@agimon-ai/doompi-computer-use 0.0.1-alpha.2 → 0.0.1-alpha.21

package/dist/src/services/computerUseApi/index.cjs

@@ -0,0 +1,291 @@
+const require_computerUseApi = require("../../types/computerUseApi.cjs");
+const require_apiRoutes = require("../../types/apiRoutes.cjs");
+let node_crypto = require("node:crypto");
+let _agimon_ai_doompi_core_package_api = require("@agimon-ai/doompi-core/package-api");
+//#region src/services/computerUseApi/index.ts
+function jsonError(message, status) {
+	return Response.json({ error: message }, { status });
+}
+function record(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
+async function body(request) {
+	try {
+		return record(await request.json()) ?? {};
+	} catch {
+		return {};
+	}
+}
+function semanticAction(value) {
+	if (!(typeof value.snapshotId === "string" && value.snapshotId.length > 0 && typeof value.elementRef === "string" && value.elementRef.length > 0)) return false;
+	const allowed = (keys) => Object.keys(value).every((key) => keys.includes(key));
+	if (value.kind === "press" || value.kind === "focus") return allowed([
+		"kind",
+		"snapshotId",
+		"elementRef"
+	]);
+	if (value.kind === "set_value") return typeof value.value === "string" && allowed([
+		"kind",
+		"snapshotId",
+		"elementRef",
+		"value"
+	]);
+	if (value.kind === "scroll") return [
+		"up",
+		"down",
+		"left",
+		"right"
+	].includes(value.direction) && (value.amount === "line" || value.amount === "page") && allowed([
+		"kind",
+		"snapshotId",
+		"elementRef",
+		"direction",
+		"amount"
+	]);
+	return false;
+}
+function artifactView(value) {
+	const input = record(value);
+	if (typeof input?.artifactId !== "string" || input.status !== "ready" && input.status !== "failed") return void 0;
+	const safeUrl = (candidate) => typeof candidate === "string" && candidate.startsWith("/api/") ? candidate : void 0;
+	const downloadUrl = safeUrl(input.downloadUrl);
+	const previewUrl = safeUrl(input.previewUrl);
+	const artifactFailure = record(input.failure);
+	const safeFailure = typeof artifactFailure?.code === "string" && typeof artifactFailure.message === "string" ? {
+		code: artifactFailure.code.slice(0, 128),
+		message: artifactFailure.message.slice(0, 512)
+	} : void 0;
+	return {
+		artifactId: input.artifactId,
+		status: input.status,
+		...downloadUrl === void 0 ? {} : { downloadUrl },
+		...previewUrl === void 0 ? {} : { previewUrl },
+		...typeof input.actionCount === "number" ? { actionCount: input.actionCount } : {},
+		...typeof input.completedAt === "string" ? { completedAt: input.completedAt } : {},
+		...safeFailure === void 0 ? {} : { failure: safeFailure }
+	};
+}
+var ComputerUseRequestBroker = class ComputerUseRequestBroker {
+	sessionId;
+	internalToken;
+	hubToken;
+	directEvents;
+	requestTimeoutMs;
+	revision = 0;
+	wake = 0;
+	phase = "inactive";
+	activation;
+	grantId;
+	expiresAt;
+	actionSequence = 0;
+	failure;
+	artifact;
+	pending;
+	closed = false;
+	static DEFAULT_REQUEST_TIMEOUT_MS = 3e4;
+	constructor(options) {
+		this.sessionId = options.sessionId ?? "unknown";
+		this.internalToken = options.internalToken;
+		this.hubToken = options.hubToken;
+		this.directEvents = options.directEvents;
+		this.requestTimeoutMs = options.requestTimeoutMs ?? ComputerUseRequestBroker.DEFAULT_REQUEST_TIMEOUT_MS;
+	}
+	state() {
+		return Object.freeze({
+			sessionId: this.sessionId,
+			revision: this.revision,
+			wake: this.wake,
+			phase: this.phase,
+			...this.activation === void 0 ? {} : {
+				requestId: this.activation.requestId,
+				target: this.activation.target,
+				durationMs: this.activation.durationSeconds * 1e3
+			},
+			...this.expiresAt === void 0 ? {} : { expiresAt: this.expiresAt },
+			...this.failure === void 0 ? {} : { failure: this.failure },
+			...this.artifact === void 0 ? {} : { artifact: this.artifact }
+		});
+	}
+	changed() {
+		this.revision += 1;
+		this.wake = (this.wake + 1) % require_computerUseApi.COMPUTER_USE_WAKE_LIMIT;
+		this.directEvents.publish(require_computerUseApi.computerUseChannelType, this.sessionId, this.state());
+	}
+	authorized(request, token) {
+		return token !== void 0 && request.headers.get("authorization") === `Bearer ${token}`;
+	}
+	async requestActivation(request) {
+		const caller = (0, _agimon_ai_doompi_core_package_api.doomApiCallerFrom)(request.headers);
+		if (caller === void 0 || caller.locality === "remote" && caller.stepUp === "not-required") return jsonError("Not found.", 404);
+		if (this.phase !== "inactive" && this.phase !== "failed") return jsonError("Computer use is already busy.", 409);
+		const input = await body(request);
+		const target = record(input.target);
+		const durationMs = input.durationMs;
+		if (target === void 0 || typeof target.windowId !== "string" || typeof target.bundleId !== "string") return jsonError("A Desktop target is required.", 400);
+		if (typeof durationMs !== "number" || !Number.isInteger(durationMs) || durationMs < 1e3 || durationMs > 18e5) return jsonError("The requested duration is invalid.", 400);
+		const createdAt = Date.now();
+		this.activation = Object.freeze({
+			requestId: (0, node_crypto.randomUUID)(),
+			target: Object.freeze({ ...target }),
+			durationSeconds: durationMs / 1e3,
+			createdAt,
+			confirmationExpiresAt: createdAt + require_computerUseApi.COMPUTER_USE_CONFIRMATION_WINDOW_MS,
+			caller: Object.freeze({ ...caller })
+		});
+		this.phase = "awaiting_confirmation";
+		this.failure = void 0;
+		this.artifact = void 0;
+		this.changed();
+		return Response.json(this.state(), { status: 202 });
+	}
+	rejectPending(message) {
+		const pending = this.pending;
+		if (pending === void 0) return;
+		this.pending = void 0;
+		pending.dispose();
+		pending.reject(new Error(message));
+	}
+	stopAfterUncertainRequest(message) {
+		if (this.phase === "active") {
+			this.phase = "stopping";
+			this.changed();
+		}
+		this.rejectPending(message);
+	}
+	async enqueue(operation, payload, signal) {
+		if (this.phase !== "active" || this.grantId === void 0) return jsonError("Computer use is not active.", 409);
+		if (this.pending !== void 0) return jsonError("Another computer-use request is live.", 409);
+		if (signal?.aborted === true) return jsonError("The computer-use request was cancelled.", 499);
+		const sequence = operation === "act" ? ++this.actionSequence : void 0;
+		const request = {
+			id: (0, node_crypto.randomUUID)(),
+			operation,
+			grantId: this.grantId,
+			...sequence === void 0 ? {} : { sequence },
+			...payload === void 0 ? {} : { payload }
+		};
+		const completion = new Promise((resolve, reject) => {
+			const onAbort = () => this.stopAfterUncertainRequest("The computer-use request was cancelled.");
+			const timer = setTimeout(() => this.stopAfterUncertainRequest("The computer-use request timed out."), this.requestTimeoutMs);
+			timer.unref?.();
+			signal?.addEventListener("abort", onAbort, { once: true });
+			this.pending = {
+				request,
+				resolve,
+				reject,
+				dispose: () => {
+					clearTimeout(timer);
+					signal?.removeEventListener("abort", onAbort);
+				}
+			};
+		});
+		this.changed();
+		try {
+			return Response.json(await completion);
+		} catch (error) {
+			return jsonError(error instanceof Error ? error.message : String(error), 502);
+		}
+	}
+	async fetch(request) {
+		if (this.closed) return jsonError("Computer-use broker is closed.", 503);
+		const path = new URL(request.url).pathname;
+		if (request.method === "POST" && path === require_apiRoutes.default.activate.path) return this.requestActivation(request);
+		const agent = path.startsWith("/agent/");
+		const hub = path.startsWith("/hub/");
+		if (agent && !this.authorized(request, this.internalToken) || hub && !this.authorized(request, this.hubToken)) return jsonError("Not found.", 404);
+		if (request.method === "GET" && (path === require_apiRoutes.default.agentState.path || path === require_apiRoutes.default.hubState.path)) return Response.json(this.state());
+		if (request.method === "POST" && path === require_apiRoutes.default.agentObserve.path) return this.enqueue("observe", void 0, request.signal);
+		if (request.method === "POST" && path === require_apiRoutes.default.agentAction.path) {
+			const action = await body(request);
+			if (!semanticAction(action)) return jsonError("A valid semantic action is required.", 400);
+			return this.enqueue("act", action, request.signal);
+		}
+		if (request.method === "POST" && path === require_apiRoutes.default.agentStop.path) {
+			if (this.phase !== "active") return jsonError("Computer use is not active.", 409);
+			this.phase = "stopping";
+			this.rejectPending("The computer-use request was stopped.");
+			this.changed();
+			return Response.json(this.state(), { status: 202 });
+		}
+		if (request.method === "GET" && path === require_apiRoutes.default.hubActivation.path) {
+			if (this.activation === void 0 || this.phase !== "awaiting_confirmation") return Response.json(null);
+			this.phase = "activating";
+			this.changed();
+			return Response.json(this.activation);
+		}
+		if (request.method === "GET" && path === require_apiRoutes.default.hubAuthorization.path) return Response.json(this.grantId === void 0 ? null : {
+			grantId: this.grantId,
+			expiresAt: this.expiresAt
+		});
+		if (request.method === "GET" && path === require_apiRoutes.default.hubNext.path) return Response.json(this.pending?.request ?? null);
+		if (request.method === "POST" && path === require_apiRoutes.default.hubComplete.path) {
+			const input = await body(request);
+			const id = typeof input.id === "string" ? input.id : void 0;
+			if (this.pending === void 0 || this.pending.request.id !== id) return jsonError("The request is stale.", 409);
+			const pending = this.pending;
+			this.pending = void 0;
+			pending.dispose();
+			this.changed();
+			if (typeof input.error === "string") pending.reject(new Error(input.error));
+			else pending.resolve(input.result);
+			return Response.json(this.state());
+		}
+		if (request.method === "POST" && path === require_apiRoutes.default.hubStop.path) {
+			const input = await body(request);
+			if (this.phase === "activating") {
+				if (typeof input.error === "string") {
+					this.phase = "failed";
+					this.failure = {
+						code: "desktop_unavailable",
+						message: input.error.slice(0, 512)
+					};
+					this.activation = void 0;
+				} else {
+					const host = record(input.host);
+					if (typeof host?.grantId !== "string" || !Number.isFinite(host.expiresAt)) return jsonError("Desktop did not issue a complete grant.", 502);
+					this.grantId = host.grantId;
+					this.expiresAt = host.expiresAt;
+					this.actionSequence = 0;
+					this.phase = "active";
+				}
+			} else {
+				this.rejectPending("The computer-use session stopped.");
+				this.phase = "inactive";
+				this.grantId = void 0;
+				this.expiresAt = void 0;
+				this.activation = void 0;
+				this.artifact = artifactView(input.artifact);
+			}
+			this.changed();
+			return Response.json(this.state());
+		}
+		return jsonError("Not found.", 404);
+	}
+	close() {
+		this.closed = true;
+		this.rejectPending("Computer-use broker closed.");
+		this.grantId = void 0;
+		this.expiresAt = void 0;
+	}
+};
+function createComputerUseApi(options) {
+	return new ComputerUseRequestBroker(options);
+}
+const api = {
+	basePath: require_computerUseApi.API_BASE_PATH,
+	start(context) {
+		if (context.directEvents === void 0) throw new Error("Computer-use API requires the session direct event bus.");
+		return createComputerUseApi({
+			...context.sessionId === void 0 ? {} : { sessionId: context.sessionId },
+			...context.internalToken === void 0 ? {} : { internalToken: context.internalToken },
+			...context.hubToken === void 0 ? {} : { hubToken: context.hubToken },
+			directEvents: context.directEvents
+		});
+	}
+};
+//#endregion
+exports.ComputerUseRequestBroker = ComputerUseRequestBroker;
+exports.api = api;
+exports.createComputerUseApi = createComputerUseApi;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/services/computerUseApi/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["COMPUTER_USE_WAKE_LIMIT","computerUseChannelType","doomApiCallerFrom","randomUUID","COMPUTER_USE_CONFIRMATION_WINDOW_MS","routes","API_BASE_PATH"],"sources":["../../../../src/services/computerUseApi/index.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport type { DoomDirectEventBus } from '@agimon-ai/doompi-core/hub-channel';\nimport {\n  doomApiCallerFrom,\n  type DoomApi,\n  type DoomApiContext,\n  type DoomApiHandler,\n} from '@agimon-ai/doompi-core/package-api';\n\nimport routes from '../../types/apiRoutes';\nimport {\n  API_BASE_PATH,\n  computerUseChannelType,\n  COMPUTER_USE_CONFIRMATION_WINDOW_MS,\n  COMPUTER_USE_MAX_DURATION_MS,\n  COMPUTER_USE_WAKE_LIMIT,\n  type ComputerUseActivationRequest,\n  type ComputerUseArtifactView,\n  type ComputerUseBrokerRequest,\n  type ComputerUseSessionView,\n} from '../../types/computerUseApi';\n\ninterface PendingRequest {\n  readonly request: ComputerUseBrokerRequest;\n  readonly dispose: () => void;\n  resolve(value: unknown): void;\n  reject(error: Error): void;\n}\n\nfunction jsonError(message: string, status: number): Response {\n  return Response.json({ error: message }, { status });\n}\n\nfunction record(value: unknown): Record<string, unknown> | undefined {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : undefined;\n}\n\nasync function body(request: Request): Promise<Record<string, unknown>> {\n  try {\n    return record(await request.json()) ?? {};\n  } catch {\n    return {};\n  }\n}\n\nfunction semanticAction(value: Record<string, unknown>): boolean {\n  const base =\n    typeof value.snapshotId === 'string' &&\n    value.snapshotId.length > 0 &&\n    typeof value.elementRef === 'string' &&\n    value.elementRef.length > 0;\n  if (!base) return false;\n  const allowed = (keys: readonly string[]) => Object.keys(value).every((key) => keys.includes(key));\n  if (value.kind === 'press' || value.kind === 'focus') return allowed(['kind', 'snapshotId', 'elementRef']);\n  if (value.kind === 'set_value')\n    return typeof value.value === 'string' && allowed(['kind', 'snapshotId', 'elementRef', 'value']);\n  if (value.kind === 'scroll')\n    return (\n      ['up', 'down', 'left', 'right'].includes(value.direction as string) &&\n      (value.amount === 'line' || value.amount === 'page') &&\n      allowed(['kind', 'snapshotId', 'elementRef', 'direction', 'amount'])\n    );\n  return false;\n}\nfunction artifactView(value: unknown): ComputerUseArtifactView | undefined {\n  const input = record(value);\n  if (typeof input?.artifactId !== 'string' || (input.status !== 'ready' && input.status !== 'failed'))\n    return undefined;\n  const safeUrl = (candidate: unknown) =>\n    typeof candidate === 'string' && candidate.startsWith('/api/') ? candidate : undefined;\n  const downloadUrl = safeUrl(input.downloadUrl);\n  const previewUrl = safeUrl(input.previewUrl);\n  const artifactFailure = record(input.failure);\n  const safeFailure =\n    typeof artifactFailure?.code === 'string' && typeof artifactFailure.message === 'string'\n      ? { code: artifactFailure.code.slice(0, 128), message: artifactFailure.message.slice(0, 512) }\n      : undefined;\n  return {\n    artifactId: input.artifactId,\n    status: input.status,\n    ...(downloadUrl === undefined ? {} : { downloadUrl }),\n    ...(previewUrl === undefined ? {} : { previewUrl }),\n    ...(typeof input.actionCount === 'number' ? { actionCount: input.actionCount } : {}),\n    ...(typeof input.completedAt === 'string' ? { completedAt: input.completedAt } : {}),\n    ...(safeFailure === undefined ? {} : { failure: safeFailure }),\n  };\n}\n\nexport interface ComputerUseApiOptions {\n  readonly sessionId?: string;\n  readonly internalToken?: string;\n  readonly hubToken?: string;\n  readonly directEvents: DoomDirectEventBus;\n  readonly requestTimeoutMs?: number;\n}\n\nexport class ComputerUseRequestBroker implements DoomApiHandler {\n  private readonly sessionId: string;\n  private readonly internalToken?: string;\n  private readonly hubToken?: string;\n  private readonly directEvents: DoomDirectEventBus;\n  private readonly requestTimeoutMs: number;\n  private revision = 0;\n  private wake = 0;\n  private phase: ComputerUseSessionView['phase'] = 'inactive';\n  private activation?: ComputerUseActivationRequest;\n  private grantId?: string;\n  private expiresAt?: number;\n  private actionSequence = 0;\n  private failure?: ComputerUseSessionView['failure'];\n  private artifact?: ComputerUseArtifactView;\n  private pending?: PendingRequest;\n  private closed = false;\n\n  private static readonly DEFAULT_REQUEST_TIMEOUT_MS = 30_000;\n  public constructor(options: ComputerUseApiOptions) {\n    this.sessionId = options.sessionId ?? 'unknown';\n    this.internalToken = options.internalToken;\n    this.hubToken = options.hubToken;\n    this.directEvents = options.directEvents;\n    this.requestTimeoutMs = options.requestTimeoutMs ?? ComputerUseRequestBroker.DEFAULT_REQUEST_TIMEOUT_MS;\n  }\n\n  public state(): ComputerUseSessionView {\n    return Object.freeze({\n      sessionId: this.sessionId,\n      revision: this.revision,\n      wake: this.wake,\n      phase: this.phase,\n      ...(this.activation === undefined\n        ? {}\n        : {\n            requestId: this.activation.requestId,\n            target: this.activation.target,\n            durationMs: this.activation.durationSeconds * 1_000,\n          }),\n      ...(this.expiresAt === undefined ? {} : { expiresAt: this.expiresAt }),\n      ...(this.failure === undefined ? {} : { failure: this.failure }),\n      ...(this.artifact === undefined ? {} : { artifact: this.artifact }),\n    });\n  }\n\n  private changed(): void {\n    this.revision += 1;\n    this.wake = (this.wake + 1) % COMPUTER_USE_WAKE_LIMIT;\n    this.directEvents.publish(computerUseChannelType, this.sessionId, this.state());\n  }\n\n  private authorized(request: Request, token: string | undefined): boolean {\n    return token !== undefined && request.headers.get('authorization') === `Bearer ${token}`;\n  }\n\n  private async requestActivation(request: Request): Promise<Response> {\n    const caller = doomApiCallerFrom(request.headers);\n    if (caller === undefined || (caller.locality === 'remote' && caller.stepUp === 'not-required'))\n      return jsonError('Not found.', 404);\n    if (this.phase !== 'inactive' && this.phase !== 'failed') return jsonError('Computer use is already busy.', 409);\n    const input = await body(request);\n    const target = record(input.target);\n    const durationMs = input.durationMs;\n    if (target === undefined || typeof target.windowId !== 'string' || typeof target.bundleId !== 'string')\n      return jsonError('A Desktop target is required.', 400);\n    if (\n      typeof durationMs !== 'number' ||\n      !Number.isInteger(durationMs) ||\n      durationMs < 1_000 ||\n      durationMs > COMPUTER_USE_MAX_DURATION_MS\n    )\n      return jsonError('The requested duration is invalid.', 400);\n    const createdAt = Date.now();\n    this.activation = Object.freeze({\n      requestId: randomUUID(),\n      target: Object.freeze({ ...target }),\n      durationSeconds: durationMs / 1_000,\n      createdAt,\n      confirmationExpiresAt: createdAt + COMPUTER_USE_CONFIRMATION_WINDOW_MS,\n      caller: Object.freeze({ ...caller }),\n    });\n    this.phase = 'awaiting_confirmation';\n    this.failure = undefined;\n    this.artifact = undefined;\n    this.changed();\n    return Response.json(this.state(), { status: 202 });\n  }\n\n  private rejectPending(message: string): void {\n    const pending = this.pending;\n    if (pending === undefined) return;\n    this.pending = undefined;\n    pending.dispose();\n    pending.reject(new Error(message));\n  }\n\n  private stopAfterUncertainRequest(message: string): void {\n    if (this.phase === 'active') {\n      this.phase = 'stopping';\n      this.changed();\n    }\n    this.rejectPending(message);\n  }\n\n  private async enqueue(\n    operation: ComputerUseBrokerRequest['operation'],\n    payload?: unknown,\n    signal?: AbortSignal,\n  ): Promise<Response> {\n    if (this.phase !== 'active' || this.grantId === undefined) return jsonError('Computer use is not active.', 409);\n    if (this.pending !== undefined) return jsonError('Another computer-use request is live.', 409);\n    if (signal?.aborted === true) return jsonError('The computer-use request was cancelled.', 499);\n    const sequence = operation === 'act' ? ++this.actionSequence : undefined;\n    const request: ComputerUseBrokerRequest = {\n      id: randomUUID(),\n      operation,\n      grantId: this.grantId,\n      ...(sequence === undefined ? {} : { sequence }),\n      ...(payload === undefined ? {} : { payload }),\n    };\n    const completion = new Promise<unknown>((resolve, reject) => {\n      const onAbort = () => this.stopAfterUncertainRequest('The computer-use request was cancelled.');\n      const timer = setTimeout(\n        () => this.stopAfterUncertainRequest('The computer-use request timed out.'),\n        this.requestTimeoutMs,\n      );\n      timer.unref?.();\n      signal?.addEventListener('abort', onAbort, { once: true });\n      this.pending = {\n        request,\n        resolve,\n        reject,\n        dispose: () => {\n          clearTimeout(timer);\n          signal?.removeEventListener('abort', onAbort);\n        },\n      };\n    });\n    this.changed();\n    try {\n      return Response.json(await completion);\n    } catch (error) {\n      return jsonError(error instanceof Error ? error.message : String(error), 502);\n    }\n  }\n\n  public async fetch(request: Request): Promise<Response> {\n    if (this.closed) return jsonError('Computer-use broker is closed.', 503);\n    const path = new URL(request.url).pathname;\n    if (request.method === 'POST' && path === routes.activate.path) return this.requestActivation(request);\n    const agent = path.startsWith('/agent/');\n    const hub = path.startsWith('/hub/');\n    if ((agent && !this.authorized(request, this.internalToken)) || (hub && !this.authorized(request, this.hubToken)))\n      return jsonError('Not found.', 404);\n\n    if (request.method === 'GET' && (path === routes.agentState.path || path === routes.hubState.path))\n      return Response.json(this.state());\n    if (request.method === 'POST' && path === routes.agentObserve.path)\n      return this.enqueue('observe', undefined, request.signal);\n    if (request.method === 'POST' && path === routes.agentAction.path) {\n      const action = await body(request);\n      if (!semanticAction(action)) return jsonError('A valid semantic action is required.', 400);\n      return this.enqueue('act', action, request.signal);\n    }\n    if (request.method === 'POST' && path === routes.agentStop.path) {\n      if (this.phase !== 'active') return jsonError('Computer use is not active.', 409);\n      this.phase = 'stopping';\n      this.rejectPending('The computer-use request was stopped.');\n      this.changed();\n      return Response.json(this.state(), { status: 202 });\n    }\n    if (request.method === 'GET' && path === routes.hubActivation.path) {\n      if (this.activation === undefined || this.phase !== 'awaiting_confirmation') return Response.json(null);\n      this.phase = 'activating';\n      this.changed();\n      return Response.json(this.activation);\n    }\n    if (request.method === 'GET' && path === routes.hubAuthorization.path)\n      return Response.json(this.grantId === undefined ? null : { grantId: this.grantId, expiresAt: this.expiresAt });\n    if (request.method === 'GET' && path === routes.hubNext.path) return Response.json(this.pending?.request ?? null);\n    if (request.method === 'POST' && path === routes.hubComplete.path) {\n      const input = await body(request);\n      const id = typeof input.id === 'string' ? input.id : undefined;\n      if (this.pending === undefined || this.pending.request.id !== id) return jsonError('The request is stale.', 409);\n      const pending = this.pending;\n      this.pending = undefined;\n      pending.dispose();\n      this.changed();\n      if (typeof input.error === 'string') pending.reject(new Error(input.error));\n      else pending.resolve(input.result);\n      return Response.json(this.state());\n    }\n    if (request.method === 'POST' && path === routes.hubStop.path) {\n      const input = await body(request);\n      if (this.phase === 'activating') {\n        if (typeof input.error === 'string') {\n          this.phase = 'failed';\n          this.failure = { code: 'desktop_unavailable', message: input.error.slice(0, 512) };\n          this.activation = undefined;\n        } else {\n          const host = record(input.host);\n          if (typeof host?.grantId !== 'string' || !Number.isFinite(host.expiresAt))\n            return jsonError('Desktop did not issue a complete grant.', 502);\n          this.grantId = host.grantId;\n          this.expiresAt = host.expiresAt as number;\n          this.actionSequence = 0;\n          this.phase = 'active';\n        }\n      } else {\n        this.rejectPending('The computer-use session stopped.');\n        this.phase = 'inactive';\n        this.grantId = undefined;\n        this.expiresAt = undefined;\n        this.activation = undefined;\n        this.artifact = artifactView(input.artifact);\n      }\n      this.changed();\n      return Response.json(this.state());\n    }\n    return jsonError('Not found.', 404);\n  }\n\n  public close(): void {\n    this.closed = true;\n    this.rejectPending('Computer-use broker closed.');\n    this.grantId = undefined;\n    this.expiresAt = undefined;\n  }\n}\n\nexport function createComputerUseApi(options: ComputerUseApiOptions): ComputerUseRequestBroker {\n  return new ComputerUseRequestBroker(options);\n}\n\nexport const api: DoomApi = {\n  basePath: API_BASE_PATH,\n  start(context: DoomApiContext): DoomApiHandler {\n    if (context.directEvents === undefined) throw new Error('Computer-use API requires the session direct event bus.');\n    return createComputerUseApi({\n      ...(context.sessionId === undefined ? {} : { sessionId: context.sessionId }),\n      ...(context.internalToken === undefined ? {} : { internalToken: context.internalToken }),\n      ...(context.hubToken === undefined ? {} : { hubToken: context.hubToken }),\n      directEvents: context.directEvents,\n    });\n  },\n};\n"],"mappings":";;;;;AA8BA,SAAS,UAAU,SAAiB,QAA0B;CAC5D,OAAO,SAAS,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,OAAO,CAAC;AACrD;AAEA,SAAS,OAAO,OAAqD;CACnE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK,IACrE,QACD,KAAA;AACN;AAEA,eAAe,KAAK,SAAoD;CACtE,IAAI;EACF,OAAO,OAAO,MAAM,QAAQ,KAAK,CAAC,KAAK,CAAC;CAC1C,QAAQ;EACN,OAAO,CAAC;CACV;AACF;AAEA,SAAS,eAAe,OAAyC;CAM/D,IAAI,EAJF,OAAO,MAAM,eAAe,YAC5B,MAAM,WAAW,SAAS,KAC1B,OAAO,MAAM,eAAe,YAC5B,MAAM,WAAW,SAAS,IACjB,OAAO;CAClB,MAAM,WAAW,SAA4B,OAAO,KAAK,KAAK,CAAC,CAAC,OAAO,QAAQ,KAAK,SAAS,GAAG,CAAC;CACjG,IAAI,MAAM,SAAS,WAAW,MAAM,SAAS,SAAS,OAAO,QAAQ;EAAC;EAAQ;EAAc;CAAY,CAAC;CACzG,IAAI,MAAM,SAAS,aACjB,OAAO,OAAO,MAAM,UAAU,YAAY,QAAQ;EAAC;EAAQ;EAAc;EAAc;CAAO,CAAC;CACjG,IAAI,MAAM,SAAS,UACjB,OACE;EAAC;EAAM;EAAQ;EAAQ;CAAO,CAAC,CAAC,SAAS,MAAM,SAAmB,MACjE,MAAM,WAAW,UAAU,MAAM,WAAW,WAC7C,QAAQ;EAAC;EAAQ;EAAc;EAAc;EAAa;CAAQ,CAAC;CAEvE,OAAO;AACT;AACA,SAAS,aAAa,OAAqD;CACzE,MAAM,QAAQ,OAAO,KAAK;CAC1B,IAAI,OAAO,OAAO,eAAe,YAAa,MAAM,WAAW,WAAW,MAAM,WAAW,UACzF,OAAO,KAAA;CACT,MAAM,WAAW,cACf,OAAO,cAAc,YAAY,UAAU,WAAW,OAAO,IAAI,YAAY,KAAA;CAC/E,MAAM,cAAc,QAAQ,MAAM,WAAW;CAC7C,MAAM,aAAa,QAAQ,MAAM,UAAU;CAC3C,MAAM,kBAAkB,OAAO,MAAM,OAAO;CAC5C,MAAM,cACJ,OAAO,iBAAiB,SAAS,YAAY,OAAO,gBAAgB,YAAY,WAC5E;EAAE,MAAM,gBAAgB,KAAK,MAAM,GAAG,GAAG;EAAG,SAAS,gBAAgB,QAAQ,MAAM,GAAG,GAAG;CAAE,IAC3F,KAAA;CACN,OAAO;EACL,YAAY,MAAM;EAClB,QAAQ,MAAM;EACd,GAAI,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY;EACnD,GAAI,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW;EACjD,GAAI,OAAO,MAAM,gBAAgB,WAAW,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;EAClF,GAAI,OAAO,MAAM,gBAAgB,WAAW,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;EAClF,GAAI,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,YAAY;CAC9D;AACF;AAUA,IAAa,2BAAb,MAAa,yBAAmD;CAC9D;CACA;CACA;CACA;CACA;CACA,WAAmB;CACnB,OAAe;CACf,QAAiD;CACjD;CACA;CACA;CACA,iBAAyB;CACzB;CACA;CACA;CACA,SAAiB;CAEjB,OAAwB,6BAA6B;CACrD,YAAmB,SAAgC;EACjD,KAAK,YAAY,QAAQ,aAAa;EACtC,KAAK,gBAAgB,QAAQ;EAC7B,KAAK,WAAW,QAAQ;EACxB,KAAK,eAAe,QAAQ;EAC5B,KAAK,mBAAmB,QAAQ,oBAAoB,yBAAyB;CAC/E;CAEA,QAAuC;EACrC,OAAO,OAAO,OAAO;GACnB,WAAW,KAAK;GAChB,UAAU,KAAK;GACf,MAAM,KAAK;GACX,OAAO,KAAK;GACZ,GAAI,KAAK,eAAe,KAAA,IACpB,CAAC,IACD;IACE,WAAW,KAAK,WAAW;IAC3B,QAAQ,KAAK,WAAW;IACxB,YAAY,KAAK,WAAW,kBAAkB;GAChD;GACJ,GAAI,KAAK,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW,KAAK,UAAU;GACpE,GAAI,KAAK,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,KAAK,QAAQ;GAC9D,GAAI,KAAK,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,KAAK,SAAS;EACnE,CAAC;CACH;CAEA,UAAwB;EACtB,KAAK,YAAY;EACjB,KAAK,QAAQ,KAAK,OAAO,KAAKA,uBAAAA;EAC9B,KAAK,aAAa,QAAQC,uBAAAA,wBAAwB,KAAK,WAAW,KAAK,MAAM,CAAC;CAChF;CAEA,WAAmB,SAAkB,OAAoC;EACvE,OAAO,UAAU,KAAA,KAAa,QAAQ,QAAQ,IAAI,eAAe,MAAM,UAAU;CACnF;CAEA,MAAc,kBAAkB,SAAqC;EACnE,MAAM,UAAA,GAASC,mCAAAA,kBAAAA,CAAkB,QAAQ,OAAO;EAChD,IAAI,WAAW,KAAA,KAAc,OAAO,aAAa,YAAY,OAAO,WAAW,gBAC7E,OAAO,UAAU,cAAc,GAAG;EACpC,IAAI,KAAK,UAAU,cAAc,KAAK,UAAU,UAAU,OAAO,UAAU,iCAAiC,GAAG;EAC/G,MAAM,QAAQ,MAAM,KAAK,OAAO;EAChC,MAAM,SAAS,OAAO,MAAM,MAAM;EAClC,MAAM,aAAa,MAAM;EACzB,IAAI,WAAW,KAAA,KAAa,OAAO,OAAO,aAAa,YAAY,OAAO,OAAO,aAAa,UAC5F,OAAO,UAAU,iCAAiC,GAAG;EACvD,IACE,OAAO,eAAe,YACtB,CAAC,OAAO,UAAU,UAAU,KAC5B,aAAa,OACb,aAAA,MAEA,OAAO,UAAU,sCAAsC,GAAG;EAC5D,MAAM,YAAY,KAAK,IAAI;EAC3B,KAAK,aAAa,OAAO,OAAO;GAC9B,YAAA,GAAWC,YAAAA,WAAAA,CAAW;GACtB,QAAQ,OAAO,OAAO,EAAE,GAAG,OAAO,CAAC;GACnC,iBAAiB,aAAa;GAC9B;GACA,uBAAuB,YAAYC,uBAAAA;GACnC,QAAQ,OAAO,OAAO,EAAE,GAAG,OAAO,CAAC;EACrC,CAAC;EACD,KAAK,QAAQ;EACb,KAAK,UAAU,KAAA;EACf,KAAK,WAAW,KAAA;EAChB,KAAK,QAAQ;EACb,OAAO,SAAS,KAAK,KAAK,MAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;CACpD;CAEA,cAAsB,SAAuB;EAC3C,MAAM,UAAU,KAAK;EACrB,IAAI,YAAY,KAAA,GAAW;EAC3B,KAAK,UAAU,KAAA;EACf,QAAQ,QAAQ;EAChB,QAAQ,OAAO,IAAI,MAAM,OAAO,CAAC;CACnC;CAEA,0BAAkC,SAAuB;EACvD,IAAI,KAAK,UAAU,UAAU;GAC3B,KAAK,QAAQ;GACb,KAAK,QAAQ;EACf;EACA,KAAK,cAAc,OAAO;CAC5B;CAEA,MAAc,QACZ,WACA,SACA,QACmB;EACnB,IAAI,KAAK,UAAU,YAAY,KAAK,YAAY,KAAA,GAAW,OAAO,UAAU,+BAA+B,GAAG;EAC9G,IAAI,KAAK,YAAY,KAAA,GAAW,OAAO,UAAU,yCAAyC,GAAG;EAC7F,IAAI,QAAQ,YAAY,MAAM,OAAO,UAAU,2CAA2C,GAAG;EAC7F,MAAM,WAAW,cAAc,QAAQ,EAAE,KAAK,iBAAiB,KAAA;EAC/D,MAAM,UAAoC;GACxC,KAAA,GAAID,YAAAA,WAAAA,CAAW;GACf;GACA,SAAS,KAAK;GACd,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS;GAC7C,GAAI,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ;EAC7C;EACA,MAAM,aAAa,IAAI,SAAkB,SAAS,WAAW;GAC3D,MAAM,gBAAgB,KAAK,0BAA0B,yCAAyC;GAC9F,MAAM,QAAQ,iBACN,KAAK,0BAA0B,qCAAqC,GAC1E,KAAK,gBACP;GACA,MAAM,QAAQ;GACd,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;GACzD,KAAK,UAAU;IACb;IACA;IACA;IACA,eAAe;KACb,aAAa,KAAK;KAClB,QAAQ,oBAAoB,SAAS,OAAO;IAC9C;GACF;EACF,CAAC;EACD,KAAK,QAAQ;EACb,IAAI;GACF,OAAO,SAAS,KAAK,MAAM,UAAU;EACvC,SAAS,OAAO;GACd,OAAO,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,GAAG;EAC9E;CACF;CAEA,MAAa,MAAM,SAAqC;EACtD,IAAI,KAAK,QAAQ,OAAO,UAAU,kCAAkC,GAAG;EACvE,MAAM,OAAO,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC;EAClC,IAAI,QAAQ,WAAW,UAAU,SAASE,kBAAAA,QAAO,SAAS,MAAM,OAAO,KAAK,kBAAkB,OAAO;EACrG,MAAM,QAAQ,KAAK,WAAW,SAAS;EACvC,MAAM,MAAM,KAAK,WAAW,OAAO;EACnC,IAAK,SAAS,CAAC,KAAK,WAAW,SAAS,KAAK,aAAa,KAAO,OAAO,CAAC,KAAK,WAAW,SAAS,KAAK,QAAQ,GAC7G,OAAO,UAAU,cAAc,GAAG;EAEpC,IAAI,QAAQ,WAAW,UAAU,SAASA,kBAAAA,QAAO,WAAW,QAAQ,SAASA,kBAAAA,QAAO,SAAS,OAC3F,OAAO,SAAS,KAAK,KAAK,MAAM,CAAC;EACnC,IAAI,QAAQ,WAAW,UAAU,SAASA,kBAAAA,QAAO,aAAa,MAC5D,OAAO,KAAK,QAAQ,WAAW,KAAA,GAAW,QAAQ,MAAM;EAC1D,IAAI,QAAQ,WAAW,UAAU,SAASA,kBAAAA,QAAO,YAAY,MAAM;GACjE,MAAM,SAAS,MAAM,KAAK,OAAO;GACjC,IAAI,CAAC,eAAe,MAAM,GAAG,OAAO,UAAU,wCAAwC,GAAG;GACzF,OAAO,KAAK,QAAQ,OAAO,QAAQ,QAAQ,MAAM;EACnD;EACA,IAAI,QAAQ,WAAW,UAAU,SAASA,kBAAAA,QAAO,UAAU,MAAM;GAC/D,IAAI,KAAK,UAAU,UAAU,OAAO,UAAU,+BAA+B,GAAG;GAChF,KAAK,QAAQ;GACb,KAAK,cAAc,uCAAuC;GAC1D,KAAK,QAAQ;GACb,OAAO,SAAS,KAAK,KAAK,MAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;EACpD;EACA,IAAI,QAAQ,WAAW,SAAS,SAASA,kBAAAA,QAAO,cAAc,MAAM;GAClE,IAAI,KAAK,eAAe,KAAA,KAAa,KAAK,UAAU,yBAAyB,OAAO,SAAS,KAAK,IAAI;GACtG,KAAK,QAAQ;GACb,KAAK,QAAQ;GACb,OAAO,SAAS,KAAK,KAAK,UAAU;EACtC;EACA,IAAI,QAAQ,WAAW,SAAS,SAASA,kBAAAA,QAAO,iBAAiB,MAC/D,OAAO,SAAS,KAAK,KAAK,YAAY,KAAA,IAAY,OAAO;GAAE,SAAS,KAAK;GAAS,WAAW,KAAK;EAAU,CAAC;EAC/G,IAAI,QAAQ,WAAW,SAAS,SAASA,kBAAAA,QAAO,QAAQ,MAAM,OAAO,SAAS,KAAK,KAAK,SAAS,WAAW,IAAI;EAChH,IAAI,QAAQ,WAAW,UAAU,SAASA,kBAAAA,QAAO,YAAY,MAAM;GACjE,MAAM,QAAQ,MAAM,KAAK,OAAO;GAChC,MAAM,KAAK,OAAO,MAAM,OAAO,WAAW,MAAM,KAAK,KAAA;GACrD,IAAI,KAAK,YAAY,KAAA,KAAa,KAAK,QAAQ,QAAQ,OAAO,IAAI,OAAO,UAAU,yBAAyB,GAAG;GAC/G,MAAM,UAAU,KAAK;GACrB,KAAK,UAAU,KAAA;GACf,QAAQ,QAAQ;GAChB,KAAK,QAAQ;GACb,IAAI,OAAO,MAAM,UAAU,UAAU,QAAQ,OAAO,IAAI,MAAM,MAAM,KAAK,CAAC;QACrE,QAAQ,QAAQ,MAAM,MAAM;GACjC,OAAO,SAAS,KAAK,KAAK,MAAM,CAAC;EACnC;EACA,IAAI,QAAQ,WAAW,UAAU,SAASA,kBAAAA,QAAO,QAAQ,MAAM;GAC7D,MAAM,QAAQ,MAAM,KAAK,OAAO;GAChC,IAAI,KAAK,UAAU,cAAc;IAC/B,IAAI,OAAO,MAAM,UAAU,UAAU;KACnC,KAAK,QAAQ;KACb,KAAK,UAAU;MAAE,MAAM;MAAuB,SAAS,MAAM,MAAM,MAAM,GAAG,GAAG;KAAE;KACjF,KAAK,aAAa,KAAA;IACpB,OAAO;KACL,MAAM,OAAO,OAAO,MAAM,IAAI;KAC9B,IAAI,OAAO,MAAM,YAAY,YAAY,CAAC,OAAO,SAAS,KAAK,SAAS,GACtE,OAAO,UAAU,2CAA2C,GAAG;KACjE,KAAK,UAAU,KAAK;KACpB,KAAK,YAAY,KAAK;KACtB,KAAK,iBAAiB;KACtB,KAAK,QAAQ;IACf;GACF,OAAO;IACL,KAAK,cAAc,mCAAmC;IACtD,KAAK,QAAQ;IACb,KAAK,UAAU,KAAA;IACf,KAAK,YAAY,KAAA;IACjB,KAAK,aAAa,KAAA;IAClB,KAAK,WAAW,aAAa,MAAM,QAAQ;GAC7C;GACA,KAAK,QAAQ;GACb,OAAO,SAAS,KAAK,KAAK,MAAM,CAAC;EACnC;EACA,OAAO,UAAU,cAAc,GAAG;CACpC;CAEA,QAAqB;EACnB,KAAK,SAAS;EACd,KAAK,cAAc,6BAA6B;EAChD,KAAK,UAAU,KAAA;EACf,KAAK,YAAY,KAAA;CACnB;AACF;AAEA,SAAgB,qBAAqB,SAA0D;CAC7F,OAAO,IAAI,yBAAyB,OAAO;AAC7C;AAEA,MAAa,MAAe;CAC1B,UAAUC,uBAAAA;CACV,MAAM,SAAyC;EAC7C,IAAI,QAAQ,iBAAiB,KAAA,GAAW,MAAM,IAAI,MAAM,yDAAyD;EACjH,OAAO,qBAAqB;GAC1B,GAAI,QAAQ,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW,QAAQ,UAAU;GAC1E,GAAI,QAAQ,kBAAkB,KAAA,IAAY,CAAC,IAAI,EAAE,eAAe,QAAQ,cAAc;GACtF,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;GACvE,cAAc,QAAQ;EACxB,CAAC;CACH;AACF"}

package/dist/src/services/computerUseApi/index.mjs

@@ -0,0 +1,289 @@
+import { API_BASE_PATH, COMPUTER_USE_CONFIRMATION_WINDOW_MS, COMPUTER_USE_WAKE_LIMIT, computerUseChannelType } from "../../types/computerUseApi.mjs";
+import apiRoutes_default from "../../types/apiRoutes.mjs";
+import { randomUUID } from "node:crypto";
+import { doomApiCallerFrom } from "@agimon-ai/doompi-core/package-api";
+//#region src/services/computerUseApi/index.ts
+function jsonError(message, status) {
+	return Response.json({ error: message }, { status });
+}
+function record(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
+async function body(request) {
+	try {
+		return record(await request.json()) ?? {};
+	} catch {
+		return {};
+	}
+}
+function semanticAction(value) {
+	if (!(typeof value.snapshotId === "string" && value.snapshotId.length > 0 && typeof value.elementRef === "string" && value.elementRef.length > 0)) return false;
+	const allowed = (keys) => Object.keys(value).every((key) => keys.includes(key));
+	if (value.kind === "press" || value.kind === "focus") return allowed([
+		"kind",
+		"snapshotId",
+		"elementRef"
+	]);
+	if (value.kind === "set_value") return typeof value.value === "string" && allowed([
+		"kind",
+		"snapshotId",
+		"elementRef",
+		"value"
+	]);
+	if (value.kind === "scroll") return [
+		"up",
+		"down",
+		"left",
+		"right"
+	].includes(value.direction) && (value.amount === "line" || value.amount === "page") && allowed([
+		"kind",
+		"snapshotId",
+		"elementRef",
+		"direction",
+		"amount"
+	]);
+	return false;
+}
+function artifactView(value) {
+	const input = record(value);
+	if (typeof input?.artifactId !== "string" || input.status !== "ready" && input.status !== "failed") return void 0;
+	const safeUrl = (candidate) => typeof candidate === "string" && candidate.startsWith("/api/") ? candidate : void 0;
+	const downloadUrl = safeUrl(input.downloadUrl);
+	const previewUrl = safeUrl(input.previewUrl);
+	const artifactFailure = record(input.failure);
+	const safeFailure = typeof artifactFailure?.code === "string" && typeof artifactFailure.message === "string" ? {
+		code: artifactFailure.code.slice(0, 128),
+		message: artifactFailure.message.slice(0, 512)
+	} : void 0;
+	return {
+		artifactId: input.artifactId,
+		status: input.status,
+		...downloadUrl === void 0 ? {} : { downloadUrl },
+		...previewUrl === void 0 ? {} : { previewUrl },
+		...typeof input.actionCount === "number" ? { actionCount: input.actionCount } : {},
+		...typeof input.completedAt === "string" ? { completedAt: input.completedAt } : {},
+		...safeFailure === void 0 ? {} : { failure: safeFailure }
+	};
+}
+var ComputerUseRequestBroker = class ComputerUseRequestBroker {
+	sessionId;
+	internalToken;
+	hubToken;
+	directEvents;
+	requestTimeoutMs;
+	revision = 0;
+	wake = 0;
+	phase = "inactive";
+	activation;
+	grantId;
+	expiresAt;
+	actionSequence = 0;
+	failure;
+	artifact;
+	pending;
+	closed = false;
+	static DEFAULT_REQUEST_TIMEOUT_MS = 3e4;
+	constructor(options) {
+		this.sessionId = options.sessionId ?? "unknown";
+		this.internalToken = options.internalToken;
+		this.hubToken = options.hubToken;
+		this.directEvents = options.directEvents;
+		this.requestTimeoutMs = options.requestTimeoutMs ?? ComputerUseRequestBroker.DEFAULT_REQUEST_TIMEOUT_MS;
+	}
+	state() {
+		return Object.freeze({
+			sessionId: this.sessionId,
+			revision: this.revision,
+			wake: this.wake,
+			phase: this.phase,
+			...this.activation === void 0 ? {} : {
+				requestId: this.activation.requestId,
+				target: this.activation.target,
+				durationMs: this.activation.durationSeconds * 1e3
+			},
+			...this.expiresAt === void 0 ? {} : { expiresAt: this.expiresAt },
+			...this.failure === void 0 ? {} : { failure: this.failure },
+			...this.artifact === void 0 ? {} : { artifact: this.artifact }
+		});
+	}
+	changed() {
+		this.revision += 1;
+		this.wake = (this.wake + 1) % COMPUTER_USE_WAKE_LIMIT;
+		this.directEvents.publish(computerUseChannelType, this.sessionId, this.state());
+	}
+	authorized(request, token) {
+		return token !== void 0 && request.headers.get("authorization") === `Bearer ${token}`;
+	}
+	async requestActivation(request) {
+		const caller = doomApiCallerFrom(request.headers);
+		if (caller === void 0 || caller.locality === "remote" && caller.stepUp === "not-required") return jsonError("Not found.", 404);
+		if (this.phase !== "inactive" && this.phase !== "failed") return jsonError("Computer use is already busy.", 409);
+		const input = await body(request);
+		const target = record(input.target);
+		const durationMs = input.durationMs;
+		if (target === void 0 || typeof target.windowId !== "string" || typeof target.bundleId !== "string") return jsonError("A Desktop target is required.", 400);
+		if (typeof durationMs !== "number" || !Number.isInteger(durationMs) || durationMs < 1e3 || durationMs > 18e5) return jsonError("The requested duration is invalid.", 400);
+		const createdAt = Date.now();
+		this.activation = Object.freeze({
+			requestId: randomUUID(),
+			target: Object.freeze({ ...target }),
+			durationSeconds: durationMs / 1e3,
+			createdAt,
+			confirmationExpiresAt: createdAt + COMPUTER_USE_CONFIRMATION_WINDOW_MS,
+			caller: Object.freeze({ ...caller })
+		});
+		this.phase = "awaiting_confirmation";
+		this.failure = void 0;
+		this.artifact = void 0;
+		this.changed();
+		return Response.json(this.state(), { status: 202 });
+	}
+	rejectPending(message) {
+		const pending = this.pending;
+		if (pending === void 0) return;
+		this.pending = void 0;
+		pending.dispose();
+		pending.reject(new Error(message));
+	}
+	stopAfterUncertainRequest(message) {
+		if (this.phase === "active") {
+			this.phase = "stopping";
+			this.changed();
+		}
+		this.rejectPending(message);
+	}
+	async enqueue(operation, payload, signal) {
+		if (this.phase !== "active" || this.grantId === void 0) return jsonError("Computer use is not active.", 409);
+		if (this.pending !== void 0) return jsonError("Another computer-use request is live.", 409);
+		if (signal?.aborted === true) return jsonError("The computer-use request was cancelled.", 499);
+		const sequence = operation === "act" ? ++this.actionSequence : void 0;
+		const request = {
+			id: randomUUID(),
+			operation,
+			grantId: this.grantId,
+			...sequence === void 0 ? {} : { sequence },
+			...payload === void 0 ? {} : { payload }
+		};
+		const completion = new Promise((resolve, reject) => {
+			const onAbort = () => this.stopAfterUncertainRequest("The computer-use request was cancelled.");
+			const timer = setTimeout(() => this.stopAfterUncertainRequest("The computer-use request timed out."), this.requestTimeoutMs);
+			timer.unref?.();
+			signal?.addEventListener("abort", onAbort, { once: true });
+			this.pending = {
+				request,
+				resolve,
+				reject,
+				dispose: () => {
+					clearTimeout(timer);
+					signal?.removeEventListener("abort", onAbort);
+				}
+			};
+		});
+		this.changed();
+		try {
+			return Response.json(await completion);
+		} catch (error) {
+			return jsonError(error instanceof Error ? error.message : String(error), 502);
+		}
+	}
+	async fetch(request) {
+		if (this.closed) return jsonError("Computer-use broker is closed.", 503);
+		const path = new URL(request.url).pathname;
+		if (request.method === "POST" && path === apiRoutes_default.activate.path) return this.requestActivation(request);
+		const agent = path.startsWith("/agent/");
+		const hub = path.startsWith("/hub/");
+		if (agent && !this.authorized(request, this.internalToken) || hub && !this.authorized(request, this.hubToken)) return jsonError("Not found.", 404);
+		if (request.method === "GET" && (path === apiRoutes_default.agentState.path || path === apiRoutes_default.hubState.path)) return Response.json(this.state());
+		if (request.method === "POST" && path === apiRoutes_default.agentObserve.path) return this.enqueue("observe", void 0, request.signal);
+		if (request.method === "POST" && path === apiRoutes_default.agentAction.path) {
+			const action = await body(request);
+			if (!semanticAction(action)) return jsonError("A valid semantic action is required.", 400);
+			return this.enqueue("act", action, request.signal);
+		}
+		if (request.method === "POST" && path === apiRoutes_default.agentStop.path) {
+			if (this.phase !== "active") return jsonError("Computer use is not active.", 409);
+			this.phase = "stopping";
+			this.rejectPending("The computer-use request was stopped.");
+			this.changed();
+			return Response.json(this.state(), { status: 202 });
+		}
+		if (request.method === "GET" && path === apiRoutes_default.hubActivation.path) {
+			if (this.activation === void 0 || this.phase !== "awaiting_confirmation") return Response.json(null);
+			this.phase = "activating";
+			this.changed();
+			return Response.json(this.activation);
+		}
+		if (request.method === "GET" && path === apiRoutes_default.hubAuthorization.path) return Response.json(this.grantId === void 0 ? null : {
+			grantId: this.grantId,
+			expiresAt: this.expiresAt
+		});
+		if (request.method === "GET" && path === apiRoutes_default.hubNext.path) return Response.json(this.pending?.request ?? null);
+		if (request.method === "POST" && path === apiRoutes_default.hubComplete.path) {
+			const input = await body(request);
+			const id = typeof input.id === "string" ? input.id : void 0;
+			if (this.pending === void 0 || this.pending.request.id !== id) return jsonError("The request is stale.", 409);
+			const pending = this.pending;
+			this.pending = void 0;
+			pending.dispose();
+			this.changed();
+			if (typeof input.error === "string") pending.reject(new Error(input.error));
+			else pending.resolve(input.result);
+			return Response.json(this.state());
+		}
+		if (request.method === "POST" && path === apiRoutes_default.hubStop.path) {
+			const input = await body(request);
+			if (this.phase === "activating") {
+				if (typeof input.error === "string") {
+					this.phase = "failed";
+					this.failure = {
+						code: "desktop_unavailable",
+						message: input.error.slice(0, 512)
+					};
+					this.activation = void 0;
+				} else {
+					const host = record(input.host);
+					if (typeof host?.grantId !== "string" || !Number.isFinite(host.expiresAt)) return jsonError("Desktop did not issue a complete grant.", 502);
+					this.grantId = host.grantId;
+					this.expiresAt = host.expiresAt;
+					this.actionSequence = 0;
+					this.phase = "active";
+				}
+			} else {
+				this.rejectPending("The computer-use session stopped.");
+				this.phase = "inactive";
+				this.grantId = void 0;
+				this.expiresAt = void 0;
+				this.activation = void 0;
+				this.artifact = artifactView(input.artifact);
+			}
+			this.changed();
+			return Response.json(this.state());
+		}
+		return jsonError("Not found.", 404);
+	}
+	close() {
+		this.closed = true;
+		this.rejectPending("Computer-use broker closed.");
+		this.grantId = void 0;
+		this.expiresAt = void 0;
+	}
+};
+function createComputerUseApi(options) {
+	return new ComputerUseRequestBroker(options);
+}
+const api = {
+	basePath: API_BASE_PATH,
+	start(context) {
+		if (context.directEvents === void 0) throw new Error("Computer-use API requires the session direct event bus.");
+		return createComputerUseApi({
+			...context.sessionId === void 0 ? {} : { sessionId: context.sessionId },
+			...context.internalToken === void 0 ? {} : { internalToken: context.internalToken },
+			...context.hubToken === void 0 ? {} : { hubToken: context.hubToken },
+			directEvents: context.directEvents
+		});
+	}
+};
+//#endregion
+export { ComputerUseRequestBroker, api, createComputerUseApi };
+
+//# sourceMappingURL=index.mjs.map