",
 	filesystemBrowse: "filesystem.browse",
 	vcsPull: "vcs.pull",
@@ -10800,6 +11508,9 @@ const WS_METHODS = {
 	serverCheckOpinionatedPlugins: "server.checkOpinionatedPlugins",
 	serverInstallOpinionatedPlugin: "server.installOpinionatedPlugin",
 	serverGetDiagnosticsSnapshot: "server.getDiagnosticsSnapshot",
+	serverGetResourceTelemetryHistory: "server.getResourceTelemetryHistory",
+	serverRetryResourceTelemetry: "server.retryResourceTelemetry",
+	serverSignalDiagnosticProcess: "server.signalDiagnosticProcess",
 	serverGetStatistics: "server.getStatistics",
 	serverGetUsageSummary: "server.getUsageSummary",
 	mcpListWorkspaces: "mcp.listWorkspaces",
@@ -10859,6 +11570,7 @@ const WS_METHODS = {
 	subscribeAuthAccess: "subscribeAuthAccess"
 };
 const GitCreateWorktreeForProjectInput = effect.Schema.Struct({
+	fetchOrigin: effect.Schema.optional(effect.Schema.Boolean),
 	projectId: ProjectId,
 	intent: CreateWorktreeIntent,
 	worktreeLocation: effect.Schema.optional(WorktreeCheckoutLocation)
@@ -10994,6 +11706,21 @@ const WsServerGetDiagnosticsSnapshotRpc = effect_unstable_rpc_Rpc.make(WS_METHOD
 	success: DiagnosticsSnapshot,
 	error: effect.Schema.Union([DiagnosticsError, AuthRpcError])
 });
+const WsServerGetResourceTelemetryHistoryRpc = effect_unstable_rpc_Rpc.make(WS_METHODS.serverGetResourceTelemetryHistory, {
+	payload: ResourceTelemetryHistoryInput,
+	success: ResourceTelemetryHistory,
+	error: effect.Schema.Union([DiagnosticsError, AuthRpcError])
+});
+const WsServerRetryResourceTelemetryRpc = effect_unstable_rpc_Rpc.make(WS_METHODS.serverRetryResourceTelemetry, {
+	payload: effect.Schema.Struct({}),
+	success: ResourceTelemetrySnapshot,
+	error: effect.Schema.Union([DiagnosticsError, AuthRpcError])
+});
+const WsServerSignalDiagnosticProcessRpc = effect_unstable_rpc_Rpc.make(WS_METHODS.serverSignalDiagnosticProcess, {
+	payload: DiagnosticsSignalProcessInput,
+	success: DiagnosticsSignalProcessResult,
+	error: effect.Schema.Union([DiagnosticsError, AuthRpcError])
+});
 const WsServerGetStatisticsRpc = effect_unstable_rpc_Rpc.make(WS_METHODS.serverGetStatistics, {
 	payload: effect.Schema.Struct({}),
 	success: StatisticsSnapshot,
@@ -11345,6 +12072,16 @@ const WsProjectsStageFileReferenceRpc = effect_unstable_rpc_Rpc.make(WS_METHODS.
 	success: ProjectStageFileReferenceResult,
 	error: effect.Schema.Union([ProjectStageFileReferenceError, AuthRpcError])
 });
+const WsChatAttachmentsCreateFileUploadRpc = effect_unstable_rpc_Rpc.make(WS_METHODS.chatAttachmentsCreateFileUpload, {
+	payload: FileAttachmentCreateUploadUrlInput,
+	success: FileAttachmentCreateUploadUrlResult,
+	error: effect.Schema.Union([FileAttachmentCreateUploadUrlError, AuthRpcError])
+});
+const WsChatAttachmentsReadChunkRpc = effect_unstable_rpc_Rpc.make(WS_METHODS.chatAttachmentsReadChunk, {
+	payload: ChatAttachmentReadChunkInput,
+	success: ChatAttachmentReadChunkResult,
+	error: effect.Schema.Union([ChatAttachmentReadError, AuthRpcError])
+});
 const WsShellOpenInEditorRpc = effect_unstable_rpc_Rpc.make(WS_METHODS.shellOpenInEditor, {
 	payload: OpenInEditorInput,
 	error: effect.Schema.Union([OpenError, AuthRpcError])
@@ -11724,14 +12461,142 @@ const WsAgentControlDisconnectMcpInstallationRpc = effect_unstable_rpc_Rpc.make(
 	success: AgentControlMcpInstallationMutationResult,
 	error: effect.Schema.Union([AgentControlExternalRpcError, AuthRpcError])
 });
-const WsRpcGroup = effect_unstable_rpc_RpcGroup.make(WsServerGetConfigRpc, WsServerGetAdvertisedEndpointsRpc, WsServerGetDiagnosticsMetricsRpc, WsServerGetStatisticsRpc, WsServerGetUsageSummaryRpc, WsServerRefreshProvidersRpc, WsServerUpdateProviderRpc, WsServerUpsertKeybindingRpc, WsKeybindingsReplaceCustomRpc, WsServerGetSettingsRpc, WsServerUpdateSettingsRpc, WsServerGetDiagnosticsSnapshotRpc, WsServerDiscoverSourceControlRpc, WsServerListOpinionatedPluginsRpc, WsServerCheckOpinionatedPluginsRpc, WsServerInstallOpinionatedPluginRpc, WsMcpListWorkspacesRpc, WsMcpListServersRpc, WsMcpUpsertServerRpc, WsMcpSetServerEnabledRpc, WsMcpRemoveServerRpc, WsMcpReloadServersRpc, WsMcpStartOauthLoginRpc, WsSourceControlLookupRepositoryRpc, WsSourceControlSearchRepositoriesRpc, WsSourceControlCloneRepositoryRpc, WsSourceControlPublishRepositoryRpc, WsSourceControlListIssuesRpc, WsSourceControlGetIssueRpc, WsSourceControlSearchIssuesRpc, WsSourceControlListChangeRequestsRpc, WsSourceControlSearchChangeRequestsRpc, WsSourceControlGetChangeRequestDetailRpc, WsSourceControlGetChangeRequestDiffRpc, WsSourceControlMergeChangeRequestRpc, WsSourceControlCreateIssueRpc, WsSourceControlAddIssueCommentRpc, WsSourceControlAddIssueCommentReactionRpc, WsSourceControlAddChangeRequestCommentRpc, WsSourceControlAddChangeRequestCommentReactionRpc, WsSourceControlListIssueLabelsRpc, WsSourceControlListIssueAssigneesRpc, WsSourceControlListWorkflowRunsRpc, WsSourceControlGetWorkflowRunJobsRpc, WsSourceControlGetWorkflowJobLogRpc, WsSourceControlRerunWorkflowRpc, WsTextGenerationGenerateIssueContentRpc, WsTextGenerationGenerateBranchNameRpc, WsAtlassianListConnectionsRpc, WsAtlassianStartOAuthRpc, WsAtlassianDisconnectRpc, WsAtlassianRefreshRpc, WsAtlassianListResourcesRpc, WsAtlassianGetProjectLinkRpc, WsAtlassianSaveProjectLinkRpc, WsAtlassianSaveManualBitbucketTokenRpc, WsAtlassianSaveManualJiraTokenRpc, WsWorkItemsListProjectsRpc, WsWorkItemsListRpc, WsWorkItemsSearchRpc, WsWorkItemsGetRpc, WsWorkItemsAddCommentRpc, WsWorkItemsEditCommentRpc, WsWorkItemsUpdateRpc, WsWorkItemsListTransitionsRpc, WsWorkItemsTransitionRpc, WsProjectsListEntriesRpc, WsProjectsSearchEntriesRpc, WsProjectsReadFileRpc, WsProjectsReadFileBinaryRpc, WsProjectsWriteFileRpc, WsProjectsStageFileReferenceRpc, WsShellOpenInEditorRpc, WsFilesystemBrowseRpc, WsSubscribeVcsStatusRpc, WsVcsPullRpc, WsVcsRefreshStatusRpc, WsGitRunStackedActionRpc, WsGitResolvePullRequestRpc, WsGitPreparePullRequestThreadRpc, WsGitCreateWorktreeForProjectRpc, WsGitFindWorktreeForOriginRpc, WsGitArchiveWorktreeRpc, WsGitRestoreWorktreeRpc, WsGitDeleteWorktreeRpc, WsThreadsSetManualBucketRpc, WsThreadsSetManualPositionRpc, WsSearchThreadMessagesRpc, WsThreadPriorityEnsureCurrentRpc, WsWorktreesSetManualPositionRpc, WsProjectsInitializeGitRpc, WsVcsListRefsRpc, WsVcsCreateWorktreeRpc, WsVcsRemoveWorktreeRpc, WsVcsCreateRefRpc, WsVcsSwitchRefRpc, WsVcsInitRpc, WsTerminalOpenRpc, WsTerminalWriteRpc, WsTerminalResizeRpc, WsTerminalClearRpc, WsTerminalRestartRpc, WsTerminalCloseRpc, WsSubscribeTerminalEventsRpc, WsSubscribeServerConfigRpc, WsSubscribeServerLifecycleRpc, WsSubscribeAuthAccessRpc, WsAgentControlListProposalsRpc, WsAgentControlGetProposalRpc, WsAgentControlAcceptProposalRpc, WsAgentControlRejectProposalRpc, WsAgentControlSubscribeProposalsRpc, WsAgentControlListIntegrationsRpc, WsAgentControlCreateIntegrationRpc, WsAgentControlUpdateIntegrationRpc, WsAgentControlResumeIntegrationPairingRpc, WsAgentControlRevokeIntegrationRpc, WsAgentControlDeleteIntegrationRpc, WsAgentControlListMcpInstallationsRpc, WsAgentControlConnectMcpInstallationRpc, WsAgentControlRepairMcpInstallationRpc, WsAgentControlDisconnectMcpInstallationRpc, WsOrchestrationDispatchCommandRpc, WsOrchestrationGetWorkflowScriptRpc, WsOrchestrationGetTaskOutputRpc, WsOrchestrationStopBackgroundTaskRpc, WsOrchestrationGetTurnDiffRpc, WsOrchestrationGetFullThreadDiffRpc, WsOrchestrationSearchThreadMessagesRpc, WsOrchestrationGetThreadWindowRpc, WsOrchestrationGetThreadHistoryPageRpc, WsOrchestrationReplayEventsRpc, WsOrchestrationReplayEventsPageRpc, WsOrchestrationSubscribeShellRpc, WsOrchestrationSubscribeThreadRpc, WsOrchestrationSubscribeThreadWindowRpc, WsContextHandoffGetInspectionSummaryRpc, WsContextHandoffListInspectionEntriesRpc, WsContextHandoffReadRawPayloadChunkRpc, WsContextHandoffReadExportChunkRpc);
+const WsRpcGroup = effect_unstable_rpc_RpcGroup.make(WsServerGetConfigRpc, WsServerGetAdvertisedEndpointsRpc, WsServerGetDiagnosticsMetricsRpc, WsServerGetStatisticsRpc, WsServerGetUsageSummaryRpc, WsServerRefreshProvidersRpc, WsServerUpdateProviderRpc, WsServerUpsertKeybindingRpc, WsKeybindingsReplaceCustomRpc, WsServerGetSettingsRpc, WsServerUpdateSettingsRpc, WsServerGetDiagnosticsSnapshotRpc, WsServerSignalDiagnosticProcessRpc, WsServerGetResourceTelemetryHistoryRpc, WsServerRetryResourceTelemetryRpc, WsServerDiscoverSourceControlRpc, WsServerListOpinionatedPluginsRpc, WsServerCheckOpinionatedPluginsRpc, WsServerInstallOpinionatedPluginRpc, WsMcpListWorkspacesRpc, WsMcpListServersRpc, WsMcpUpsertServerRpc, WsMcpSetServerEnabledRpc, WsMcpRemoveServerRpc, WsMcpReloadServersRpc, WsMcpStartOauthLoginRpc, WsSourceControlLookupRepositoryRpc, WsSourceControlSearchRepositoriesRpc, WsSourceControlCloneRepositoryRpc, WsSourceControlPublishRepositoryRpc, WsSourceControlListIssuesRpc, WsSourceControlGetIssueRpc, WsSourceControlSearchIssuesRpc, WsSourceControlListChangeRequestsRpc, WsSourceControlSearchChangeRequestsRpc, WsSourceControlGetChangeRequestDetailRpc, WsSourceControlGetChangeRequestDiffRpc, WsSourceControlMergeChangeRequestRpc, WsSourceControlCreateIssueRpc, WsSourceControlAddIssueCommentRpc, WsSourceControlAddIssueCommentReactionRpc, WsSourceControlAddChangeRequestCommentRpc, WsSourceControlAddChangeRequestCommentReactionRpc, WsSourceControlListIssueLabelsRpc, WsSourceControlListIssueAssigneesRpc, WsSourceControlListWorkflowRunsRpc, WsSourceControlGetWorkflowRunJobsRpc, WsSourceControlGetWorkflowJobLogRpc, WsSourceControlRerunWorkflowRpc, WsTextGenerationGenerateIssueContentRpc, WsTextGenerationGenerateBranchNameRpc, WsAtlassianListConnectionsRpc, WsAtlassianStartOAuthRpc, WsAtlassianDisconnectRpc, WsAtlassianRefreshRpc, WsAtlassianListResourcesRpc, WsAtlassianGetProjectLinkRpc, WsAtlassianSaveProjectLinkRpc, WsAtlassianSaveManualBitbucketTokenRpc, WsAtlassianSaveManualJiraTokenRpc, WsWorkItemsListProjectsRpc, WsWorkItemsListRpc, WsWorkItemsSearchRpc, WsWorkItemsGetRpc, WsWorkItemsAddCommentRpc, WsWorkItemsEditCommentRpc, WsWorkItemsUpdateRpc, WsWorkItemsListTransitionsRpc, WsWorkItemsTransitionRpc, WsProjectsListEntriesRpc, WsProjectsSearchEntriesRpc, WsProjectsReadFileRpc, WsProjectsReadFileBinaryRpc, WsProjectsWriteFileRpc, WsProjectsStageFileReferenceRpc, WsChatAttachmentsCreateFileUploadRpc, WsChatAttachmentsReadChunkRpc, WsShellOpenInEditorRpc, WsFilesystemBrowseRpc, WsSubscribeVcsStatusRpc, WsVcsPullRpc, WsVcsRefreshStatusRpc, WsGitRunStackedActionRpc, WsGitResolvePullRequestRpc, WsGitPreparePullRequestThreadRpc, WsGitCreateWorktreeForProjectRpc, WsGitFindWorktreeForOriginRpc, WsGitArchiveWorktreeRpc, WsGitRestoreWorktreeRpc, WsGitDeleteWorktreeRpc, WsThreadsSetManualBucketRpc, WsThreadsSetManualPositionRpc, WsSearchThreadMessagesRpc, WsThreadPriorityEnsureCurrentRpc, WsWorktreesSetManualPositionRpc, WsProjectsInitializeGitRpc, WsVcsListRefsRpc, WsVcsCreateWorktreeRpc, WsVcsRemoveWorktreeRpc, WsVcsCreateRefRpc, WsVcsSwitchRefRpc, WsVcsInitRpc, WsTerminalOpenRpc, WsTerminalWriteRpc, WsTerminalResizeRpc, WsTerminalClearRpc, WsTerminalRestartRpc, WsTerminalCloseRpc, WsSubscribeTerminalEventsRpc, WsSubscribeServerConfigRpc, WsSubscribeServerLifecycleRpc, WsSubscribeAuthAccessRpc, WsAgentControlListProposalsRpc, WsAgentControlGetProposalRpc, WsAgentControlAcceptProposalRpc, WsAgentControlRejectProposalRpc, WsAgentControlSubscribeProposalsRpc, WsAgentControlListIntegrationsRpc, WsAgentControlCreateIntegrationRpc, WsAgentControlUpdateIntegrationRpc, WsAgentControlResumeIntegrationPairingRpc, WsAgentControlRevokeIntegrationRpc, WsAgentControlDeleteIntegrationRpc, WsAgentControlListMcpInstallationsRpc, WsAgentControlConnectMcpInstallationRpc, WsAgentControlRepairMcpInstallationRpc, WsAgentControlDisconnectMcpInstallationRpc, WsOrchestrationDispatchCommandRpc, WsOrchestrationGetWorkflowScriptRpc, WsOrchestrationGetTaskOutputRpc, WsOrchestrationStopBackgroundTaskRpc, WsOrchestrationGetTurnDiffRpc, WsOrchestrationGetFullThreadDiffRpc, WsOrchestrationSearchThreadMessagesRpc, WsOrchestrationGetThreadWindowRpc, WsOrchestrationGetThreadHistoryPageRpc, WsOrchestrationReplayEventsRpc, WsOrchestrationReplayEventsPageRpc, WsOrchestrationSubscribeShellRpc, WsOrchestrationSubscribeThreadRpc, WsOrchestrationSubscribeThreadWindowRpc, WsContextHandoffGetInspectionSummaryRpc, WsContextHandoffListInspectionEntriesRpc, WsContextHandoffReadRawPayloadChunkRpc, WsContextHandoffReadExportChunkRpc);
 /**
 * Hosted relay channels carry both groups through one lifecycle-owned encrypted
 * channel. Direct clients keep the device group on its own low-priority socket
-* so video-adjacent work cannot contend with chat RPC.
+* so video-adjacent work cannot contend with chat RPC. The explicit annotation
+* keeps the merged RPC union within the compiler's serializable type limit.
 */
 const WsHostedRpcGroup = WsRpcGroup.merge(WsDeviceRpcGroup);
 //#endregion
+//#region ../../packages/contracts/src/computerUse.ts
+const boundedText = effect.Schema.String.check(effect.Schema.isMaxLength(512));
+const ComputerAppAccess = effect.Schema.Literals([
+	"ask",
+	"allow",
+	"block"
+]);
+const ComputerBrowser = effect.Schema.Literals([
+	"ryco",
+	"chrome",
+	"brave",
+	"edge"
+]);
+const ComputerUsePolicy = effect.Schema.Struct({
+	enabled: effect.Schema.Boolean.pipe(effect.Schema.withDecodingDefault(effect.Effect.succeed(false))),
+	foregroundEnabled: effect.Schema.Boolean.pipe(effect.Schema.withDecodingDefault(effect.Effect.succeed(false))),
+	apps: effect.Schema.Record(boundedText, ComputerAppAccess).pipe(effect.Schema.withDecodingDefault(effect.Effect.succeed({}))),
+	browsers: effect.Schema.Array(ComputerBrowser).pipe(effect.Schema.withDecodingDefault(effect.Effect.succeed([])))
+});
+const ComputerUseApp = effect.Schema.Struct({
+	id: boundedText,
+	name: boundedText
+});
+const ComputerUseActivity = effect.Schema.Struct({
+	threadId: effect.Schema.String,
+	target: boundedText,
+	mode: effect.Schema.Literals(["background", "foreground"]),
+	action: boundedText,
+	x: effect.Schema.optionalKey(effect.Schema.Number),
+	y: effect.Schema.optionalKey(effect.Schema.Number)
+});
+effect.Schema.Struct({
+	policy: ComputerUsePolicy,
+	apps: effect.Schema.Array(ComputerUseApp),
+	connectedBrowsers: effect.Schema.Array(ComputerBrowser),
+	accessibility: effect.Schema.String,
+	screenRecording: effect.Schema.String,
+	helperAvailable: effect.Schema.Boolean,
+	permissionInfo: effect.Schema.optionalKey(effect.Schema.Struct({
+		checkedAt: effect.Schema.NullOr(effect.Schema.String),
+		error: effect.Schema.NullOr(boundedText),
+		appName: boundedText,
+		development: effect.Schema.Boolean
+	})),
+	activity: effect.Schema.NullOr(ComputerUseActivity),
+	error: effect.Schema.NullOr(boundedText)
+});
+effect.Schema.Struct({
+	browser: ComputerBrowser,
+	url: effect.Schema.String,
+	token: effect.Schema.String
+});
+/** Only the backend receives this through its private bootstrap descriptor. */
+const ComputerUseBridgeConfig = effect.Schema.Struct({
+	url: effect.Schema.String,
+	token: effect.Schema.String.check(effect.Schema.isMinLength(43), effect.Schema.isMaxLength(43))
+});
+const ComputerUseRequest = effect.Schema.Struct({
+	sessionId: effect.Schema.String.check(effect.Schema.isMinLength(1), effect.Schema.isMaxLength(256)),
+	threadId: effect.Schema.String.check(effect.Schema.isMinLength(1), effect.Schema.isMaxLength(256)),
+	turnId: effect.Schema.String.check(effect.Schema.isMinLength(1), effect.Schema.isMaxLength(256)),
+	tool: effect.Schema.Literals(["computer", "browser"]),
+	args: effect.Schema.Record(effect.Schema.String, effect.Schema.Unknown)
+});
+const ComputerUseResult = effect.Schema.Struct({
+	content: effect.Schema.Array(effect.Schema.Union([effect.Schema.Struct({
+		type: effect.Schema.Literal("text"),
+		text: effect.Schema.String
+	}), effect.Schema.Struct({
+		type: effect.Schema.Literal("image"),
+		data: effect.Schema.String,
+		mimeType: effect.Schema.Literals(["image/png", "image/jpeg"])
+	})])),
+	isError: effect.Schema.optionalKey(effect.Schema.Boolean)
+});
+//#endregion
+//#region ../../packages/contracts/src/projectBrowser.ts
+const text = effect.Schema.String.check(effect.Schema.isMaxLength(8192));
+const ProjectBrowserTab = effect.Schema.Struct({
+	id: effect.Schema.String,
+	project: text,
+	title: text,
+	url: text,
+	loading: effect.Schema.Boolean,
+	canGoBack: effect.Schema.Boolean,
+	canGoForward: effect.Schema.Boolean,
+	zoom: effect.Schema.Number,
+	presentation: effect.Schema.Literals([
+		"background",
+		"panel",
+		"window"
+	]),
+	error: effect.Schema.NullOr(text)
+});
+effect.Schema.Struct({ tabs: effect.Schema.Array(ProjectBrowserTab) });
+effect.Schema.Struct({
+	action: effect.Schema.Literals([
+		"navigate",
+		"back",
+		"forward",
+		"reload",
+		"stop",
+		"close",
+		"zoom",
+		"devtools",
+		"popout",
+		"dock"
+	]),
+	tab: effect.Schema.String,
+	url: effect.Schema.optionalKey(text),
+	zoom: effect.Schema.optionalKey(effect.Schema.Number)
+});
+effect.Schema.Struct({
+	owner: effect.Schema.String.check(effect.Schema.isMinLength(1), effect.Schema.isMaxLength(128)),
+	tab: effect.Schema.NullOr(effect.Schema.String),
+	x: effect.Schema.Number,
+	y: effect.Schema.Number,
+	width: effect.Schema.Number,
+	height: effect.Schema.Number
+});
+effect.Schema.Struct({
+	url: text,
+	port: effect.Schema.Number,
+	process: effect.Schema.String,
+	projectMatch: effect.Schema.Boolean
+});
+//#endregion
 //#region ../../packages/shared/src/schemaJson.ts
 const decodeJsonResult = (schema) => {
 	const decode = effect.Schema.decodeExit(effect.Schema.fromJsonString(schema));
@@ -12554,6 +13419,12 @@ Object.defineProperty(exports, "AuthSessionId", {
 		return AuthSessionId;
 	}
 });
+Object.defineProperty(exports, "CHAT_ATTACHMENT_READ_CHUNK_BYTES", {
+	enumerable: true,
+	get: function() {
+		return CHAT_ATTACHMENT_READ_CHUNK_BYTES;
+	}
+});
 Object.defineProperty(exports, "CONTEXT_HANDOFF_ACTIVITY_KIND", {
 	enumerable: true,
 	get: function() {
@@ -12578,6 +13449,12 @@ Object.defineProperty(exports, "CONTEXT_HANDOFF_INSPECTION_MAX_RESPONSE_BYTES",
 		return CONTEXT_HANDOFF_INSPECTION_MAX_RESPONSE_BYTES;
 	}
 });
+Object.defineProperty(exports, "CONTEXT_HANDOFF_MAX_INPUT_CHARS", {
+	enumerable: true,
+	get: function() {
+		return CONTEXT_HANDOFF_MAX_INPUT_CHARS;
+	}
+});
 Object.defineProperty(exports, "CONTEXT_HANDOFF_WS_METHODS", {
 	enumerable: true,
 	get: function() {
@@ -12590,6 +13467,12 @@ Object.defineProperty(exports, "ChatAttachment", {
 		return ChatAttachment;
 	}
 });
+Object.defineProperty(exports, "ChatAttachmentReadError", {
+	enumerable: true,
+	get: function() {
+		return ChatAttachmentReadError;
+	}
+});
 Object.defineProperty(exports, "CheckpointRef", {
 	enumerable: true,
 	get: function() {
@@ -12620,12 +13503,36 @@ Object.defineProperty(exports, "CommandId", {
 		return CommandId;
 	}
 });
+Object.defineProperty(exports, "ComputerUseBridgeConfig", {
+	enumerable: true,
+	get: function() {
+		return ComputerUseBridgeConfig;
+	}
+});
+Object.defineProperty(exports, "ComputerUseRequest", {
+	enumerable: true,
+	get: function() {
+		return ComputerUseRequest;
+	}
+});
+Object.defineProperty(exports, "ComputerUseResult", {
+	enumerable: true,
+	get: function() {
+		return ComputerUseResult;
+	}
+});
 Object.defineProperty(exports, "ContextHandoffActivityPayload", {
 	enumerable: true,
 	get: function() {
 		return ContextHandoffActivityPayload;
 	}
 });
+Object.defineProperty(exports, "ContextHandoffAppliedBudget", {
+	enumerable: true,
+	get: function() {
+		return ContextHandoffAppliedBudget;
+	}
+});
 Object.defineProperty(exports, "ContextHandoffDigest", {
 	enumerable: true,
 	get: function() {
@@ -12812,6 +13719,12 @@ Object.defineProperty(exports, "EventId", {
 		return EventId;
 	}
 });
+Object.defineProperty(exports, "FileAttachmentCreateUploadUrlError", {
+	enumerable: true,
+	get: function() {
+		return FileAttachmentCreateUploadUrlError;
+	}
+});
 Object.defineProperty(exports, "FilesystemBrowseError", {
 	enumerable: true,
 	get: function() {
@@ -12836,12 +13749,24 @@ Object.defineProperty(exports, "GrokSettings", {
 		return GrokSettings;
 	}
 });
+Object.defineProperty(exports, "HUB_DEVICE_GRANT_MAX_BYTES", {
+	enumerable: true,
+	get: function() {
+		return HUB_DEVICE_GRANT_MAX_BYTES;
+	}
+});
 Object.defineProperty(exports, "HubConnectorStatus", {
 	enumerable: true,
 	get: function() {
 		return HubConnectorStatus;
 	}
 });
+Object.defineProperty(exports, "HubDeviceGrantClaims", {
+	enumerable: true,
+	get: function() {
+		return HubDeviceGrantClaims;
+	}
+});
 Object.defineProperty(exports, "HubEnrollmentCeremonyDetail", {
 	enumerable: true,
 	get: function() {
@@ -12854,6 +13779,12 @@ Object.defineProperty(exports, "HubEnrollmentStartResult", {
 		return HubEnrollmentStartResult;
 	}
 });
+Object.defineProperty(exports, "HubGrantVerificationKeyId", {
+	enumerable: true,
+	get: function() {
+		return HubGrantVerificationKeyId;
+	}
+});
 Object.defineProperty(exports, "HubIdentitySummary", {
 	enumerable: true,
 	get: function() {
@@ -13022,12 +13953,30 @@ Object.defineProperty(exports, "ModelCapabilities", {
 		return ModelCapabilities;
 	}
 });
+Object.defineProperty(exports, "ModelContextWindowMetadata", {
+	enumerable: true,
+	get: function() {
+		return ModelContextWindowMetadata;
+	}
+});
 Object.defineProperty(exports, "ModelSelection", {
 	enumerable: true,
 	get: function() {
 		return ModelSelection;
 	}
 });
+Object.defineProperty(exports, "NATIVE_E2EE_MAX_GRANT_KEYS", {
+	enumerable: true,
+	get: function() {
+		return NATIVE_E2EE_MAX_GRANT_KEYS;
+	}
+});
+Object.defineProperty(exports, "NodeE2eeAdmissionPolicy", {
+	enumerable: true,
+	get: function() {
+		return NodeE2eeAdmissionPolicy;
+	}
+});
 Object.defineProperty(exports, "NonNegativeInt", {
 	enumerable: true,
 	get: function() {
@@ -13832,6 +14781,12 @@ Object.defineProperty(exports, "ThreadSettlementOverride", {
 		return ThreadSettlementOverride;
 	}
 });
+Object.defineProperty(exports, "ThreadSnoozedPayload", {
+	enumerable: true,
+	get: function() {
+		return ThreadSnoozedPayload;
+	}
+});
 Object.defineProperty(exports, "ThreadStatusBucketOverriddenPayload", {
 	enumerable: true,
 	get: function() {
@@ -13868,6 +14823,12 @@ Object.defineProperty(exports, "ThreadUnsettledPayload", {
 		return ThreadUnsettledPayload;
 	}
 });
+Object.defineProperty(exports, "ThreadUnsnoozedPayload", {
+	enumerable: true,
+	get: function() {
+		return ThreadUnsnoozedPayload;
+	}
+});
 Object.defineProperty(exports, "ToolLifecycleItemType", {
 	enumerable: true,
 	get: function() {