ryco-cli 0.1.28 → 0.1.30

package/dist/{src-BzVJd3Me.cjs → src-CARHuYkT.cjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-const require_rolldown_runtime = require("./rolldown-runtime-LGfotAqq.cjs");
+const require_rolldown_runtime = require("./rolldown-runtime-HbSU0i7K.cjs");
 let effect = require("effect");
 let effect_Schema = require("effect/Schema");
 effect_Schema = require_rolldown_runtime.__toESM(effect_Schema, 1);
@@ -814,6 +814,41 @@ const HubEnrollmentStartResult = effect.Schema.Struct({
 	status: HubConnectorStatus,
 	...HubEnrollmentCeremonyDetail.fields
 });
+//#endregion
+//#region ../../packages/contracts/src/hostedIdentity.ts
+const PUBLIC_SIGNUP_START_PATH = "/api/public-signup/start";
+const PUBLIC_SIGNUP_CONFIG_PATH = "/api/public-signup/config";
+const PUBLIC_SIGNUP_VERIFY_PATH = "/api/public-signup/verify";
+const PUBLIC_SIGNUP_PASSKEY_OPTIONS_PATH = "/api/public-signup/passkey/options";
+const PUBLIC_SIGNUP_PASSKEY_FINISH_PATH = "/api/public-signup/passkey/finish";
+const PUBLIC_SIGNUP_PASSWORD_FINISH_PATH = "/api/public-signup/password/finish";
+const PASSWORD_LOGIN_START_PATH = "/api/auth/password/start";
+const PASSWORD_LOGIN_FINISH_PATH = "/api/auth/password/finish";
+const PASSWORD_RESET_REQUEST_PATH = "/api/auth/password-reset/request";
+const PASSWORD_RESET_VERIFY_PATH = "/api/auth/password-reset/verify";
+const PASSWORD_RESET_FINISH_PATH = "/api/auth/password-reset/finish";
+const ACTIVE_SPACE_SWITCH_PATH = "/api/auth/spaces/active";
+const NATIVE_NODE_CLAIM_START_PATH = "/api/native/node-claims/start";
+const NATIVE_NODE_CLAIM_FINISH_PATH = "/api/native/node-claims/finish";
+const NATIVE_IDENTITY_EMAIL_START_PATH = "/api/auth/native/identity/email/start";
+const NATIVE_IDENTITY_EMAIL_VERIFY_PATH = "/api/auth/native/identity/email/verify";
+const NATIVE_IDENTITY_SIGNUP_USERNAME_PATH = "/api/auth/native/identity/signup/username";
+const NATIVE_IDENTITY_SIGNUP_PASSKEY_OPTIONS_PATH = "/api/auth/native/identity/signup/passkey/options";
+const NATIVE_IDENTITY_SIGNUP_PASSKEY_FINISH_PATH = "/api/auth/native/identity/signup/passkey/finish";
+const NATIVE_IDENTITY_SIGNUP_PASSWORD_FINISH_PATH = "/api/auth/native/identity/signup/password/finish";
+const NATIVE_IDENTITY_PASSWORD_START_PATH = "/api/auth/native/identity/password/start";
+const NATIVE_IDENTITY_PASSWORD_FINISH_PATH = "/api/auth/native/identity/password/finish";
+const NATIVE_IDENTITY_RECOVERY_CODE_PATH = "/api/auth/native/identity/recovery-code";
+const NATIVE_IDENTITY_PASSWORD_RESET_REQUEST_PATH = "/api/auth/native/identity/password-reset/request";
+const NATIVE_IDENTITY_PASSWORD_RESET_VERIFY_PATH = "/api/auth/native/identity/password-reset/verify";
+const NATIVE_IDENTITY_PASSWORD_RESET_FINISH_PATH = "/api/auth/native/identity/password-reset/finish";
+const NATIVE_IDENTITY_ATTEMPT_CANCEL_PATH = "/api/auth/native/identity/attempt/cancel";
+const EXTERNAL_IDENTITY_CONFIG_PATH = "/api/auth/external/config";
+const EXTERNAL_IDENTITY_START_PATH = "/api/auth/external/start";
+const EXTERNAL_IDENTITY_PENDING_PATH = "/api/auth/external/pending";
+const EXTERNAL_IDENTITY_SIGNUP_FINISH_PATH = "/api/auth/external/signup/finish";
+const GITHUB_EXTERNAL_IDENTITY_CONNECT_PATH = "/api/account/external-identities/github/connect";
+const GITHUB_EXTERNAL_IDENTITY_DISCONNECT_PATH = "/api/account/external-identities/github/disconnect";
 const HOSTED_IDENTITY_MAX_ANTI_BOT_ASSERTION_CHARS = 8192;
 const strict$4 = (schema) => schema.annotate({ parseOptions: { onExcessProperty: "error" } });
 const EpochMs$2 = effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(0));
@@ -857,7 +892,15 @@ const HubUsername = effect.Schema.String.check(effect.Schema.isMinLength(3), eff
 const HubNormalizedEmail = effect.Schema.String.check(effect.Schema.isMinLength(3), effect.Schema.isMaxLength(254), effect.Schema.isPattern(/^[^\s@]+@[^\s@]+\.[^\s@]+$/), effect.Schema.makeFilter((value) => value === value.trim() && value === value.toLowerCase() ? void 0 : "email must be trimmed lowercase")).pipe(effect.Schema.brand("HubNormalizedEmail"));
 const HubLoginIdentifier = effect.Schema.Union([HubUsername, HubNormalizedEmail]).pipe(effect.Schema.brand("HubLoginIdentifier"));
 const PublicSignupTurnstileSiteKey = effect.Schema.String.check(effect.Schema.isMinLength(10), effect.Schema.isMaxLength(128), effect.Schema.isPattern(/^[A-Za-z0-9_-]+$/));
-effect.Schema.Union([
+/**
+* Public, cache-bypassed configuration for the signed-out account surface.
+*
+* The Turnstile site key is intentionally public. The secret verification key
+* remains server-only. `bypass` exists solely so the exact browser flow can be
+* qualified against a development Hub without pretending an anti-bot token was
+* produced by Turnstile.
+*/
+const PublicSignupConfigResponse = effect.Schema.Union([
 	strict$4(effect.Schema.Struct({ status: effect.Schema.Literal("disabled") })),
 	strict$4(effect.Schema.Struct({
 		status: effect.Schema.Literal("enabled"),
@@ -887,7 +930,7 @@ const ExternalIdentityProviderPolicy = strict$4(effect.Schema.Struct({
 	link: effect.Schema.Literal(true)
 }));
 const ExternalIdentityProviders = effect.Schema.Array(ExternalIdentityProviderPolicy).check(effect.Schema.isMaxLength(1), effect.Schema.makeFilter((providers) => new Set(providers.map((provider) => provider.provider)).size === providers.length ? void 0 : "external identity providers must be unique"));
-strict$4(effect.Schema.Struct({
+const ExternalIdentityConfigResponse = strict$4(effect.Schema.Struct({
 	version: effect.Schema.Literal(1),
 	providers: ExternalIdentityProviders
 }));
@@ -907,12 +950,12 @@ const GitHubAuthorizationUrl = effect.Schema.String.check(effect.Schema.isNonEmp
 		return "authorization URL must be absolute";
 	}
 }));
-strict$4(effect.Schema.Struct({
+const ExternalIdentityAuthorizationStartRequest = strict$4(effect.Schema.Struct({
 	provider: ExternalIdentityProvider,
 	intent: effect.Schema.Literals(["authenticate", "link"]),
 	returnTo: effect.Schema.optionalKey(ExternalIdentityReturnPath)
 }));
-strict$4(effect.Schema.Struct({
+const ExternalIdentityAuthorizationStartResponse = strict$4(effect.Schema.Struct({
 	authorizationUrl: GitHubAuthorizationUrl,
 	expiresAt: EpochMs$2
 }));
@@ -926,7 +969,7 @@ const ExternalIdentityPendingErrorCode = effect.Schema.Literals([
 	"signup_disabled",
 	"username_unavailable"
 ]);
-effect.Schema.Union([
+const ExternalIdentityPendingResponse = effect.Schema.Union([
 	strict$4(effect.Schema.Struct({ status: effect.Schema.Literal("none") })),
 	strict$4(effect.Schema.Struct({
 		status: effect.Schema.Literal("signup"),
@@ -946,24 +989,24 @@ effect.Schema.Union([
 		code: ExternalIdentityPendingErrorCode
 	}))
 ]);
-strict$4(effect.Schema.Struct({
+const ExternalIdentitySignupFinishRequest = strict$4(effect.Schema.Struct({
 	provider: ExternalIdentityProvider,
 	username: HubUsername,
 	antiBotAssertion: AntiBotAssertion,
 	idempotencyKey: IdempotencyKey$1
 }));
-strict$4(effect.Schema.Struct({ totpCode: effect.Schema.optionalKey(TotpCode) }));
-strict$4(effect.Schema.Struct({
+const BrowserExternalIdentityConnectRequest = strict$4(effect.Schema.Struct({ totpCode: effect.Schema.optionalKey(TotpCode) }));
+const BrowserExternalIdentityConnectResponse = strict$4(effect.Schema.Struct({
 	status: effect.Schema.Literal("connected"),
 	externalIdentity: ExternalIdentitySummary
 }));
-strict$4(effect.Schema.Struct({ totpCode: effect.Schema.optionalKey(TotpCode) }));
-strict$4(effect.Schema.Struct({
+const ExternalIdentityDisconnectRequest = strict$4(effect.Schema.Struct({ totpCode: effect.Schema.optionalKey(TotpCode) }));
+const ExternalIdentityDisconnectResponse = strict$4(effect.Schema.Struct({
 	status: effect.Schema.Literal("disconnected"),
 	signedOut: effect.Schema.Boolean
 }));
 const ExternalIdentitySummaries = effect.Schema.Array(ExternalIdentitySummary).check(effect.Schema.isMaxLength(1), effect.Schema.makeFilter((identities) => new Set(identities.map((identity) => identity.provider)).size === identities.length ? void 0 : "external identity providers must be unique"));
-strict$4(effect.Schema.Struct({
+const HostedAccountSecurityResponse = strict$4(effect.Schema.Struct({
 	passwordConfigured: effect.Schema.Boolean,
 	totpEnrolled: effect.Schema.Boolean,
 	emailDeliveryConfigured: effect.Schema.Boolean,
@@ -1023,11 +1066,11 @@ const NativeIdentityTimedAttempt = {
 	attemptSecret: NativeIdentityAttemptSecret,
 	resendAfterMs: effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(0), effect.Schema.isLessThanOrEqualTo(9e5))
 };
-strict$4(effect.Schema.Struct({
+const NativeIdentityEmailStartRequest = strict$4(effect.Schema.Struct({
 	email: HubNormalizedEmail,
 	antiBotAssertion: AntiBotAssertion
 }));
-strictTimed({
+const NativeIdentityEmailStartResponse = strictTimed({
 	status: effect.Schema.Literal("accepted"),
 	...NativeIdentityTimedAttempt
 });
@@ -1038,12 +1081,12 @@ const NativeIdentityMailboxProof = effect.Schema.Union([strict$4(effect.Schema.S
 	kind: effect.Schema.Literal("email_code"),
 	code: EmailCode
 }))]);
-strict$4(effect.Schema.Struct({
+const NativeIdentityEmailVerifyRequest = strict$4(effect.Schema.Struct({
 	attemptId: NativeIdentityAttemptId,
 	attemptSecret: NativeIdentityAttemptSecret,
 	proof: NativeIdentityMailboxProof
 }));
-effect.Schema.Union([strictTimed({
+const NativeIdentityEmailVerifyResponse = effect.Schema.Union([strictTimed({
 	status: effect.Schema.Literal("existing_account"),
 	attemptId: NativeIdentityAttemptId,
 	activationSecret: NativeIdentityActivationSecret
@@ -1056,36 +1099,36 @@ const NativeIdentityActivation = {
 	attemptId: NativeIdentityAttemptId,
 	activationSecret: NativeIdentityActivationSecret
 };
-strict$4(effect.Schema.Struct({
+const NativeIdentitySignupUsernameRequest = strict$4(effect.Schema.Struct({
 	...NativeIdentityActivation,
 	username: HubUsername
 }));
-strict$4(effect.Schema.Struct({ status: effect.Schema.Literal("claimed") }));
-strict$4(effect.Schema.Struct(NativeIdentityActivation));
-strict$4(effect.Schema.Struct({ options: JsonObject }));
-strict$4(effect.Schema.Struct({
+const NativeIdentitySignupUsernameResponse = strict$4(effect.Schema.Struct({ status: effect.Schema.Literal("claimed") }));
+const NativeIdentitySignupPasskeyOptionsRequest = strict$4(effect.Schema.Struct(NativeIdentityActivation));
+const NativeIdentitySignupPasskeyOptionsResponse = strict$4(effect.Schema.Struct({ options: JsonObject }));
+const NativeIdentitySignupPasskeyFinishRequest = strict$4(effect.Schema.Struct({
 	...NativeIdentityActivation,
 	response: JsonObject,
 	idempotencyKey: IdempotencyKey$1
 }));
-strict$4(effect.Schema.Struct({
+const NativeIdentitySignupPasswordFinishRequest = strict$4(effect.Schema.Struct({
 	...NativeIdentityActivation,
 	password: BoundedPassword,
 	idempotencyKey: IdempotencyKey$1
 }));
-strict$4(effect.Schema.Struct({
+const NativeIdentitySessionResponse = strict$4(effect.Schema.Struct({
 	status: effect.Schema.Literal("complete"),
 	identity: HubSessionIdentity,
 	token: NativeIdentitySessionToken
 }));
 const NativeIdentityRecoveryCodes = effect.Schema.Array(effect.Schema.String.check(effect.Schema.isNonEmpty(), effect.Schema.isMaxLength(512))).check(effect.Schema.isMinLength(1), effect.Schema.isMaxLength(256));
-strict$4(effect.Schema.Struct({
+const NativeIdentitySignupFinishResponse = strict$4(effect.Schema.Struct({
 	status: effect.Schema.Literal("complete"),
 	identity: HubSessionIdentity,
 	token: NativeIdentitySessionToken,
 	recoveryCodes: NativeIdentityRecoveryCodes
 }));
-effect.Schema.Union([strict$4(effect.Schema.Struct({
+const NativeIdentityPasswordStartRequest = effect.Schema.Union([strict$4(effect.Schema.Struct({
 	kind: effect.Schema.Literal("username"),
 	username: HubUsername,
 	password: BoundedPassword,
@@ -1095,13 +1138,13 @@ effect.Schema.Union([strict$4(effect.Schema.Struct({
 	...NativeIdentityActivation,
 	password: BoundedPassword
 }))]);
-strictTimed({
+const NativeIdentityPasswordStartResponse = strictTimed({
 	status: effect.Schema.Literal("factor_required"),
 	attemptId: NativeIdentityLoginAttemptId,
 	attemptSecret: NativeIdentityAttemptSecret,
 	factor: effect.Schema.Literals(["totp", "email_code"])
 });
-effect.Schema.Union([strict$4(effect.Schema.Struct({
+const NativeIdentityPasswordFinishRequest = effect.Schema.Union([strict$4(effect.Schema.Struct({
 	attemptId: NativeIdentityLoginAttemptId,
 	attemptSecret: NativeIdentityAttemptSecret,
 	factor: effect.Schema.Literal("totp"),
@@ -1112,32 +1155,33 @@ effect.Schema.Union([strict$4(effect.Schema.Struct({
 	factor: effect.Schema.Literal("email_code"),
 	code: EmailCode
 }))]);
-strict$4(effect.Schema.Struct({
+const NativeIdentityRecoveryCodeRequest = strict$4(effect.Schema.Struct({
 	code: effect.Schema.String.check(effect.Schema.isNonEmpty(), effect.Schema.isMaxLength(512)),
 	idempotencyKey: IdempotencyKey$1
 }));
-strict$4(effect.Schema.Struct({
+const NativeIdentityRecoveryResponse = NativeIdentitySignupFinishResponse;
+const NativeIdentityPasswordResetRequest = strict$4(effect.Schema.Struct({
 	identifier: HubLoginIdentifier,
 	antiBotAssertion: effect.Schema.optionalKey(AntiBotAssertion)
 }));
-strictTimed({
+const NativeIdentityPasswordResetResponse = strictTimed({
 	status: effect.Schema.Literal("accepted"),
 	attemptId: NativeIdentityResetAttemptId,
 	attemptSecret: NativeIdentityAttemptSecret,
 	resendAfterMs: effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(0), effect.Schema.isLessThanOrEqualTo(9e5))
 });
-strict$4(effect.Schema.Struct({
+const NativeIdentityPasswordResetVerifyRequest = strict$4(effect.Schema.Struct({
 	attemptId: NativeIdentityResetAttemptId,
 	attemptSecret: NativeIdentityAttemptSecret,
 	proof: NativeIdentityMailboxProof
 }));
-strictTimed({
+const NativeIdentityPasswordResetVerifyResponse = strictTimed({
 	status: effect.Schema.Literal("verified"),
 	attemptId: NativeIdentityResetAttemptId,
 	resetSecret: NativeIdentityResetSecret,
 	requiresTotp: effect.Schema.Boolean
 });
-strict$4(effect.Schema.Struct({
+const NativeIdentityPasswordResetFinishRequest = strict$4(effect.Schema.Struct({
 	attemptId: NativeIdentityResetAttemptId,
 	resetSecret: NativeIdentityResetSecret,
 	password: BoundedPassword,
@@ -1146,8 +1190,8 @@ strict$4(effect.Schema.Struct({
 		code: TotpCode
 	}))])
 }));
-strict$4(effect.Schema.Struct({ status: effect.Schema.Literal("complete") }));
-strict$4(effect.Schema.Struct({
+const NativeIdentityPasswordResetFinishResponse = strict$4(effect.Schema.Struct({ status: effect.Schema.Literal("complete") }));
+const NativeIdentityAttemptCancelRequest = strict$4(effect.Schema.Struct({
 	attemptId: effect.Schema.Union([
 		NativeIdentityAttemptId,
 		NativeIdentityLoginAttemptId,
@@ -1155,15 +1199,15 @@ strict$4(effect.Schema.Struct({
 	]),
 	attemptSecret: effect.Schema.Union([NativeIdentityAttemptSecret, NativeIdentityActivationSecret])
 }));
-strict$4(effect.Schema.Struct({ status: effect.Schema.Literal("cancelled") }));
+const NativeIdentityAttemptCancelResponse = strict$4(effect.Schema.Struct({ status: effect.Schema.Literal("cancelled") }));
 const PublicSignupAttemptId = effect.Schema.String.check(effect.Schema.isPattern(/^signup_[A-Za-z0-9_-]{22,43}$/), effect.Schema.isMaxLength(50)).pipe(effect.Schema.brand("PublicSignupAttemptId"));
-strict$4(effect.Schema.Struct({
+const PublicSignupStartRequest = strict$4(effect.Schema.Struct({
 	username: HubUsername,
 	email: HubNormalizedEmail,
 	antiBotAssertion: AntiBotAssertion,
 	invitationToken: effect.Schema.optional(MailToken)
 }));
-strictTimed({
+const PublicSignupStartResponse = strictTimed({
 	status: effect.Schema.Literal("accepted"),
 	attemptId: PublicSignupAttemptId,
 	attemptSecret: SignupAttemptSecret,
@@ -1176,12 +1220,12 @@ const PublicSignupMailboxProof = effect.Schema.Union([strict$4(effect.Schema.Str
 	kind: effect.Schema.Literal("email_code"),
 	code: EmailCode
 }))]);
-strict$4(effect.Schema.Struct({
+const PublicSignupVerifyRequest = strict$4(effect.Schema.Struct({
 	attemptId: PublicSignupAttemptId,
 	attemptSecret: SignupAttemptSecret,
 	proof: PublicSignupMailboxProof
 }));
-strictTimed({
+const PublicSignupVerifyResponse = strictTimed({
 	status: effect.Schema.Literal("verified"),
 	attemptId: PublicSignupAttemptId,
 	activationSecret: SignupActivationSecret
@@ -1190,37 +1234,38 @@ const PublicSignupActivation = {
 	attemptId: PublicSignupAttemptId,
 	activationSecret: SignupActivationSecret
 };
-strict$4(effect.Schema.Struct(PublicSignupActivation));
-strict$4(effect.Schema.Struct({ options: JsonObject }));
-strict$4(effect.Schema.Struct({
+const PublicSignupPasskeyOptionsRequest = strict$4(effect.Schema.Struct(PublicSignupActivation));
+const PublicSignupPasskeyOptionsResponse = strict$4(effect.Schema.Struct({ options: JsonObject }));
+const PublicSignupPasskeyFinishRequest = strict$4(effect.Schema.Struct({
 	...PublicSignupActivation,
 	response: JsonObject,
 	idempotencyKey: IdempotencyKey$1
 }));
-strict$4(effect.Schema.Struct({
+const PublicSignupPasswordFinishRequest = strict$4(effect.Schema.Struct({
 	...PublicSignupActivation,
 	password: BoundedPassword,
 	idempotencyKey: IdempotencyKey$1
 }));
-strict$4(effect.Schema.Struct({
+const PublicSignupFinishResponse = strict$4(effect.Schema.Struct({
 	status: effect.Schema.Literal("complete"),
 	identity: HubBrowserSessionResponse,
 	recoveryCodes: effect.Schema.Array(effect.Schema.String.check(effect.Schema.isNonEmpty(), effect.Schema.isMaxLength(512))).check(effect.Schema.isMinLength(1), effect.Schema.isMaxLength(256))
 }));
+const ExternalIdentitySignupFinishResponse = PublicSignupFinishResponse;
 const PasswordLoginAttemptId = effect.Schema.String.check(effect.Schema.isPattern(/^login_[A-Za-z0-9_-]{22,43}$/), effect.Schema.isMaxLength(49)).pipe(effect.Schema.brand("PasswordLoginAttemptId"));
 const PasswordLoginFactor = effect.Schema.Literals(["totp", "email_code"]);
-strict$4(effect.Schema.Struct({
+const PasswordLoginStartRequest = strict$4(effect.Schema.Struct({
 	identifier: HubLoginIdentifier,
 	password: BoundedPassword,
 	antiBotAssertion: effect.Schema.optional(AntiBotAssertion)
 }));
-strictTimed({
+const PasswordLoginStartResponse = strictTimed({
 	status: effect.Schema.Literal("factor_required"),
 	attemptId: PasswordLoginAttemptId,
 	attemptSecret: PasswordLoginAttemptSecret,
 	factor: PasswordLoginFactor
 });
-effect.Schema.Union([strict$4(effect.Schema.Struct({
+const PasswordLoginFinishRequest = effect.Schema.Union([strict$4(effect.Schema.Struct({
 	attemptId: PasswordLoginAttemptId,
 	attemptSecret: PasswordLoginAttemptSecret,
 	factor: effect.Schema.Literal("totp"),
@@ -1231,14 +1276,14 @@ effect.Schema.Union([strict$4(effect.Schema.Struct({
 	factor: effect.Schema.Literal("email_code"),
 	code: EmailCode
 }))]);
-strict$4(effect.Schema.Struct({
+const PasswordResetRequest = strict$4(effect.Schema.Struct({
 	identifier: HubLoginIdentifier,
 	antiBotAssertion: effect.Schema.optional(AntiBotAssertion)
 }));
-strict$4(effect.Schema.Struct({ status: effect.Schema.Literal("accepted") }));
+const PasswordResetRequestResponse = strict$4(effect.Schema.Struct({ status: effect.Schema.Literal("accepted") }));
 const PasswordResetAttemptId = effect.Schema.String.check(effect.Schema.isPattern(/^reset_[A-Za-z0-9_-]{22,43}$/), effect.Schema.isMaxLength(49)).pipe(effect.Schema.brand("PasswordResetAttemptId"));
-strict$4(effect.Schema.Struct({ token: MailToken }));
-strictTimed({
+const PasswordResetVerifyRequest = strict$4(effect.Schema.Struct({ token: MailToken }));
+const PasswordResetVerifyResponse = strictTimed({
 	status: effect.Schema.Literal("verified"),
 	attemptId: PasswordResetAttemptId,
 	attemptSecret: PasswordResetAttemptSecret,
@@ -1248,15 +1293,15 @@ const PasswordResetFactor = effect.Schema.Union([strict$4(effect.Schema.Struct({
 	kind: effect.Schema.Literal("totp"),
 	code: TotpCode
 }))]);
-strict$4(effect.Schema.Struct({
+const PasswordResetFinishRequest = strict$4(effect.Schema.Struct({
 	attemptId: PasswordResetAttemptId,
 	attemptSecret: PasswordResetAttemptSecret,
 	password: BoundedPassword,
 	factor: PasswordResetFactor
 }));
-strict$4(effect.Schema.Struct({ status: effect.Schema.Literal("complete") }));
-strict$4(effect.Schema.Struct({ spaceId: HubSpaceId }));
-strict$4(effect.Schema.Struct({
+const PasswordResetFinishResponse = strict$4(effect.Schema.Struct({ status: effect.Schema.Literal("complete") }));
+const ActiveSpaceSwitchRequest = strict$4(effect.Schema.Struct({ spaceId: HubSpaceId }));
+const ActiveSpaceSwitchResponse = strict$4(effect.Schema.Struct({
 	activeSpace: HubActiveSpaceSummary,
 	spaces: HubSpaces
 }).check(effect.Schema.makeFilter((value) => {
@@ -1287,7 +1332,7 @@ const NativeNodeClaimMetadata = strict$4(effect.Schema.Struct({
 	publicKey: NativeNodeClaimPublicKey,
 	fingerprint: HubNodePublicKeyFingerprint
 }));
-strict$4(effect.Schema.Struct({
+const NativeNodeClaimStartRequest = strict$4(effect.Schema.Struct({
 	installationId: DesktopInstallationId,
 	node: NativeNodeClaimMetadata
 }));
@@ -1304,7 +1349,7 @@ const NativeNodeClaimStartResponse = strictTimed({
 	environmentId: NativeNodeClaimEnvironmentId,
 	nodeFingerprint: HubNodePublicKeyFingerprint
 });
-strict$4(effect.Schema.Struct({
+const NativeNodeClaimFinishRequest = strict$4(effect.Schema.Struct({
 	claimId: NativeNodeClaimId,
 	challenge: Opaque256,
 	signature: effect.Schema.String.check(effect.Schema.isMinLength(86), effect.Schema.isMaxLength(86), effect.Schema.isPattern(/^[A-Za-z0-9_-]{85}[AQgw]$/)),
@@ -1331,11 +1376,18 @@ effect.Schema.Union([strict$4(effect.Schema.Struct({
 	retryAfterMs: effect.Schema.optional(effect.Schema.Int.check(effect.Schema.isGreaterThanOrEqualTo(0), effect.Schema.isLessThanOrEqualTo(3e5)))
 }))]);
 const NATIVE_HANDOFF_MODE = "system-browser";
+const NATIVE_HANDOFF_START_PATH = "/api/auth/native/handoff/start";
+const NATIVE_HANDOFF_REDEEM_PATH = "/api/auth/native/handoff/redeem";
+const NATIVE_HANDOFF_PRESENTATION_PATH_PREFIX = "/api/auth/native/handoff/";
+const NATIVE_HANDOFF_APPROVE_PATH_SUFFIX = "/approve";
+const NATIVE_HANDOFF_CANCEL_PATH_SUFFIX = "/cancel";
 const NATIVE_HANDOFF_CALLBACK_URIS = [
 	"ryco-dev://hosted/complete",
 	"ryco-preview://hosted/complete",
 	"ryco://hosted/complete"
 ];
+const NATIVE_HANDOFF_TRANSACTION_LIFETIME_MS = 3e5;
+const NATIVE_HANDOFF_CODE_LIFETIME_MS = 6e4;
 const NATIVE_HANDOFF_MAX_URL_CHARS = 2048;
 const strict$3 = (schema) => schema.annotate({ parseOptions: { onExcessProperty: "error" } });
 const Base64Url256$1 = effect.Schema.String.check(effect.Schema.isMinLength(43), effect.Schema.isMaxLength(43), effect.Schema.isPattern(/^[A-Za-z0-9_-]{43}$/));
@@ -1450,7 +1502,7 @@ const NativeHandoffConnectExternalIdentityPurpose = strict$3(effect.Schema.Struc
 	provider: ExternalIdentityProvider
 }));
 const NativeHandoffPurpose = effect.Schema.Union([NativeHandoffSignInPurpose, NativeHandoffConnectExternalIdentityPurpose]);
-strict$3(effect.Schema.Struct({
+const NativeHandoffStartRequest = strict$3(effect.Schema.Struct({
 	redirectUri: NativeHandoffCallbackUri,
 	codeChallenge: NativeHandoffCodeChallenge,
 	codeChallengeMethod: effect.Schema.Literal("S256"),
@@ -1458,25 +1510,25 @@ strict$3(effect.Schema.Struct({
 	deviceLabel: BoundedDeviceLabel,
 	purpose: effect.Schema.optionalKey(NativeHandoffPurpose)
 }));
-strict$3(effect.Schema.Struct({
+const NativeHandoffStartResponse = strict$3(effect.Schema.Struct({
 	handoffId: NativeHandoffId,
 	authorizationUrl: AuthorizationUrl,
 	expiresAt: EpochMs$1
 }));
-strict$3(effect.Schema.Struct({
+const NativeHandoffPresentation = strict$3(effect.Schema.Struct({
 	status: effect.Schema.Literal("pending"),
 	deviceLabel: BoundedDeviceLabel,
 	expiresAt: EpochMs$1,
 	providerHint: effect.Schema.optionalKey(ExternalIdentityProvider)
 }));
-strict$3(effect.Schema.Struct({ redirectUri: ApprovedCallbackUrl }));
-strict$3(effect.Schema.Struct({ redirectUri: CancelledCallbackUrl }));
-strict$3(effect.Schema.Struct({
+const NativeHandoffApproveResponse = strict$3(effect.Schema.Struct({ redirectUri: ApprovedCallbackUrl }));
+const NativeHandoffCancelResponse = strict$3(effect.Schema.Struct({ redirectUri: CancelledCallbackUrl }));
+const NativeHandoffRedeemRequest = strict$3(effect.Schema.Struct({
 	handoffId: NativeHandoffId,
 	code: NativeHandoffCode,
 	codeVerifier: NativeHandoffCodeVerifier
 }));
-strict$3(effect.Schema.Struct({
+const NativeHandoffConnectRedeemRequest = strict$3(effect.Schema.Struct({
 	handoffId: NativeHandoffId,
 	code: NativeHandoffCode,
 	codeVerifier: NativeHandoffCodeVerifier,
@@ -1511,16 +1563,21 @@ const NativeHandoffSession = strict$3(effect.Schema.Struct({
 	revokedAt: effect.Schema.Null,
 	revocationReasonCode: effect.Schema.Null
 }).check(effect.Schema.makeFilter((session) => session.expiresAt > session.createdAt && session.lastSeenAt >= session.createdAt && session.lastSeenAt <= session.expiresAt ? void 0 : "native session timestamps are inconsistent")));
-strict$3(effect.Schema.Struct({
+const NativeHandoffRedeemResponse = strict$3(effect.Schema.Struct({
 	account: NativeHandoffAccount,
 	session: NativeHandoffSession,
 	token: Base64Url256$1
 }).check(effect.Schema.makeFilter((value) => value.session.accountId === value.account.id ? void 0 : "native session account does not match")));
-strict$3(effect.Schema.Struct({
+const NativeHandoffConnectRedeemResponse = strict$3(effect.Schema.Struct({
 	status: effect.Schema.Literal("connected"),
 	purpose: NativeHandoffConnectExternalIdentityPurpose,
 	externalIdentity: ExternalIdentitySummary
 }));
+const NATIVE_E2EE_CURRENT_DEVICE_PATH = "/api/native/e2ee/devices/current";
+const NATIVE_E2EE_GRANT_KEYS_PATH = "/api/native/e2ee/grant-keys";
+const NATIVE_ACCOUNT_GRANT_RELAY_TICKET_PATH = "/api/native/relay/tickets/account-grant";
+const ACCOUNT_E2EE_DEVICES_PATH = "/api/account/e2ee/devices";
+const ACCOUNT_E2EE_DEVICE_PATH_PREFIX = "/api/account/e2ee/devices";
 const NATIVE_E2EE_MAX_GRANT_KEYS = 4;
 const HUB_DEVICE_GRANT_MAX_BYTES = 2048;
 const HUB_DEVICE_GRANT_BASE64URL_MAX_CHARS = 2731;
@@ -1617,7 +1674,7 @@ const HubDeviceGrantClaims = strict$2(effect.Schema.Struct({
 	expiresAt: EpochMs,
 	nonce: ExactBytes(32)
 }).check(effect.Schema.makeFilter((claims) => claims.notBefore <= claims.issuedAt && claims.issuedAt < claims.expiresAt && claims.expiresAt - claims.issuedAt <= 12e4 ? void 0 : "invalid grant validity interval")));
-strict$2(effect.Schema.Struct({
+const NativeE2eeEnrollmentUpsertRequest = strict$2(effect.Schema.Struct({
 	protocolVersion: effect.Schema.Literal(1),
 	hubOrigin: HubOrigin,
 	accountId: HubAccountId,
@@ -1664,23 +1721,23 @@ const AccountE2eeDeviceSummary = strict$2(effect.Schema.Struct({
 	if (device.status === "active" && device.revokedAt !== null) return "active enrollment cannot have revokedAt";
 	if (device.status !== "active" && device.revokedAt === null) return "inactive enrollment requires revokedAt";
 })));
-strict$2(effect.Schema.Struct({
+const NativeE2eeEnrollmentUpsertResponse = strict$2(effect.Schema.Struct({
 	protocolVersion: effect.Schema.Literal(1),
 	enrollment: AccountE2eeDeviceSummary
 }));
-strict$2(effect.Schema.Struct({
+const AccountE2eeDeviceListResponse = strict$2(effect.Schema.Struct({
 	protocolVersion: effect.Schema.Literal(1),
 	devices: effect.Schema.Array(AccountE2eeDeviceSummary).check(effect.Schema.isMaxLength(128), effect.Schema.makeFilter((devices) => new Set(devices.map((device) => `${device.enrollmentId}:${device.enrollmentRevision}`)).size === devices.length ? void 0 : "device enrollment revisions must be distinct"))
 }));
-strict$2(effect.Schema.Struct({
+const AccountE2eeDeviceRenameRequest = strict$2(effect.Schema.Struct({
 	expectedEnrollmentRevision: NativeE2eeEnrollmentRevision,
 	deviceLabel: DeviceLabel
 }));
-strict$2(effect.Schema.Struct({
+const AccountE2eeDeviceRevokeRequest = strict$2(effect.Schema.Struct({
 	expectedEnrollmentRevision: NativeE2eeEnrollmentRevision,
 	reasonCode: ReasonCode
 }));
-strict$2(effect.Schema.Struct({
+const AccountE2eeDeviceMutationResponse = strict$2(effect.Schema.Struct({
 	protocolVersion: effect.Schema.Literal(1),
 	enrollment: AccountE2eeDeviceSummary
 }));
@@ -1691,12 +1748,12 @@ const HubGrantVerificationKey = strict$2(effect.Schema.Struct({
 	notAfter: EpochMs
 }).check(effect.Schema.makeFilter((key) => key.notAfter > key.notBefore ? void 0 : "notAfter must be after notBefore")));
 const HubGrantVerificationKeys = effect.Schema.Array(HubGrantVerificationKey).check(effect.Schema.isMinLength(1), effect.Schema.isMaxLength(NATIVE_E2EE_MAX_GRANT_KEYS), effect.Schema.makeFilter((keys) => new Set(keys.map((key) => key.keyId)).size === keys.length ? void 0 : "grant verification key ids must be distinct"));
-strict$2(effect.Schema.Struct({
+const HubGrantVerificationKeysetResponse = strict$2(effect.Schema.Struct({
 	protocolVersion: effect.Schema.Literal(1),
 	generation: E2eeKeysetGeneration,
 	keys: HubGrantVerificationKeys
 }));
-strict$2(effect.Schema.Struct({
+const NativeAccountGrantRelayTicketRequest = strict$2(effect.Schema.Struct({
 	protocolVersion: effect.Schema.Literal(1),
 	nodeId: RelayNodeId,
 	capability: RelayCapability,
@@ -1707,7 +1764,7 @@ strict$2(effect.Schema.Struct({
 	enrollmentRevision: NativeE2eeEnrollmentRevision,
 	clientPrekeyCertificateDigest: Base64Url32
 }));
-strict$2(effect.Schema.Struct({
+const NativeAccountGrantRelayTicketResponse = strict$2(effect.Schema.Struct({
 	protocolVersion: effect.Schema.Literal(1),
 	ticket: Base64Url(43, 86),
 	ticketId: RelayTicketId,
@@ -4233,11 +4290,36 @@ const OrchestrationShellStreamEvent = effect.Schema.Union([
 		worktreeId: WorktreeId
 	})
 ]);
-const OrchestrationShellStreamItem = effect.Schema.Union([effect.Schema.Struct({
-	kind: effect.Schema.Literal("snapshot"),
-	snapshot: OrchestrationShellSnapshot
-}), OrchestrationShellStreamEvent]);
-const OrchestrationSubscribeThreadInput = effect.Schema.Struct({ threadId: ThreadId });
+const OrchestrationShellStreamItem = effect.Schema.Union([
+	effect.Schema.Struct({
+		kind: effect.Schema.Literal("snapshot"),
+		snapshot: OrchestrationShellSnapshot
+	}),
+	effect.Schema.Struct({
+		kind: effect.Schema.Literal("resumed"),
+		fromSequence: NonNegativeInt
+	}),
+	OrchestrationShellStreamEvent
+]);
+const OrchestrationSubscribeShellInput = effect.Schema.Struct({ 
+/**
+* The last shell sequence the client applied. A server that still holds every
+* event since then answers `resumed` and replays only those, sparing a full
+* snapshot on every reconnect; otherwise it sends a snapshot as usual. Older
+* servers ignore the field.
+*/
+resumeFromSequence: effect.Schema.optional(NonNegativeInt) });
+/**
+* The last orchestration sequence the client applied for this thread. A server
+* that still holds every event since then answers `resumed` and replays only
+* the thread's missed events; otherwise it sends a snapshot. Older servers
+* ignore the field.
+*/
+const ThreadResumeFromSequence = effect.Schema.optional(NonNegativeInt);
+const OrchestrationSubscribeThreadInput = effect.Schema.Struct({
+	threadId: ThreadId,
+	resumeFromSequence: ThreadResumeFromSequence
+});
 const OrchestrationThreadDetailSnapshot = effect.Schema.Struct({
 	snapshotSequence: NonNegativeInt,
 	thread: OrchestrationThread
@@ -4270,6 +4352,11 @@ const OrchestrationGetThreadWindowInput = effect.Schema.Struct({
 	threadId: ThreadId,
 	limits: OrchestrationThreadHistoryLimits
 });
+const OrchestrationSubscribeThreadWindowInput = effect.Schema.Struct({
+	threadId: ThreadId,
+	limits: OrchestrationThreadHistoryLimits,
+	resumeFromSequence: ThreadResumeFromSequence
+});
 const OrchestrationThreadWindowSnapshot = effect.Schema.Struct({
 	snapshotSequence: NonNegativeInt,
 	thread: OrchestrationThread,
@@ -5569,20 +5656,34 @@ const OrchestrationEvent = effect.Schema.Union([
 		payload: WorktreeManualPositionSetPayload
 	})
 ]);
-const OrchestrationThreadStreamItem = effect.Schema.Union([effect.Schema.Struct({
-	kind: effect.Schema.Literal("snapshot"),
-	snapshot: OrchestrationThreadDetailSnapshot
-}), effect.Schema.Struct({
-	kind: effect.Schema.Literal("event"),
-	event: OrchestrationEvent
-})]);
-const OrchestrationThreadWindowStreamItem = effect.Schema.Union([effect.Schema.Struct({
-	kind: effect.Schema.Literal("snapshot"),
-	snapshot: OrchestrationThreadWindowSnapshot
-}), effect.Schema.Struct({
-	kind: effect.Schema.Literal("event"),
-	event: OrchestrationEvent
-})]);
+const OrchestrationThreadStreamItem = effect.Schema.Union([
+	effect.Schema.Struct({
+		kind: effect.Schema.Literal("snapshot"),
+		snapshot: OrchestrationThreadDetailSnapshot
+	}),
+	effect.Schema.Struct({
+		kind: effect.Schema.Literal("resumed"),
+		fromSequence: NonNegativeInt
+	}),
+	effect.Schema.Struct({
+		kind: effect.Schema.Literal("event"),
+		event: OrchestrationEvent
+	})
+]);
+const OrchestrationThreadWindowStreamItem = effect.Schema.Union([
+	effect.Schema.Struct({
+		kind: effect.Schema.Literal("snapshot"),
+		snapshot: OrchestrationThreadWindowSnapshot
+	}),
+	effect.Schema.Struct({
+		kind: effect.Schema.Literal("resumed"),
+		fromSequence: NonNegativeInt
+	}),
+	effect.Schema.Struct({
+		kind: effect.Schema.Literal("event"),
+		event: OrchestrationEvent
+	})
+]);
 const OrchestrationCommandReceiptStatus = effect.Schema.Literals(["accepted", "rejected"]);
 const TurnCountRange = effect.Schema.Struct({
 	fromTurnCount: NonNegativeInt,
@@ -5820,11 +5921,11 @@ const OrchestrationRpcSchemas = {
 		output: OrchestrationThreadStreamItem
 	},
 	subscribeThreadWindow: {
-		input: OrchestrationGetThreadWindowInput,
+		input: OrchestrationSubscribeThreadWindowInput,
 		output: OrchestrationThreadWindowStreamItem
 	},
 	subscribeShell: {
-		input: effect.Schema.Struct({}),
+		input: OrchestrationSubscribeShellInput,
 		output: OrchestrationShellStreamItem
 	}
 };
@@ -14894,6 +14995,24 @@ effect.Schema.Struct({
 	])
 });
 //#endregion
+Object.defineProperty(exports, "ACCOUNT_E2EE_DEVICES_PATH", {
+	enumerable: true,
+	get: function() {
+		return ACCOUNT_E2EE_DEVICES_PATH;
+	}
+});
+Object.defineProperty(exports, "ACCOUNT_E2EE_DEVICE_PATH_PREFIX", {
+	enumerable: true,
+	get: function() {
+		return ACCOUNT_E2EE_DEVICE_PATH_PREFIX;
+	}
+});
+Object.defineProperty(exports, "ACTIVE_SPACE_SWITCH_PATH", {
+	enumerable: true,
+	get: function() {
+		return ACTIVE_SPACE_SWITCH_PATH;
+	}
+});
 Object.defineProperty(exports, "AGENT_CONTROL_ACTION_CAPABILITIES", {
 	enumerable: true,
 	get: function() {
@@ -15038,6 +15157,30 @@ Object.defineProperty(exports, "AGENT_CONTROL_WS_METHODS", {
 		return AGENT_CONTROL_WS_METHODS;
 	}
 });
+Object.defineProperty(exports, "AccountE2eeDeviceListResponse", {
+	enumerable: true,
+	get: function() {
+		return AccountE2eeDeviceListResponse;
+	}
+});
+Object.defineProperty(exports, "AccountE2eeDeviceMutationResponse", {
+	enumerable: true,
+	get: function() {
+		return AccountE2eeDeviceMutationResponse;
+	}
+});
+Object.defineProperty(exports, "AccountE2eeDeviceRenameRequest", {
+	enumerable: true,
+	get: function() {
+		return AccountE2eeDeviceRenameRequest;
+	}
+});
+Object.defineProperty(exports, "AccountE2eeDeviceRevokeRequest", {
+	enumerable: true,
+	get: function() {
+		return AccountE2eeDeviceRevokeRequest;
+	}
+});
 Object.defineProperty(exports, "AcpRegistryAgentId", {
 	enumerable: true,
 	get: function() {
@@ -15062,6 +15205,18 @@ Object.defineProperty(exports, "AcpRegistryVersion", {
 		return AcpRegistryVersion;
 	}
 });
+Object.defineProperty(exports, "ActiveSpaceSwitchRequest", {
+	enumerable: true,
+	get: function() {
+		return ActiveSpaceSwitchRequest;
+	}
+});
+Object.defineProperty(exports, "ActiveSpaceSwitchResponse", {
+	enumerable: true,
+	get: function() {
+		return ActiveSpaceSwitchResponse;
+	}
+});
 Object.defineProperty(exports, "AgentControlActionKind", {
 	enumerable: true,
 	get: function() {
@@ -15740,6 +15895,18 @@ Object.defineProperty(exports, "AuthSessionId", {
 		return AuthSessionId;
 	}
 });
+Object.defineProperty(exports, "BrowserExternalIdentityConnectRequest", {
+	enumerable: true,
+	get: function() {
+		return BrowserExternalIdentityConnectRequest;
+	}
+});
+Object.defineProperty(exports, "BrowserExternalIdentityConnectResponse", {
+	enumerable: true,
+	get: function() {
+		return BrowserExternalIdentityConnectResponse;
+	}
+});
 Object.defineProperty(exports, "CHAT_ATTACHMENT_READ_CHUNK_BYTES", {
 	enumerable: true,
 	get: function() {
@@ -16196,6 +16363,30 @@ Object.defineProperty(exports, "EDITORS", {
 		return EDITORS;
 	}
 });
+Object.defineProperty(exports, "EXTERNAL_IDENTITY_CONFIG_PATH", {
+	enumerable: true,
+	get: function() {
+		return EXTERNAL_IDENTITY_CONFIG_PATH;
+	}
+});
+Object.defineProperty(exports, "EXTERNAL_IDENTITY_PENDING_PATH", {
+	enumerable: true,
+	get: function() {
+		return EXTERNAL_IDENTITY_PENDING_PATH;
+	}
+});
+Object.defineProperty(exports, "EXTERNAL_IDENTITY_SIGNUP_FINISH_PATH", {
+	enumerable: true,
+	get: function() {
+		return EXTERNAL_IDENTITY_SIGNUP_FINISH_PATH;
+	}
+});
+Object.defineProperty(exports, "EXTERNAL_IDENTITY_START_PATH", {
+	enumerable: true,
+	get: function() {
+		return EXTERNAL_IDENTITY_START_PATH;
+	}
+});
 Object.defineProperty(exports, "EnvironmentId", {
 	enumerable: true,
 	get: function() {
@@ -16208,6 +16399,60 @@ Object.defineProperty(exports, "EventId", {
 		return EventId;
 	}
 });
+Object.defineProperty(exports, "ExternalIdentityAuthorizationStartRequest", {
+	enumerable: true,
+	get: function() {
+		return ExternalIdentityAuthorizationStartRequest;
+	}
+});
+Object.defineProperty(exports, "ExternalIdentityAuthorizationStartResponse", {
+	enumerable: true,
+	get: function() {
+		return ExternalIdentityAuthorizationStartResponse;
+	}
+});
+Object.defineProperty(exports, "ExternalIdentityConfigResponse", {
+	enumerable: true,
+	get: function() {
+		return ExternalIdentityConfigResponse;
+	}
+});
+Object.defineProperty(exports, "ExternalIdentityDisconnectRequest", {
+	enumerable: true,
+	get: function() {
+		return ExternalIdentityDisconnectRequest;
+	}
+});
+Object.defineProperty(exports, "ExternalIdentityDisconnectResponse", {
+	enumerable: true,
+	get: function() {
+		return ExternalIdentityDisconnectResponse;
+	}
+});
+Object.defineProperty(exports, "ExternalIdentityPendingResponse", {
+	enumerable: true,
+	get: function() {
+		return ExternalIdentityPendingResponse;
+	}
+});
+Object.defineProperty(exports, "ExternalIdentityProvider", {
+	enumerable: true,
+	get: function() {
+		return ExternalIdentityProvider;
+	}
+});
+Object.defineProperty(exports, "ExternalIdentitySignupFinishRequest", {
+	enumerable: true,
+	get: function() {
+		return ExternalIdentitySignupFinishRequest;
+	}
+});
+Object.defineProperty(exports, "ExternalIdentitySignupFinishResponse", {
+	enumerable: true,
+	get: function() {
+		return ExternalIdentitySignupFinishResponse;
+	}
+});
 Object.defineProperty(exports, "FileAttachmentCreateUploadUrlError", {
 	enumerable: true,
 	get: function() {
@@ -16220,6 +16465,18 @@ Object.defineProperty(exports, "FilesystemBrowseError", {
 		return FilesystemBrowseError;
 	}
 });
+Object.defineProperty(exports, "GITHUB_EXTERNAL_IDENTITY_CONNECT_PATH", {
+	enumerable: true,
+	get: function() {
+		return GITHUB_EXTERNAL_IDENTITY_CONNECT_PATH;
+	}
+});
+Object.defineProperty(exports, "GITHUB_EXTERNAL_IDENTITY_DISCONNECT_PATH", {
+	enumerable: true,
+	get: function() {
+		return GITHUB_EXTERNAL_IDENTITY_DISCONNECT_PATH;
+	}
+});
 Object.defineProperty(exports, "GitApplyIndexPatchInput", {
 	enumerable: true,
 	get: function() {
@@ -16262,6 +16519,18 @@ Object.defineProperty(exports, "HUB_DEVICE_GRANT_MAX_BYTES", {
 		return HUB_DEVICE_GRANT_MAX_BYTES;
 	}
 });
+Object.defineProperty(exports, "HostedAccountSecurityResponse", {
+	enumerable: true,
+	get: function() {
+		return HostedAccountSecurityResponse;
+	}
+});
+Object.defineProperty(exports, "HubBrowserSessionResponse", {
+	enumerable: true,
+	get: function() {
+		return HubBrowserSessionResponse;
+	}
+});
 Object.defineProperty(exports, "HubConnectorStatus", {
 	enumerable: true,
 	get: function() {
@@ -16292,6 +16561,12 @@ Object.defineProperty(exports, "HubGrantVerificationKeyId", {
 		return HubGrantVerificationKeyId;
 	}
 });
+Object.defineProperty(exports, "HubGrantVerificationKeysetResponse", {
+	enumerable: true,
+	get: function() {
+		return HubGrantVerificationKeysetResponse;
+	}
+});
 Object.defineProperty(exports, "HubIdentitySummary", {
 	enumerable: true,
 	get: function() {
@@ -16472,247 +16747,697 @@ Object.defineProperty(exports, "ModelSelection", {
 		return ModelSelection;
 	}
 });
-Object.defineProperty(exports, "NATIVE_E2EE_MAX_GRANT_KEYS", {
+Object.defineProperty(exports, "NATIVE_ACCOUNT_GRANT_RELAY_TICKET_PATH", {
 	enumerable: true,
 	get: function() {
-		return NATIVE_E2EE_MAX_GRANT_KEYS;
+		return NATIVE_ACCOUNT_GRANT_RELAY_TICKET_PATH;
 	}
 });
-Object.defineProperty(exports, "NodeE2eeAdmissionPolicy", {
+Object.defineProperty(exports, "NATIVE_E2EE_CURRENT_DEVICE_PATH", {
 	enumerable: true,
 	get: function() {
-		return NodeE2eeAdmissionPolicy;
+		return NATIVE_E2EE_CURRENT_DEVICE_PATH;
 	}
 });
-Object.defineProperty(exports, "NonNegativeInt", {
+Object.defineProperty(exports, "NATIVE_E2EE_GRANT_KEYS_PATH", {
 	enumerable: true,
 	get: function() {
-		return NonNegativeInt;
+		return NATIVE_E2EE_GRANT_KEYS_PATH;
 	}
 });
-Object.defineProperty(exports, "ORCHESTRATION_WS_METHODS", {
+Object.defineProperty(exports, "NATIVE_E2EE_MAX_GRANT_KEYS", {
 	enumerable: true,
 	get: function() {
-		return ORCHESTRATION_WS_METHODS;
+		return NATIVE_E2EE_MAX_GRANT_KEYS;
 	}
 });
-Object.defineProperty(exports, "OpenCodeSettings", {
+Object.defineProperty(exports, "NATIVE_HANDOFF_APPROVE_PATH_SUFFIX", {
 	enumerable: true,
 	get: function() {
-		return OpenCodeSettings;
+		return NATIVE_HANDOFF_APPROVE_PATH_SUFFIX;
 	}
 });
-Object.defineProperty(exports, "OpenError", {
+Object.defineProperty(exports, "NATIVE_HANDOFF_CANCEL_PATH_SUFFIX", {
 	enumerable: true,
 	get: function() {
-		return OpenError;
+		return NATIVE_HANDOFF_CANCEL_PATH_SUFFIX;
 	}
 });
-Object.defineProperty(exports, "OpinionatedPluginError", {
+Object.defineProperty(exports, "NATIVE_HANDOFF_CODE_LIFETIME_MS", {
 	enumerable: true,
 	get: function() {
-		return OpinionatedPluginError;
+		return NATIVE_HANDOFF_CODE_LIFETIME_MS;
 	}
 });
-Object.defineProperty(exports, "OrchestrationActorKind", {
+Object.defineProperty(exports, "NATIVE_HANDOFF_PRESENTATION_PATH_PREFIX", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationActorKind;
+		return NATIVE_HANDOFF_PRESENTATION_PATH_PREFIX;
 	}
 });
-Object.defineProperty(exports, "OrchestrationAggregateKind", {
+Object.defineProperty(exports, "NATIVE_HANDOFF_REDEEM_PATH", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationAggregateKind;
+		return NATIVE_HANDOFF_REDEEM_PATH;
 	}
 });
-Object.defineProperty(exports, "OrchestrationCheckpointFile", {
+Object.defineProperty(exports, "NATIVE_HANDOFF_START_PATH", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationCheckpointFile;
+		return NATIVE_HANDOFF_START_PATH;
 	}
 });
-Object.defineProperty(exports, "OrchestrationCheckpointStatus", {
+Object.defineProperty(exports, "NATIVE_HANDOFF_TRANSACTION_LIFETIME_MS", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationCheckpointStatus;
+		return NATIVE_HANDOFF_TRANSACTION_LIFETIME_MS;
 	}
 });
-Object.defineProperty(exports, "OrchestrationCheckpointSummary", {
+Object.defineProperty(exports, "NATIVE_IDENTITY_ATTEMPT_CANCEL_PATH", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationCheckpointSummary;
+		return NATIVE_IDENTITY_ATTEMPT_CANCEL_PATH;
 	}
 });
-Object.defineProperty(exports, "OrchestrationCommand", {
+Object.defineProperty(exports, "NATIVE_IDENTITY_EMAIL_START_PATH", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationCommand;
+		return NATIVE_IDENTITY_EMAIL_START_PATH;
 	}
 });
-Object.defineProperty(exports, "OrchestrationCommandReceiptStatus", {
+Object.defineProperty(exports, "NATIVE_IDENTITY_EMAIL_VERIFY_PATH", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationCommandReceiptStatus;
+		return NATIVE_IDENTITY_EMAIL_VERIFY_PATH;
 	}
 });
-Object.defineProperty(exports, "OrchestrationDispatchCommandError", {
+Object.defineProperty(exports, "NATIVE_IDENTITY_PASSWORD_FINISH_PATH", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationDispatchCommandError;
+		return NATIVE_IDENTITY_PASSWORD_FINISH_PATH;
 	}
 });
-Object.defineProperty(exports, "OrchestrationEvent", {
+Object.defineProperty(exports, "NATIVE_IDENTITY_PASSWORD_RESET_FINISH_PATH", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationEvent;
+		return NATIVE_IDENTITY_PASSWORD_RESET_FINISH_PATH;
 	}
 });
-Object.defineProperty(exports, "OrchestrationEventMetadata", {
+Object.defineProperty(exports, "NATIVE_IDENTITY_PASSWORD_RESET_REQUEST_PATH", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationEventMetadata;
+		return NATIVE_IDENTITY_PASSWORD_RESET_REQUEST_PATH;
 	}
 });
-Object.defineProperty(exports, "OrchestrationEventType", {
+Object.defineProperty(exports, "NATIVE_IDENTITY_PASSWORD_RESET_VERIFY_PATH", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationEventType;
+		return NATIVE_IDENTITY_PASSWORD_RESET_VERIFY_PATH;
 	}
 });
-Object.defineProperty(exports, "OrchestrationGetFullThreadDiffError", {
+Object.defineProperty(exports, "NATIVE_IDENTITY_PASSWORD_START_PATH", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationGetFullThreadDiffError;
+		return NATIVE_IDENTITY_PASSWORD_START_PATH;
 	}
 });
-Object.defineProperty(exports, "OrchestrationGetSnapshotError", {
+Object.defineProperty(exports, "NATIVE_IDENTITY_RECOVERY_CODE_PATH", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationGetSnapshotError;
+		return NATIVE_IDENTITY_RECOVERY_CODE_PATH;
 	}
 });
-Object.defineProperty(exports, "OrchestrationGetTaskOutputError", {
+Object.defineProperty(exports, "NATIVE_IDENTITY_SIGNUP_PASSKEY_FINISH_PATH", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationGetTaskOutputError;
+		return NATIVE_IDENTITY_SIGNUP_PASSKEY_FINISH_PATH;
 	}
 });
-Object.defineProperty(exports, "OrchestrationGetTurnDiffError", {
+Object.defineProperty(exports, "NATIVE_IDENTITY_SIGNUP_PASSKEY_OPTIONS_PATH", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationGetTurnDiffError;
+		return NATIVE_IDENTITY_SIGNUP_PASSKEY_OPTIONS_PATH;
 	}
 });
-Object.defineProperty(exports, "OrchestrationGetTurnDiffResult", {
+Object.defineProperty(exports, "NATIVE_IDENTITY_SIGNUP_PASSWORD_FINISH_PATH", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationGetTurnDiffResult;
+		return NATIVE_IDENTITY_SIGNUP_PASSWORD_FINISH_PATH;
 	}
 });
-Object.defineProperty(exports, "OrchestrationGetWorkflowScriptError", {
+Object.defineProperty(exports, "NATIVE_IDENTITY_SIGNUP_USERNAME_PATH", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationGetWorkflowScriptError;
+		return NATIVE_IDENTITY_SIGNUP_USERNAME_PATH;
 	}
 });
-Object.defineProperty(exports, "OrchestrationMessage", {
+Object.defineProperty(exports, "NATIVE_NODE_CLAIM_FINISH_PATH", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationMessage;
+		return NATIVE_NODE_CLAIM_FINISH_PATH;
 	}
 });
-Object.defineProperty(exports, "OrchestrationMessageRole", {
+Object.defineProperty(exports, "NATIVE_NODE_CLAIM_START_PATH", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationMessageRole;
+		return NATIVE_NODE_CLAIM_START_PATH;
 	}
 });
-Object.defineProperty(exports, "OrchestrationProposedPlanId", {
+Object.defineProperty(exports, "NativeAccountGrantRelayTicketRequest", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationProposedPlanId;
+		return NativeAccountGrantRelayTicketRequest;
 	}
 });
-Object.defineProperty(exports, "OrchestrationReadModel", {
+Object.defineProperty(exports, "NativeAccountGrantRelayTicketResponse", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationReadModel;
+		return NativeAccountGrantRelayTicketResponse;
 	}
 });
-Object.defineProperty(exports, "OrchestrationReplayEventsError", {
+Object.defineProperty(exports, "NativeE2eeEnrollmentId", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationReplayEventsError;
+		return NativeE2eeEnrollmentId;
 	}
 });
-Object.defineProperty(exports, "OrchestrationSession", {
+Object.defineProperty(exports, "NativeE2eeEnrollmentUpsertRequest", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationSession;
+		return NativeE2eeEnrollmentUpsertRequest;
 	}
 });
-Object.defineProperty(exports, "OrchestrationSessionStatus", {
+Object.defineProperty(exports, "NativeE2eeEnrollmentUpsertResponse", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationSessionStatus;
+		return NativeE2eeEnrollmentUpsertResponse;
 	}
 });
-Object.defineProperty(exports, "OrchestrationShellSnapshot", {
+Object.defineProperty(exports, "NativeHandoffApproveResponse", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationShellSnapshot;
+		return NativeHandoffApproveResponse;
 	}
 });
-Object.defineProperty(exports, "OrchestrationStopBackgroundTaskError", {
+Object.defineProperty(exports, "NativeHandoffCallbackUri", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationStopBackgroundTaskError;
+		return NativeHandoffCallbackUri;
 	}
 });
-Object.defineProperty(exports, "OrchestrationThread", {
+Object.defineProperty(exports, "NativeHandoffCancelResponse", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationThread;
+		return NativeHandoffCancelResponse;
 	}
 });
-Object.defineProperty(exports, "OrchestrationThreadActivity", {
+Object.defineProperty(exports, "NativeHandoffConnectRedeemRequest", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationThreadActivity;
+		return NativeHandoffConnectRedeemRequest;
 	}
 });
-Object.defineProperty(exports, "OrchestrationThreadActivityTone", {
+Object.defineProperty(exports, "NativeHandoffConnectRedeemResponse", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationThreadActivityTone;
+		return NativeHandoffConnectRedeemResponse;
 	}
 });
-Object.defineProperty(exports, "OrchestrationThreadHistoryCursor", {
+Object.defineProperty(exports, "NativeHandoffId", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationThreadHistoryCursor;
+		return NativeHandoffId;
 	}
 });
-Object.defineProperty(exports, "OrchestrationThreadHistoryError", {
+Object.defineProperty(exports, "NativeHandoffPresentation", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationThreadHistoryError;
+		return NativeHandoffPresentation;
 	}
 });
-Object.defineProperty(exports, "OrchestrationWorktreeShell", {
+Object.defineProperty(exports, "NativeHandoffRedeemRequest", {
 	enumerable: true,
 	get: function() {
-		return OrchestrationWorktreeShell;
+		return NativeHandoffRedeemRequest;
 	}
 });
-Object.defineProperty(exports, "PROJECT_ICON_MAX_BYTES", {
+Object.defineProperty(exports, "NativeHandoffRedeemResponse", {
 	enumerable: true,
 	get: function() {
-		return PROJECT_ICON_MAX_BYTES;
+		return NativeHandoffRedeemResponse;
 	}
 });
-Object.defineProperty(exports, "PROJECT_READ_FILE_BINARY_MAX_BYTES", {
+Object.defineProperty(exports, "NativeHandoffStartRequest", {
+	enumerable: true,
+	get: function() {
+		return NativeHandoffStartRequest;
+	}
+});
+Object.defineProperty(exports, "NativeHandoffStartResponse", {
+	enumerable: true,
+	get: function() {
+		return NativeHandoffStartResponse;
+	}
+});
+Object.defineProperty(exports, "NativeIdentityAttemptCancelRequest", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentityAttemptCancelRequest;
+	}
+});
+Object.defineProperty(exports, "NativeIdentityAttemptCancelResponse", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentityAttemptCancelResponse;
+	}
+});
+Object.defineProperty(exports, "NativeIdentityEmailStartRequest", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentityEmailStartRequest;
+	}
+});
+Object.defineProperty(exports, "NativeIdentityEmailStartResponse", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentityEmailStartResponse;
+	}
+});
+Object.defineProperty(exports, "NativeIdentityEmailVerifyRequest", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentityEmailVerifyRequest;
+	}
+});
+Object.defineProperty(exports, "NativeIdentityEmailVerifyResponse", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentityEmailVerifyResponse;
+	}
+});
+Object.defineProperty(exports, "NativeIdentityPasswordFinishRequest", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentityPasswordFinishRequest;
+	}
+});
+Object.defineProperty(exports, "NativeIdentityPasswordResetFinishRequest", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentityPasswordResetFinishRequest;
+	}
+});
+Object.defineProperty(exports, "NativeIdentityPasswordResetFinishResponse", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentityPasswordResetFinishResponse;
+	}
+});
+Object.defineProperty(exports, "NativeIdentityPasswordResetRequest", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentityPasswordResetRequest;
+	}
+});
+Object.defineProperty(exports, "NativeIdentityPasswordResetResponse", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentityPasswordResetResponse;
+	}
+});
+Object.defineProperty(exports, "NativeIdentityPasswordResetVerifyRequest", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentityPasswordResetVerifyRequest;
+	}
+});
+Object.defineProperty(exports, "NativeIdentityPasswordResetVerifyResponse", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentityPasswordResetVerifyResponse;
+	}
+});
+Object.defineProperty(exports, "NativeIdentityPasswordStartRequest", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentityPasswordStartRequest;
+	}
+});
+Object.defineProperty(exports, "NativeIdentityPasswordStartResponse", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentityPasswordStartResponse;
+	}
+});
+Object.defineProperty(exports, "NativeIdentityRecoveryCodeRequest", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentityRecoveryCodeRequest;
+	}
+});
+Object.defineProperty(exports, "NativeIdentityRecoveryResponse", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentityRecoveryResponse;
+	}
+});
+Object.defineProperty(exports, "NativeIdentitySessionResponse", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentitySessionResponse;
+	}
+});
+Object.defineProperty(exports, "NativeIdentitySignupFinishResponse", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentitySignupFinishResponse;
+	}
+});
+Object.defineProperty(exports, "NativeIdentitySignupPasskeyFinishRequest", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentitySignupPasskeyFinishRequest;
+	}
+});
+Object.defineProperty(exports, "NativeIdentitySignupPasskeyOptionsRequest", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentitySignupPasskeyOptionsRequest;
+	}
+});
+Object.defineProperty(exports, "NativeIdentitySignupPasskeyOptionsResponse", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentitySignupPasskeyOptionsResponse;
+	}
+});
+Object.defineProperty(exports, "NativeIdentitySignupPasswordFinishRequest", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentitySignupPasswordFinishRequest;
+	}
+});
+Object.defineProperty(exports, "NativeIdentitySignupUsernameRequest", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentitySignupUsernameRequest;
+	}
+});
+Object.defineProperty(exports, "NativeIdentitySignupUsernameResponse", {
+	enumerable: true,
+	get: function() {
+		return NativeIdentitySignupUsernameResponse;
+	}
+});
+Object.defineProperty(exports, "NativeNodeClaimFinishRequest", {
+	enumerable: true,
+	get: function() {
+		return NativeNodeClaimFinishRequest;
+	}
+});
+Object.defineProperty(exports, "NativeNodeClaimFinishResponse", {
+	enumerable: true,
+	get: function() {
+		return NativeNodeClaimFinishResponse;
+	}
+});
+Object.defineProperty(exports, "NativeNodeClaimStartRequest", {
+	enumerable: true,
+	get: function() {
+		return NativeNodeClaimStartRequest;
+	}
+});
+Object.defineProperty(exports, "NativeNodeClaimStartResponse", {
+	enumerable: true,
+	get: function() {
+		return NativeNodeClaimStartResponse;
+	}
+});
+Object.defineProperty(exports, "NodeE2eeAdmissionPolicy", {
+	enumerable: true,
+	get: function() {
+		return NodeE2eeAdmissionPolicy;
+	}
+});
+Object.defineProperty(exports, "NonNegativeInt", {
+	enumerable: true,
+	get: function() {
+		return NonNegativeInt;
+	}
+});
+Object.defineProperty(exports, "ORCHESTRATION_WS_METHODS", {
+	enumerable: true,
+	get: function() {
+		return ORCHESTRATION_WS_METHODS;
+	}
+});
+Object.defineProperty(exports, "OpenCodeSettings", {
+	enumerable: true,
+	get: function() {
+		return OpenCodeSettings;
+	}
+});
+Object.defineProperty(exports, "OpenError", {
+	enumerable: true,
+	get: function() {
+		return OpenError;
+	}
+});
+Object.defineProperty(exports, "OpinionatedPluginError", {
+	enumerable: true,
+	get: function() {
+		return OpinionatedPluginError;
+	}
+});
+Object.defineProperty(exports, "OrchestrationActorKind", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationActorKind;
+	}
+});
+Object.defineProperty(exports, "OrchestrationAggregateKind", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationAggregateKind;
+	}
+});
+Object.defineProperty(exports, "OrchestrationCheckpointFile", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationCheckpointFile;
+	}
+});
+Object.defineProperty(exports, "OrchestrationCheckpointStatus", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationCheckpointStatus;
+	}
+});
+Object.defineProperty(exports, "OrchestrationCheckpointSummary", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationCheckpointSummary;
+	}
+});
+Object.defineProperty(exports, "OrchestrationCommand", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationCommand;
+	}
+});
+Object.defineProperty(exports, "OrchestrationCommandReceiptStatus", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationCommandReceiptStatus;
+	}
+});
+Object.defineProperty(exports, "OrchestrationDispatchCommandError", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationDispatchCommandError;
+	}
+});
+Object.defineProperty(exports, "OrchestrationEvent", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationEvent;
+	}
+});
+Object.defineProperty(exports, "OrchestrationEventMetadata", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationEventMetadata;
+	}
+});
+Object.defineProperty(exports, "OrchestrationEventType", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationEventType;
+	}
+});
+Object.defineProperty(exports, "OrchestrationGetFullThreadDiffError", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationGetFullThreadDiffError;
+	}
+});
+Object.defineProperty(exports, "OrchestrationGetSnapshotError", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationGetSnapshotError;
+	}
+});
+Object.defineProperty(exports, "OrchestrationGetTaskOutputError", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationGetTaskOutputError;
+	}
+});
+Object.defineProperty(exports, "OrchestrationGetTurnDiffError", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationGetTurnDiffError;
+	}
+});
+Object.defineProperty(exports, "OrchestrationGetTurnDiffResult", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationGetTurnDiffResult;
+	}
+});
+Object.defineProperty(exports, "OrchestrationGetWorkflowScriptError", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationGetWorkflowScriptError;
+	}
+});
+Object.defineProperty(exports, "OrchestrationMessage", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationMessage;
+	}
+});
+Object.defineProperty(exports, "OrchestrationMessageRole", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationMessageRole;
+	}
+});
+Object.defineProperty(exports, "OrchestrationProposedPlanId", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationProposedPlanId;
+	}
+});
+Object.defineProperty(exports, "OrchestrationReadModel", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationReadModel;
+	}
+});
+Object.defineProperty(exports, "OrchestrationReplayEventsError", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationReplayEventsError;
+	}
+});
+Object.defineProperty(exports, "OrchestrationSession", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationSession;
+	}
+});
+Object.defineProperty(exports, "OrchestrationSessionStatus", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationSessionStatus;
+	}
+});
+Object.defineProperty(exports, "OrchestrationShellSnapshot", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationShellSnapshot;
+	}
+});
+Object.defineProperty(exports, "OrchestrationStopBackgroundTaskError", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationStopBackgroundTaskError;
+	}
+});
+Object.defineProperty(exports, "OrchestrationThread", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationThread;
+	}
+});
+Object.defineProperty(exports, "OrchestrationThreadActivity", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationThreadActivity;
+	}
+});
+Object.defineProperty(exports, "OrchestrationThreadActivityTone", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationThreadActivityTone;
+	}
+});
+Object.defineProperty(exports, "OrchestrationThreadHistoryCursor", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationThreadHistoryCursor;
+	}
+});
+Object.defineProperty(exports, "OrchestrationThreadHistoryError", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationThreadHistoryError;
+	}
+});
+Object.defineProperty(exports, "OrchestrationWorktreeShell", {
+	enumerable: true,
+	get: function() {
+		return OrchestrationWorktreeShell;
+	}
+});
+Object.defineProperty(exports, "PASSWORD_LOGIN_FINISH_PATH", {
+	enumerable: true,
+	get: function() {
+		return PASSWORD_LOGIN_FINISH_PATH;
+	}
+});
+Object.defineProperty(exports, "PASSWORD_LOGIN_START_PATH", {
+	enumerable: true,
+	get: function() {
+		return PASSWORD_LOGIN_START_PATH;
+	}
+});
+Object.defineProperty(exports, "PASSWORD_RESET_FINISH_PATH", {
+	enumerable: true,
+	get: function() {
+		return PASSWORD_RESET_FINISH_PATH;
+	}
+});
+Object.defineProperty(exports, "PASSWORD_RESET_REQUEST_PATH", {
+	enumerable: true,
+	get: function() {
+		return PASSWORD_RESET_REQUEST_PATH;
+	}
+});
+Object.defineProperty(exports, "PASSWORD_RESET_VERIFY_PATH", {
+	enumerable: true,
+	get: function() {
+		return PASSWORD_RESET_VERIFY_PATH;
+	}
+});
+Object.defineProperty(exports, "PROJECT_ICON_MAX_BYTES", {
+	enumerable: true,
+	get: function() {
+		return PROJECT_ICON_MAX_BYTES;
+	}
+});
+Object.defineProperty(exports, "PROJECT_READ_FILE_BINARY_MAX_BYTES", {
 	enumerable: true,
 	get: function() {
 		return PROJECT_READ_FILE_BINARY_MAX_BYTES;
@@ -16748,6 +17473,96 @@ Object.defineProperty(exports, "PROVIDER_SEND_TURN_MAX_INPUT_CHARS", {
 		return PROVIDER_SEND_TURN_MAX_INPUT_CHARS;
 	}
 });
+Object.defineProperty(exports, "PUBLIC_SIGNUP_CONFIG_PATH", {
+	enumerable: true,
+	get: function() {
+		return PUBLIC_SIGNUP_CONFIG_PATH;
+	}
+});
+Object.defineProperty(exports, "PUBLIC_SIGNUP_PASSKEY_FINISH_PATH", {
+	enumerable: true,
+	get: function() {
+		return PUBLIC_SIGNUP_PASSKEY_FINISH_PATH;
+	}
+});
+Object.defineProperty(exports, "PUBLIC_SIGNUP_PASSKEY_OPTIONS_PATH", {
+	enumerable: true,
+	get: function() {
+		return PUBLIC_SIGNUP_PASSKEY_OPTIONS_PATH;
+	}
+});
+Object.defineProperty(exports, "PUBLIC_SIGNUP_PASSWORD_FINISH_PATH", {
+	enumerable: true,
+	get: function() {
+		return PUBLIC_SIGNUP_PASSWORD_FINISH_PATH;
+	}
+});
+Object.defineProperty(exports, "PUBLIC_SIGNUP_START_PATH", {
+	enumerable: true,
+	get: function() {
+		return PUBLIC_SIGNUP_START_PATH;
+	}
+});
+Object.defineProperty(exports, "PUBLIC_SIGNUP_VERIFY_PATH", {
+	enumerable: true,
+	get: function() {
+		return PUBLIC_SIGNUP_VERIFY_PATH;
+	}
+});
+Object.defineProperty(exports, "PasswordLoginFinishRequest", {
+	enumerable: true,
+	get: function() {
+		return PasswordLoginFinishRequest;
+	}
+});
+Object.defineProperty(exports, "PasswordLoginStartRequest", {
+	enumerable: true,
+	get: function() {
+		return PasswordLoginStartRequest;
+	}
+});
+Object.defineProperty(exports, "PasswordLoginStartResponse", {
+	enumerable: true,
+	get: function() {
+		return PasswordLoginStartResponse;
+	}
+});
+Object.defineProperty(exports, "PasswordResetFinishRequest", {
+	enumerable: true,
+	get: function() {
+		return PasswordResetFinishRequest;
+	}
+});
+Object.defineProperty(exports, "PasswordResetFinishResponse", {
+	enumerable: true,
+	get: function() {
+		return PasswordResetFinishResponse;
+	}
+});
+Object.defineProperty(exports, "PasswordResetRequest", {
+	enumerable: true,
+	get: function() {
+		return PasswordResetRequest;
+	}
+});
+Object.defineProperty(exports, "PasswordResetRequestResponse", {
+	enumerable: true,
+	get: function() {
+		return PasswordResetRequestResponse;
+	}
+});
+Object.defineProperty(exports, "PasswordResetVerifyRequest", {
+	enumerable: true,
+	get: function() {
+		return PasswordResetVerifyRequest;
+	}
+});
+Object.defineProperty(exports, "PasswordResetVerifyResponse", {
+	enumerable: true,
+	get: function() {
+		return PasswordResetVerifyResponse;
+	}
+});
 Object.defineProperty(exports, "PositiveInt", {
 	enumerable: true,
 	get: function() {
@@ -16934,6 +17749,66 @@ Object.defineProperty(exports, "ProviderStopSessionInput", {
 		return ProviderStopSessionInput;
 	}
 });
+Object.defineProperty(exports, "PublicSignupConfigResponse", {
+	enumerable: true,
+	get: function() {
+		return PublicSignupConfigResponse;
+	}
+});
+Object.defineProperty(exports, "PublicSignupFinishResponse", {
+	enumerable: true,
+	get: function() {
+		return PublicSignupFinishResponse;
+	}
+});
+Object.defineProperty(exports, "PublicSignupPasskeyFinishRequest", {
+	enumerable: true,
+	get: function() {
+		return PublicSignupPasskeyFinishRequest;
+	}
+});
+Object.defineProperty(exports, "PublicSignupPasskeyOptionsRequest", {
+	enumerable: true,
+	get: function() {
+		return PublicSignupPasskeyOptionsRequest;
+	}
+});
+Object.defineProperty(exports, "PublicSignupPasskeyOptionsResponse", {
+	enumerable: true,
+	get: function() {
+		return PublicSignupPasskeyOptionsResponse;
+	}
+});
+Object.defineProperty(exports, "PublicSignupPasswordFinishRequest", {
+	enumerable: true,
+	get: function() {
+		return PublicSignupPasswordFinishRequest;
+	}
+});
+Object.defineProperty(exports, "PublicSignupStartRequest", {
+	enumerable: true,
+	get: function() {
+		return PublicSignupStartRequest;
+	}
+});
+Object.defineProperty(exports, "PublicSignupStartResponse", {
+	enumerable: true,
+	get: function() {
+		return PublicSignupStartResponse;
+	}
+});
+Object.defineProperty(exports, "PublicSignupVerifyRequest", {
+	enumerable: true,
+	get: function() {
+		return PublicSignupVerifyRequest;
+	}
+});
+Object.defineProperty(exports, "PublicSignupVerifyResponse", {
+	enumerable: true,
+	get: function() {
+		return PublicSignupVerifyResponse;
+	}
+});
 Object.defineProperty(exports, "PullRequestState", {
 	enumerable: true,
 	get: function() {
@@ -17012,6 +17887,12 @@ Object.defineProperty(exports, "RelayFrame", {
 		return RelayFrame;
 	}
 });
+Object.defineProperty(exports, "RelayNodeId", {
+	enumerable: true,
+	get: function() {
+		return RelayNodeId;
+	}
+});
 Object.defineProperty(exports, "RelayProtocolVersion", {
 	enumerable: true,
 	get: function() {