very-happy-cli 0.2.159 → 0.2.160

package/dist/attachmentLimits-CzVrqgLR.cjs

@@ -0,0 +1,354 @@
+'use strict';
+
+var z = require('zod');
+var index = require('./index-DA7yINuk.cjs');
+
+z.z.object({
+  teamsVersion: z.z.number().int().positive().optional(),
+  teamLaunchVersion: z.z.number().int().positive().optional(),
+  host: z.z.string(),
+  platform: z.z.string(),
+  happyCliVersion: z.z.string(),
+  homeDir: z.z.string(),
+  happyHomeDir: z.z.string(),
+  happyLibDir: z.z.string(),
+  cliAvailability: z.z.object({
+    claude: z.z.boolean(),
+    codex: z.z.boolean(),
+    gemini: z.z.boolean(),
+    openclaw: z.z.boolean(),
+    pi: z.z.boolean().optional(),
+    // absent on daemons that predate the pi runner
+    detectedAt: z.z.number()
+  }).optional(),
+  resumeSupport: z.z.object({
+    rpcAvailable: z.z.boolean(),
+    requiresSameMachine: z.z.boolean(),
+    requiresHappyAgentAuth: z.z.boolean(),
+    happyAgentAuthenticated: z.z.boolean(),
+    detectedAt: z.z.number()
+  }).optional()
+});
+const ClaudeAuthStateSchema = z.z.object({
+  probeVersion: z.z.number(),
+  daemonPid: z.z.number(),
+  status: z.z.union([z.z.enum(["ok", "not-logged-in", "unknown", "error", "claude-missing"]), z.z.string()]),
+  authMethod: z.z.string().optional(),
+  subscriptionType: z.z.string().optional(),
+  diagnosis: z.z.string().optional(),
+  detail: z.z.string().optional(),
+  repairable: z.z.string().optional(),
+  context: z.z.object({
+    platform: z.z.string(),
+    lineage: z.z.string(),
+    credentialStore: z.z.string()
+  }),
+  checkedAt: z.z.number()
+});
+const CliUpdateStateSchema = z.z.object({
+  currentVersion: z.z.string(),
+  recommendedVersion: z.z.string().nullable(),
+  minimumVersion: z.z.string().nullable(),
+  status: z.z.enum(["current", "available", "required"]),
+  /** B-351/B-503: the version this machine may install by itself, as decided
+   *  by the relay (exact pin or the promoted `latest`); null means no
+   *  unattended install. */
+  autoUpdateVersion: z.z.string().nullable().optional(),
+  retrySupported: z.z.boolean().optional(),
+  manualUpdateSupported: z.z.boolean().optional(),
+  checkedAt: z.z.number(),
+  /**
+   * B-321: a new bundle is on disk but refused to run, so the daemon is still
+   * serving the old code. Present only while that is true. Optional and additive:
+   * old web builds ignore it, old daemons never send it (iron rule 4).
+   */
+  handoverHold: z.z.object({ reason: z.z.string(), at: z.z.number() }).nullable().optional(),
+  /** B-327: the last thing the machine's auto-update did, or why it did nothing. */
+  autoUpdate: z.z.object({
+    source: z.z.string().optional(),
+    state: z.z.union([z.z.enum(["installing", "installed", "failed", "skipped"]), z.z.string()]),
+    version: z.z.string().nullable(),
+    detail: z.z.string().optional(),
+    at: z.z.number()
+  }).nullable().optional()
+});
+const WebTerminalListItemSchema = z.z.object({
+  id: z.z.string(),
+  title: z.z.string().optional(),
+  /** New daemons always send an array (including []); absence identifies an
+   * old daemon that cannot persist terminal tags. */
+  tags: z.z.array(z.z.string()).optional(),
+  cwd: z.z.string().optional(),
+  createdAt: z.z.number().optional(),
+  activityAt: z.z.number().optional(),
+  agentState: z.z.enum(["working", "needs_input", "idle", "shell"]).optional(),
+  agentKind: z.z.string().optional(),
+  agentObservedAt: z.z.number().optional(),
+  /** B-105: mirror session of the claude running inside the terminal. */
+  mirrorSessionId: z.z.string().optional(),
+  /** B-150: auto-restored after a restart (ms epoch) — the directory and the
+   *  conversation carried over, the processes did not. Cleared once opened. */
+  restoredAt: z.z.number().optional(),
+  /** B-265: @vh_title_manual is set (user renamed it). */
+  manual: z.z.boolean().optional(),
+  /** B-273: opened attached to the user's tmux session of this name. */
+  attachTmux: z.z.string().optional(),
+  /** B-486: direct-pty shell (no tmux) — not restorable after a daemon restart. */
+  direct: z.z.boolean().optional()
+});
+const ClosedTerminalRecordSchema = z.z.object({
+  id: z.z.string(),
+  title: z.z.string().optional(),
+  cwd: z.z.string().optional(),
+  /** B-105: shadow mirror session — structured history of the claude that ran
+   *  inside the terminal, still reachable after the terminal is gone. */
+  mirrorSessionId: z.z.string().optional(),
+  /** B-149: claude conversation id, for one-click resume of a dead terminal. */
+  claudeSessionId: z.z.string().optional(),
+  /** B-149: 'daemon-gap' = died while no daemon was watching (restart/reboot);
+   *  absent means an ordinary observed close. */
+  reason: z.z.enum(["closed", "daemon-gap"]).optional(),
+  /** B-265: tags + manual-rename flag at close time (restored verbatim). */
+  tags: z.z.array(z.z.string()).optional(),
+  manual: z.z.boolean().optional(),
+  /** B-273: attached user tmux session name — restore re-attaches. */
+  attachTmux: z.z.string().optional(),
+  closedAt: z.z.number()
+});
+z.z.object({
+  agentVersions: index.AgentVersionsSchema.optional(),
+  agentVersionEpoch: z.z.number().optional(),
+  status: z.z.union([
+    z.z.enum(["running", "shutting-down"]),
+    z.z.string()
+    // Forward compatibility
+  ]),
+  pid: z.z.number().optional(),
+  httpPort: z.z.number().optional(),
+  startedAt: z.z.number().optional(),
+  shutdownRequestedAt: z.z.number().optional(),
+  shutdownSource: z.z.union([
+    z.z.enum(["mobile-app", "cli", "os-signal", "unknown"]),
+    z.z.string()
+    // Forward compatibility
+  ]).optional(),
+  /**
+   * Push channel for this machine's web-terminal list (see
+   * terminal/webTerminal.ts list tracking). The daemon rewrites this field
+   * whenever the tracked list signature changes; the server persists it with
+   * the rest of daemonState and broadcasts `update-machine`, so every web
+   * client gets the terminal list/titles/agent states pushed instead of
+   * polling `list-terminals` — and an OFFLINE machine's last list stays
+   * readable from the server's persisted copy.
+   *
+   * Trust rule for consumers: the snapshot is only authoritative when
+   * `updatedAt >= startedAt` — i.e. it was written by the CURRENT daemon run.
+   * A downgraded daemon spreads the stale field forward (`{...state}`) but
+   * bumps `startedAt` on connect without restamping `updatedAt`, which is
+   * exactly what makes clients fall back to polling. Old clients ignore the
+   * field entirely.
+   */
+  webTerminals: z.z.object({
+    updatedAt: z.z.number(),
+    terminals: z.z.array(WebTerminalListItemSchema)
+  }).optional(),
+  /**
+   * Recently closed terminals (B-084), newest first, capped at 20 — written
+   * alongside webTerminals in the same daemonState pushes (every close also
+   * changes the live list, so the two always travel together). Old clients
+   * ignore the field; old daemons never write it (web renders nothing).
+   */
+  closedTerminals: z.z.array(ClosedTerminalRecordSchema).optional(),
+  /**
+   * B-265 capability flag: this daemon answers `restore-terminal`. Same trust
+   * rule as webTerminals — only `detectedAt >= startedAt` counts, because a
+   * downgraded daemon spreads the stale field forward on connect.
+   */
+  terminalRestore: z.z.object({
+    rpcAvailable: z.z.boolean(),
+    detectedAt: z.z.number()
+  }).optional(),
+  /**
+   * B-273 capability flag: this daemon answers `list-tmux-sessions` and
+   * honours `open-terminal.attachTmux`. Same trust rule (`detectedAt >=
+   * startedAt`). Stamped unconditionally — on a machine without tmux the
+   * RPC just answers an empty list.
+   */
+  tmuxSessions: z.z.object({
+    rpcAvailable: z.z.boolean(),
+    detectedAt: z.z.number(),
+    /** B-282: `kill-terminal` honours `alsoAttached`. */
+    killAttached: z.z.boolean().optional()
+  }).optional(),
+  /**
+   * B-290 capability flag: this daemon answers `claude-list-history` (import a
+   * Claude Code conversation that was never started through very-happy).
+   * Same trust rule (`detectedAt >= startedAt`).
+   */
+  claudeHistory: z.z.object({
+    rpcAvailable: z.z.boolean(),
+    detectedAt: z.z.number()
+  }).optional(),
+  /**
+   * B-464 capability flag: this daemon answers `codex-list-history` /
+   * `codex-import-session` (import a Codex CLI / desktop thread that was never
+   * started through very-happy). Same trust rule (`detectedAt >= startedAt`).
+   */
+  codexHistory: z.z.object({
+    rpcAvailable: z.z.boolean(),
+    detectedAt: z.z.number()
+  }).optional(),
+  /**
+   * B-486: can web terminals on this machine be durable? `tmuxAvailable:
+   * false` ⇒ every new terminal is a direct shell that dies with the daemon,
+   * so the web tells the user to install tmux. Same trust rule
+   * (`detectedAt >= startedAt`); old webs ignore it.
+   */
+  terminalHost: z.z.object({
+    tmuxAvailable: z.z.boolean(),
+    tmuxVersion: z.z.string().optional(),
+    detectedAt: z.z.number()
+  }).optional(),
+  /** Relay-owned CLI compatibility/update policy last checked by this daemon. */
+  cliUpdate: CliUpdateStateSchema.optional(),
+  /**
+   * B-276: result of the daemon-context Claude auth preflight (spec
+   * 2026-09-claude-auth-preflight). Trust rule for consumers:
+   * `claudeAuth.daemonPid === daemonState.pid` — daemonState survives daemon
+   * restarts (the server returns the existing row and connect spreads it
+   * forward), so a downgraded daemon carries this field along unchanged.
+   */
+  claudeAuth: ClaudeAuthStateSchema.optional()
+});
+const MessageMetaSchema = z.z.object({
+  sentFrom: z.z.string().optional(),
+  // Source identifier
+  permissionMode: z.z.enum(["default", "acceptEdits", "bypassPermissions", "plan", "read-only", "safe-yolo", "yolo"]).optional(),
+  // Permission mode for this message
+  model: z.z.string().nullable().optional(),
+  // Model name for this message (null = reset)
+  fallbackModel: z.z.string().nullable().optional(),
+  // Fallback model for this message (null = reset)
+  customSystemPrompt: z.z.string().nullable().optional(),
+  // Custom system prompt for this message (null = reset)
+  appendSystemPrompt: z.z.string().nullable().optional(),
+  // Append to system prompt for this message (null = reset)
+  allowedTools: z.z.array(z.z.string()).nullable().optional(),
+  // Allowed tools for this message (null = reset)
+  disallowedTools: z.z.array(z.z.string()).nullable().optional(),
+  // Disallowed tools for this message (null = reset)
+  /**
+   * Thinking depth for this message (null = reset to the machine default).
+   * Deliberately a plain string, not an enum: an unknown value must not make
+   * zod reject the WHOLE message the way the `dontAsk` permission enum did
+   * (AGENTS 铁律 14). runClaude validates it against its own allow-list and
+   * ignores anything else. Absent here until 0.2.105, which is why every
+   * released CLI silently dropped the web's effort selection.
+   */
+  effort: z.z.string().nullable().optional(),
+  /** Omitted/queue waits for the current turn; steer targets the live turn. */
+  delivery: z.z.enum(["queue", "steer"]).optional()
+});
+z.z.object({
+  session: z.z.object({
+    id: z.z.string(),
+    tag: z.z.string(),
+    seq: z.z.number(),
+    createdAt: z.z.number(),
+    updatedAt: z.z.number(),
+    metadata: z.z.string(),
+    metadataVersion: z.z.number(),
+    agentState: z.z.string().nullable(),
+    agentStateVersion: z.z.number()
+  })
+});
+const UserMessageSchema = z.z.object({
+  role: z.z.literal("user"),
+  content: z.z.object({
+    type: z.z.literal("text"),
+    text: z.z.string()
+  }),
+  localKey: z.z.string().optional(),
+  // Mobile messages include this
+  meta: MessageMetaSchema.optional()
+});
+const FileEventMessageSchema = z.z.object({
+  role: z.z.literal("session"),
+  content: z.z.object({
+    type: z.z.literal("session"),
+    data: z.z.object({
+      id: z.z.string(),
+      time: z.z.number(),
+      role: z.z.literal("user"),
+      ev: z.z.object({
+        t: z.z.literal("file"),
+        ref: z.z.string(),
+        name: z.z.string(),
+        size: z.z.number(),
+        mimeType: z.z.string().optional(),
+        image: z.z.object({
+          width: z.z.number(),
+          height: z.z.number(),
+          // Optional — native iOS picker has no Canvas to compute thumbhash.
+          // App-side schema relaxed this in the same commit; keeping CLI in
+          // sync so the file event isn't silently rejected by Zod and the
+          // attachment never reaches Claude.
+          thumbhash: z.z.string().optional()
+        }).optional()
+      })
+    })
+  })
+});
+const AgentMessageSchema = z.z.object({
+  role: z.z.literal("agent"),
+  content: z.z.object({
+    type: z.z.literal("output"),
+    data: z.z.any()
+  }),
+  meta: MessageMetaSchema.optional()
+});
+z.z.union([UserMessageSchema, AgentMessageSchema]);
+
+class AsyncLock {
+  permits = 1;
+  promiseResolverQueue = [];
+  async inLock(func) {
+    try {
+      await this.lock();
+      return await func();
+    } finally {
+      this.unlock();
+    }
+  }
+  async lock() {
+    if (this.permits > 0) {
+      this.permits = this.permits - 1;
+      return;
+    }
+    await new Promise((resolve) => this.promiseResolverQueue.push(resolve));
+  }
+  unlock() {
+    this.permits += 1;
+    if (this.permits > 1 && this.promiseResolverQueue.length > 0) {
+      throw new Error("this.permits should never be > 0 when there is someone waiting.");
+    } else if (this.permits === 1 && this.promiseResolverQueue.length > 0) {
+      this.permits -= 1;
+      const nextResolver = this.promiseResolverQueue.shift();
+      if (nextResolver) {
+        setTimeout(() => {
+          nextResolver(true);
+        }, 0);
+      }
+    }
+  }
+}
+
+const MAX_CHAT_ATTACHMENT_SOURCE_BYTES = 50 * 1024 * 1024;
+const CHAT_ATTACHMENT_ENCRYPTION_OVERHEAD_BYTES = 40;
+const MAX_CHAT_ATTACHMENT_ENCRYPTED_BYTES = MAX_CHAT_ATTACHMENT_SOURCE_BYTES + CHAT_ATTACHMENT_ENCRYPTION_OVERHEAD_BYTES;
+
+exports.AsyncLock = AsyncLock;
+exports.FileEventMessageSchema = FileEventMessageSchema;
+exports.MAX_CHAT_ATTACHMENT_ENCRYPTED_BYTES = MAX_CHAT_ATTACHMENT_ENCRYPTED_BYTES;
+exports.MAX_CHAT_ATTACHMENT_SOURCE_BYTES = MAX_CHAT_ATTACHMENT_SOURCE_BYTES;
+exports.UserMessageSchema = UserMessageSchema;

package/dist/attachmentLimits-yba1uHFO.mjs

@@ -0,0 +1,348 @@
+import { z } from 'zod';
+import { k as AgentVersionsSchema } from './index-qdS1friN.mjs';
+
+z.object({
+  teamsVersion: z.number().int().positive().optional(),
+  teamLaunchVersion: z.number().int().positive().optional(),
+  host: z.string(),
+  platform: z.string(),
+  happyCliVersion: z.string(),
+  homeDir: z.string(),
+  happyHomeDir: z.string(),
+  happyLibDir: z.string(),
+  cliAvailability: z.object({
+    claude: z.boolean(),
+    codex: z.boolean(),
+    gemini: z.boolean(),
+    openclaw: z.boolean(),
+    pi: z.boolean().optional(),
+    // absent on daemons that predate the pi runner
+    detectedAt: z.number()
+  }).optional(),
+  resumeSupport: z.object({
+    rpcAvailable: z.boolean(),
+    requiresSameMachine: z.boolean(),
+    requiresHappyAgentAuth: z.boolean(),
+    happyAgentAuthenticated: z.boolean(),
+    detectedAt: z.number()
+  }).optional()
+});
+const ClaudeAuthStateSchema = z.object({
+  probeVersion: z.number(),
+  daemonPid: z.number(),
+  status: z.union([z.enum(["ok", "not-logged-in", "unknown", "error", "claude-missing"]), z.string()]),
+  authMethod: z.string().optional(),
+  subscriptionType: z.string().optional(),
+  diagnosis: z.string().optional(),
+  detail: z.string().optional(),
+  repairable: z.string().optional(),
+  context: z.object({
+    platform: z.string(),
+    lineage: z.string(),
+    credentialStore: z.string()
+  }),
+  checkedAt: z.number()
+});
+const CliUpdateStateSchema = z.object({
+  currentVersion: z.string(),
+  recommendedVersion: z.string().nullable(),
+  minimumVersion: z.string().nullable(),
+  status: z.enum(["current", "available", "required"]),
+  /** B-351/B-503: the version this machine may install by itself, as decided
+   *  by the relay (exact pin or the promoted `latest`); null means no
+   *  unattended install. */
+  autoUpdateVersion: z.string().nullable().optional(),
+  retrySupported: z.boolean().optional(),
+  manualUpdateSupported: z.boolean().optional(),
+  checkedAt: z.number(),
+  /**
+   * B-321: a new bundle is on disk but refused to run, so the daemon is still
+   * serving the old code. Present only while that is true. Optional and additive:
+   * old web builds ignore it, old daemons never send it (iron rule 4).
+   */
+  handoverHold: z.object({ reason: z.string(), at: z.number() }).nullable().optional(),
+  /** B-327: the last thing the machine's auto-update did, or why it did nothing. */
+  autoUpdate: z.object({
+    source: z.string().optional(),
+    state: z.union([z.enum(["installing", "installed", "failed", "skipped"]), z.string()]),
+    version: z.string().nullable(),
+    detail: z.string().optional(),
+    at: z.number()
+  }).nullable().optional()
+});
+const WebTerminalListItemSchema = z.object({
+  id: z.string(),
+  title: z.string().optional(),
+  /** New daemons always send an array (including []); absence identifies an
+   * old daemon that cannot persist terminal tags. */
+  tags: z.array(z.string()).optional(),
+  cwd: z.string().optional(),
+  createdAt: z.number().optional(),
+  activityAt: z.number().optional(),
+  agentState: z.enum(["working", "needs_input", "idle", "shell"]).optional(),
+  agentKind: z.string().optional(),
+  agentObservedAt: z.number().optional(),
+  /** B-105: mirror session of the claude running inside the terminal. */
+  mirrorSessionId: z.string().optional(),
+  /** B-150: auto-restored after a restart (ms epoch) — the directory and the
+   *  conversation carried over, the processes did not. Cleared once opened. */
+  restoredAt: z.number().optional(),
+  /** B-265: @vh_title_manual is set (user renamed it). */
+  manual: z.boolean().optional(),
+  /** B-273: opened attached to the user's tmux session of this name. */
+  attachTmux: z.string().optional(),
+  /** B-486: direct-pty shell (no tmux) — not restorable after a daemon restart. */
+  direct: z.boolean().optional()
+});
+const ClosedTerminalRecordSchema = z.object({
+  id: z.string(),
+  title: z.string().optional(),
+  cwd: z.string().optional(),
+  /** B-105: shadow mirror session — structured history of the claude that ran
+   *  inside the terminal, still reachable after the terminal is gone. */
+  mirrorSessionId: z.string().optional(),
+  /** B-149: claude conversation id, for one-click resume of a dead terminal. */
+  claudeSessionId: z.string().optional(),
+  /** B-149: 'daemon-gap' = died while no daemon was watching (restart/reboot);
+   *  absent means an ordinary observed close. */
+  reason: z.enum(["closed", "daemon-gap"]).optional(),
+  /** B-265: tags + manual-rename flag at close time (restored verbatim). */
+  tags: z.array(z.string()).optional(),
+  manual: z.boolean().optional(),
+  /** B-273: attached user tmux session name — restore re-attaches. */
+  attachTmux: z.string().optional(),
+  closedAt: z.number()
+});
+z.object({
+  agentVersions: AgentVersionsSchema.optional(),
+  agentVersionEpoch: z.number().optional(),
+  status: z.union([
+    z.enum(["running", "shutting-down"]),
+    z.string()
+    // Forward compatibility
+  ]),
+  pid: z.number().optional(),
+  httpPort: z.number().optional(),
+  startedAt: z.number().optional(),
+  shutdownRequestedAt: z.number().optional(),
+  shutdownSource: z.union([
+    z.enum(["mobile-app", "cli", "os-signal", "unknown"]),
+    z.string()
+    // Forward compatibility
+  ]).optional(),
+  /**
+   * Push channel for this machine's web-terminal list (see
+   * terminal/webTerminal.ts list tracking). The daemon rewrites this field
+   * whenever the tracked list signature changes; the server persists it with
+   * the rest of daemonState and broadcasts `update-machine`, so every web
+   * client gets the terminal list/titles/agent states pushed instead of
+   * polling `list-terminals` — and an OFFLINE machine's last list stays
+   * readable from the server's persisted copy.
+   *
+   * Trust rule for consumers: the snapshot is only authoritative when
+   * `updatedAt >= startedAt` — i.e. it was written by the CURRENT daemon run.
+   * A downgraded daemon spreads the stale field forward (`{...state}`) but
+   * bumps `startedAt` on connect without restamping `updatedAt`, which is
+   * exactly what makes clients fall back to polling. Old clients ignore the
+   * field entirely.
+   */
+  webTerminals: z.object({
+    updatedAt: z.number(),
+    terminals: z.array(WebTerminalListItemSchema)
+  }).optional(),
+  /**
+   * Recently closed terminals (B-084), newest first, capped at 20 — written
+   * alongside webTerminals in the same daemonState pushes (every close also
+   * changes the live list, so the two always travel together). Old clients
+   * ignore the field; old daemons never write it (web renders nothing).
+   */
+  closedTerminals: z.array(ClosedTerminalRecordSchema).optional(),
+  /**
+   * B-265 capability flag: this daemon answers `restore-terminal`. Same trust
+   * rule as webTerminals — only `detectedAt >= startedAt` counts, because a
+   * downgraded daemon spreads the stale field forward on connect.
+   */
+  terminalRestore: z.object({
+    rpcAvailable: z.boolean(),
+    detectedAt: z.number()
+  }).optional(),
+  /**
+   * B-273 capability flag: this daemon answers `list-tmux-sessions` and
+   * honours `open-terminal.attachTmux`. Same trust rule (`detectedAt >=
+   * startedAt`). Stamped unconditionally — on a machine without tmux the
+   * RPC just answers an empty list.
+   */
+  tmuxSessions: z.object({
+    rpcAvailable: z.boolean(),
+    detectedAt: z.number(),
+    /** B-282: `kill-terminal` honours `alsoAttached`. */
+    killAttached: z.boolean().optional()
+  }).optional(),
+  /**
+   * B-290 capability flag: this daemon answers `claude-list-history` (import a
+   * Claude Code conversation that was never started through very-happy).
+   * Same trust rule (`detectedAt >= startedAt`).
+   */
+  claudeHistory: z.object({
+    rpcAvailable: z.boolean(),
+    detectedAt: z.number()
+  }).optional(),
+  /**
+   * B-464 capability flag: this daemon answers `codex-list-history` /
+   * `codex-import-session` (import a Codex CLI / desktop thread that was never
+   * started through very-happy). Same trust rule (`detectedAt >= startedAt`).
+   */
+  codexHistory: z.object({
+    rpcAvailable: z.boolean(),
+    detectedAt: z.number()
+  }).optional(),
+  /**
+   * B-486: can web terminals on this machine be durable? `tmuxAvailable:
+   * false` ⇒ every new terminal is a direct shell that dies with the daemon,
+   * so the web tells the user to install tmux. Same trust rule
+   * (`detectedAt >= startedAt`); old webs ignore it.
+   */
+  terminalHost: z.object({
+    tmuxAvailable: z.boolean(),
+    tmuxVersion: z.string().optional(),
+    detectedAt: z.number()
+  }).optional(),
+  /** Relay-owned CLI compatibility/update policy last checked by this daemon. */
+  cliUpdate: CliUpdateStateSchema.optional(),
+  /**
+   * B-276: result of the daemon-context Claude auth preflight (spec
+   * 2026-09-claude-auth-preflight). Trust rule for consumers:
+   * `claudeAuth.daemonPid === daemonState.pid` — daemonState survives daemon
+   * restarts (the server returns the existing row and connect spreads it
+   * forward), so a downgraded daemon carries this field along unchanged.
+   */
+  claudeAuth: ClaudeAuthStateSchema.optional()
+});
+const MessageMetaSchema = z.object({
+  sentFrom: z.string().optional(),
+  // Source identifier
+  permissionMode: z.enum(["default", "acceptEdits", "bypassPermissions", "plan", "read-only", "safe-yolo", "yolo"]).optional(),
+  // Permission mode for this message
+  model: z.string().nullable().optional(),
+  // Model name for this message (null = reset)
+  fallbackModel: z.string().nullable().optional(),
+  // Fallback model for this message (null = reset)
+  customSystemPrompt: z.string().nullable().optional(),
+  // Custom system prompt for this message (null = reset)
+  appendSystemPrompt: z.string().nullable().optional(),
+  // Append to system prompt for this message (null = reset)
+  allowedTools: z.array(z.string()).nullable().optional(),
+  // Allowed tools for this message (null = reset)
+  disallowedTools: z.array(z.string()).nullable().optional(),
+  // Disallowed tools for this message (null = reset)
+  /**
+   * Thinking depth for this message (null = reset to the machine default).
+   * Deliberately a plain string, not an enum: an unknown value must not make
+   * zod reject the WHOLE message the way the `dontAsk` permission enum did
+   * (AGENTS 铁律 14). runClaude validates it against its own allow-list and
+   * ignores anything else. Absent here until 0.2.105, which is why every
+   * released CLI silently dropped the web's effort selection.
+   */
+  effort: z.string().nullable().optional(),
+  /** Omitted/queue waits for the current turn; steer targets the live turn. */
+  delivery: z.enum(["queue", "steer"]).optional()
+});
+z.object({
+  session: z.object({
+    id: z.string(),
+    tag: z.string(),
+    seq: z.number(),
+    createdAt: z.number(),
+    updatedAt: z.number(),
+    metadata: z.string(),
+    metadataVersion: z.number(),
+    agentState: z.string().nullable(),
+    agentStateVersion: z.number()
+  })
+});
+const UserMessageSchema = z.object({
+  role: z.literal("user"),
+  content: z.object({
+    type: z.literal("text"),
+    text: z.string()
+  }),
+  localKey: z.string().optional(),
+  // Mobile messages include this
+  meta: MessageMetaSchema.optional()
+});
+const FileEventMessageSchema = z.object({
+  role: z.literal("session"),
+  content: z.object({
+    type: z.literal("session"),
+    data: z.object({
+      id: z.string(),
+      time: z.number(),
+      role: z.literal("user"),
+      ev: z.object({
+        t: z.literal("file"),
+        ref: z.string(),
+        name: z.string(),
+        size: z.number(),
+        mimeType: z.string().optional(),
+        image: z.object({
+          width: z.number(),
+          height: z.number(),
+          // Optional — native iOS picker has no Canvas to compute thumbhash.
+          // App-side schema relaxed this in the same commit; keeping CLI in
+          // sync so the file event isn't silently rejected by Zod and the
+          // attachment never reaches Claude.
+          thumbhash: z.string().optional()
+        }).optional()
+      })
+    })
+  })
+});
+const AgentMessageSchema = z.object({
+  role: z.literal("agent"),
+  content: z.object({
+    type: z.literal("output"),
+    data: z.any()
+  }),
+  meta: MessageMetaSchema.optional()
+});
+z.union([UserMessageSchema, AgentMessageSchema]);
+
+class AsyncLock {
+  permits = 1;
+  promiseResolverQueue = [];
+  async inLock(func) {
+    try {
+      await this.lock();
+      return await func();
+    } finally {
+      this.unlock();
+    }
+  }
+  async lock() {
+    if (this.permits > 0) {
+      this.permits = this.permits - 1;
+      return;
+    }
+    await new Promise((resolve) => this.promiseResolverQueue.push(resolve));
+  }
+  unlock() {
+    this.permits += 1;
+    if (this.permits > 1 && this.promiseResolverQueue.length > 0) {
+      throw new Error("this.permits should never be > 0 when there is someone waiting.");
+    } else if (this.permits === 1 && this.promiseResolverQueue.length > 0) {
+      this.permits -= 1;
+      const nextResolver = this.promiseResolverQueue.shift();
+      if (nextResolver) {
+        setTimeout(() => {
+          nextResolver(true);
+        }, 0);
+      }
+    }
+  }
+}
+
+const MAX_CHAT_ATTACHMENT_SOURCE_BYTES = 50 * 1024 * 1024;
+const CHAT_ATTACHMENT_ENCRYPTION_OVERHEAD_BYTES = 40;
+const MAX_CHAT_ATTACHMENT_ENCRYPTED_BYTES = MAX_CHAT_ATTACHMENT_SOURCE_BYTES + CHAT_ATTACHMENT_ENCRYPTION_OVERHEAD_BYTES;
+
+export { AsyncLock as A, FileEventMessageSchema as F, MAX_CHAT_ATTACHMENT_SOURCE_BYTES as M, UserMessageSchema as U, MAX_CHAT_ATTACHMENT_ENCRYPTED_BYTES as a };