@asgard-js/core 0.3.84 → 0.3.86

package/dist/lib/client.d.ts

@@ -1,6 +1,6 @@
 import { EventType } from '../constants/enum';
 import { Observable, Subscription } from 'rxjs';
-import { ChannelMetadata, ClientConfig, IAsgardServiceClient, FetchSsePayload, FetchSseOptions, SseResponse, SseEvents, BlobUploadResponse, ChannelHomeDownloadResult, MessageFeedbackReply, MessageFeedbackRequest, SandboxChannelScope, SandboxFsCopyMoveOptions, SandboxFsCopyResult, SandboxFsListResult, SandboxFsReadOptions, SandboxFsReadResult, SandboxFsStatResult, SandboxFsWatchEvent, SandboxFsWriteOptions, SandboxFsWriteResult, StopGenerationOptions } from '../types';
+import { ChannelMetadata, ClientConfig, IAsgardServiceClient, FetchSsePayload, FetchSseOptions, SseResponse, SseEvents, BlobUploadResponse, ChannelHomeDownloadResult, MessageFeedbackReply, MessageFeedbackRequest, SandboxBrowserSessionCredentials, SandboxChannelScope, SandboxFsCopyMoveOptions, SandboxFsCopyResult, SandboxFsListResult, SandboxFsReadOptions, SandboxFsReadResult, SandboxFsStatResult, SandboxFsWatchEvent, SandboxFsWriteOptions, SandboxFsWriteResult, StopGenerationOptions } from '../types';
 
 export default class AsgardServiceClient implements IAsgardServiceClient {
     private apiKey?;
@@ -124,6 +124,22 @@ export default class AsgardServiceClient implements IAsgardServiceClient {
      * 呼叫時它會被忽略，但前置 relay 用它做 ownership 證明，缺了就是 `400`。
      */
     generateSandboxBrowserOpenUrl(sandboxName: string, options?: SandboxChannelScope): Promise<string>;
+    /**
+     * F-035 — 取得 sandbox 瀏覽器的串流連線憑證：`POST {base}/sandbox/{sandboxName}/browser/session`
+     * → `{ wsUrl, token }`（envelope 容錯，比照 `generateSandboxBrowserOpenUrl`）。
+     *
+     * 與 `generateSandboxBrowserOpenUrl` 的差別在**誰畫畫面**：那一支拿的是一次性網址、交給新分頁載入
+     * Neko 自己的前端（UC-034，保留不動當 fallback）；這一支拿的是 WebSocket endpoint 與 token，由 SDK
+     * 自己接 WebRTC、自己畫、自己轉送鍵鼠。
+     *
+     * 三件呼叫端必須知道的性質：
+     * - **token 是 Neko 的 session token，不是 Asgard 的。** 權限等同使用者透過舊的 open-url 流程本來就
+     *   能做的事，並隨 sandbox pod 一起消失。
+     * - **token 不在 `wsUrl` 裡**，連線時自己 append `?token=`（瀏覽器的 WebSocket API 不能設 header）。
+     * - **可以重複呼叫**，每次 mint 一個新 session。連線斷掉或 sandbox 重啟後就該重呼，不要留著舊 token
+     *   重試 —— token 沒有 TTL 但存在 Neko 的記憶體裡，pod 一重啟就失效。
+     */
+    createSandboxBrowserSession(sandboxName: string, options?: SandboxChannelScope): Promise<SandboxBrowserSessionCredentials>;
     /**
      * F-021 — 衍生 sandbox fs 端點 base：`{base}/sandbox/{sandboxName}/fs`（namespace / bot-provider 已在 base）。
      */

package/dist/lib/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,YAAY,EACZ,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,WAAW,EACX,SAAS,EACT,kBAAkB,EAClB,yBAAyB,EACzB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,wBAAwB,EACxB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,UAAU,CAAC;AAIlB,OAAO,EAAgC,UAAU,EAAW,YAAY,EAAa,MAAM,MAAM,CAAC;AAClG,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAmB9C,MAAM,CAAC,OAAO,OAAO,mBAAoB,YAAW,oBAAoB;IACtE,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAU;IAC1B,OAAO,CAAC,mBAAmB,CAAC,CAAS;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,WAAW,CAAC,CAAgC;IACpD,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,UAAU,CAAiC;IACnD,OAAO,CAAC,mBAAmB,CAAC,CAAgD;IAC5E,OAAO,CAAC,aAAa,CAAC,CAAyB;gBAEnC,MAAM,EAAE,YAAY;IAkChC,EAAE,CAAC,CAAC,SAAS,MAAM,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI;IAKrE,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,SAAS,CAAC,GAAG,IAAI;IA0CnD,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,YAAY;IAgB3E;;;;OAIG;IACH,SAAS,CAAC,eAAe,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,YAAY;IAmB3E,OAAO,CAAC,6BAA6B;IAMrC;;;;;OAKG;IACG,eAAe,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IA8C/E,OAAO,CAAC,qBAAqB;IAM7B;;;;;;;;;;;;;;;OAeG;IACG,cAAc,CAClB,eAAe,EAAE,MAAM,EACvB,OAAO,CAAC,EAAE,qBAAqB,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GACvD,OAAO,CAAC,IAAI,CAAC;IA4BhB,OAAO,CAAC,qBAAqB;IAM7B;;;;;;;;;;;;;;;OAeG;IACG,aAAa,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB3D,OAAO,CAAC,sBAAsB;IAM9B;;;;;;;;;;OAUG;IACG,mBAAmB,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAgCzF,OAAO,CAAC,MAAM;IA+Cd;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAc5C,OAAO,CAAC,YAAY;IAUpB,KAAK,IAAI,IAAI;IAcb;;;OAGG;IACG,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA4ClF;;;OAGG;IACG,uBAAuB,CAAC,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;IA6ChH;;;;;;;;OAQG;IACG,6BAA6B,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;IA8BxG;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAU/B;;;OAGG;IACH,OAAO,CAAC,YAAY;IAIpB,wFAAwF;IACxF,OAAO,CAAC,UAAU;IASlB;;;OAGG;IACG,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAgBnH;;;OAGG;IACG,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAuBpH;;;OAGG;IACG,cAAc,CAClB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,IAAI,GAAG,MAAM,EACtB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,oBAAoB,CAAC;IA2BhC,qGAAqG;YACvF,gBAAgB;IAmB9B,yDAAyD;IACnD,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAuBnH,0DAA0D;IACpD,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrG,sDAAsD;IAChD,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAItG,sEAAsE;IAChE,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzG,iFAAiF;IAC3E,aAAa,CACjB,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,wBAAwB,GACjC,OAAO,CAAC,mBAAmB,CAAC;IAY/B,2EAA2E;IACrE,aAAa,CACjB,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,wBAAwB,GACjC,OAAO,CAAC,IAAI,CAAC;IAOhB;;;;OAIG;IACH,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,CAAC;IAmCjH;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAM1B;;;OAGG;IACH,OAAO,CAAC,eAAe;CAexB"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,YAAY,EACZ,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,WAAW,EACX,SAAS,EACT,kBAAkB,EAClB,yBAAyB,EACzB,oBAAoB,EACpB,sBAAsB,EACtB,gCAAgC,EAChC,mBAAmB,EACnB,wBAAwB,EACxB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,UAAU,CAAC;AAIlB,OAAO,EAAgC,UAAU,EAAW,YAAY,EAAa,MAAM,MAAM,CAAC;AAClG,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAmB9C,MAAM,CAAC,OAAO,OAAO,mBAAoB,YAAW,oBAAoB;IACtE,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAU;IAC1B,OAAO,CAAC,mBAAmB,CAAC,CAAS;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,WAAW,CAAC,CAAgC;IACpD,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,UAAU,CAAiC;IACnD,OAAO,CAAC,mBAAmB,CAAC,CAAgD;IAC5E,OAAO,CAAC,aAAa,CAAC,CAAyB;gBAEnC,MAAM,EAAE,YAAY;IAkChC,EAAE,CAAC,CAAC,SAAS,MAAM,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI;IAKrE,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,SAAS,CAAC,GAAG,IAAI;IA0CnD,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,YAAY;IAgB3E;;;;OAIG;IACH,SAAS,CAAC,eAAe,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,YAAY;IAmB3E,OAAO,CAAC,6BAA6B;IAMrC;;;;;OAKG;IACG,eAAe,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IA8C/E,OAAO,CAAC,qBAAqB;IAM7B;;;;;;;;;;;;;;;OAeG;IACG,cAAc,CAClB,eAAe,EAAE,MAAM,EACvB,OAAO,CAAC,EAAE,qBAAqB,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GACvD,OAAO,CAAC,IAAI,CAAC;IA4BhB,OAAO,CAAC,qBAAqB;IAM7B;;;;;;;;;;;;;;;OAeG;IACG,aAAa,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB3D,OAAO,CAAC,sBAAsB;IAM9B;;;;;;;;;;OAUG;IACG,mBAAmB,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAgCzF,OAAO,CAAC,MAAM;IA+Cd;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAc5C,OAAO,CAAC,YAAY;IAUpB,KAAK,IAAI,IAAI;IAcb;;;OAGG;IACG,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA4ClF;;;OAGG;IACG,uBAAuB,CAAC,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;IA6ChH;;;;;;;;OAQG;IACG,6BAA6B,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;IA8BxG;;;;;;;;;;;;;;OAcG;IACG,2BAA2B,CAC/B,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,gCAAgC,CAAC;IAiC5C;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAU/B;;;OAGG;IACH,OAAO,CAAC,YAAY;IAIpB,wFAAwF;IACxF,OAAO,CAAC,UAAU;IASlB;;;OAGG;IACG,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAgBnH;;;OAGG;IACG,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAuBpH;;;OAGG;IACG,cAAc,CAClB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,IAAI,GAAG,MAAM,EACtB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,oBAAoB,CAAC;IA2BhC,qGAAqG;YACvF,gBAAgB;IAmB9B,yDAAyD;IACnD,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAuBnH,0DAA0D;IACpD,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrG,sDAAsD;IAChD,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAItG,sEAAsE;IAChE,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzG,iFAAiF;IAC3E,aAAa,CACjB,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,wBAAwB,GACjC,OAAO,CAAC,mBAAmB,CAAC;IAY/B,2EAA2E;IACrE,aAAa,CACjB,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,wBAAwB,GACjC,OAAO,CAAC,IAAI,CAAC;IAOhB;;;;OAIG;IACH,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,CAAC;IAmCjH;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAM1B;;;OAGG;IACH,OAAO,CAAC,eAAe;CAexB"}

package/dist/lib/keysym.d.ts

@@ -0,0 +1,84 @@
+/**
+ * X11 keysyms for the keys that have no arithmetic rule — function keys, navigation, modifiers.
+ *
+ * Printable characters are **not** in here; they follow the two rules in `charToKeysym`. F5 and F12 are
+ * listed because driving a remote browser genuinely uses them.
+ */
+export declare const KEYSYM: Readonly<Record<string, number>>;
+/** The modifier keysyms the macOS remap reads and writes. Named so the mapping below is legible. */
+export declare const XK: {
+    readonly ISO_Level3_Shift: 65027;
+    readonly Shift_L: 65505;
+    readonly Mode_switch: 65406;
+    readonly Control_L: 65507;
+    readonly Meta_L: 65511;
+    readonly Alt_L: 65513;
+    readonly Alt_R: 65514;
+    readonly Super_L: 65515;
+    readonly Super_R: 65516;
+};
+/**
+ * One character → one keysym. Two rules, no table:
+ *
+ * 1. At or below `0xFF`, the keysym *is* the code point (ASCII and Latin-1 line up by design).
+ * 2. Above it, `codePoint | 0x01000000`.
+ *
+ * Rule 2 is why **the remote needs no input method installed**: its `XKey()` hands an unknown keysym to
+ * `XkbAddKeyKeysym`, which allocates an empty keycode for it on the spot. Whether the character exists in
+ * the remote keyboard layout is simply not a question that gets asked.
+ */
+export declare function charToKeysym(character: string): number;
+/**
+ * A `KeyboardEvent.key` value → keysym, or `null` when there is no answer.
+ *
+ * Returning `null` rather than a fallback is deliberate: a guessed keysym is indistinguishable from a
+ * correct one until the remote does the wrong thing. Callers should surface the unmapped key (the lab page
+ * lists them) instead of sending something plausible.
+ */
+export declare function keyToKeysym(key: string): number | null;
+/**
+ * Whether a keysym denotes something that turns into text.
+ *
+ * The distinction drives routing, not display: printable characters must travel the IME text path (it is
+ * the only one that can handle composition), while the keysym path carries modifiers and function keys.
+ */
+export declare function isPrintableKeysym(keysym: number): boolean;
+/**
+ * Remap a modifier keysym for the remote's X11 expectations. Identity on every non-macOS platform.
+ *
+ * The one that matters is **⌘ (`Meta_L`) → `Control_L`**: without it, ⌘A and ⌘C do nothing at all on the
+ * remote, because the Chromium over there is waiting for Ctrl. The full table is copied from the upstream
+ * neko client, which in turn credits noVNC / RealVNC / TigerVNC — it is what this class of client does, not
+ * a preference.
+ */
+export declare function mapModifierKeysym(keysym: number, macOS?: boolean): number;
+/**
+ * Ceiling on how many X11 scroll clicks one wheel event may become.
+ *
+ * **Not a sensitivity tuning knob.** The server loops `for (i < abs(delta))` and emits one XTest event per
+ * iteration, so forwarding Chrome's `deltaY = 100` verbatim tells the remote to scroll one hundred times.
+ * 10 is the upstream default.
+ */
+export declare const WHEEL_MAX = 10;
+/** Upstream's wheel throttle window, in milliseconds. Exported so the panel throttles to the same figure. */
+export declare const WHEEL_THROTTLE_MS = 100;
+/** The parts of a `WheelEvent` this conversion needs. Structural, so core never names a DOM type. */
+export interface WheelDelta {
+    deltaX: number;
+    deltaY: number;
+    /** 0 = pixels, 1 = lines, 2 = pages. */
+    deltaMode: number;
+}
+/**
+ * Browser wheel deltas → remote scroll deltas.
+ *
+ * **The sign flips.** A browser's `deltaY > 0` means "content moves down"; X11's positive direction is
+ * button 4, which is *up*. The two conventions are opposites. Upstream neko exposes this as a
+ * `scroll_invert` *setting*, which makes it look like taste — but its default is `true`, i.e. everybody is
+ * running the inverted value, because the un-inverted one is simply wrong.
+ */
+export declare function normalizeWheel(event: WheelDelta): {
+    x: number;
+    y: number;
+};
+//# sourceMappingURL=keysym.d.ts.map

package/dist/lib/keysym.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keysym.d.ts","sourceRoot":"","sources":["../../src/lib/keysym.ts"],"names":[],"mappings":"AAUA;;;;;GAKG;AACH,eAAO,MAAM,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAkC1C,CAAC;AAEX,oGAAoG;AACpG,eAAO,MAAM,EAAE;;;;;;;;;;CAUL,CAAC;AAKX;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAItD;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQtD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEzD;AAaD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,GAAE,OAA2B,GAAG,MAAM,CAiB5F;AAQD;;;;;;GAMG;AACH,eAAO,MAAM,SAAS,KAAK,CAAC;AAE5B,6GAA6G;AAC7G,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAErC,qGAAqG;AACrG,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE,CAO1E"}

package/dist/lib/keysym.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=keysym.spec.d.ts.map

package/dist/lib/keysym.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keysym.spec.d.ts","sourceRoot":"","sources":["../../src/lib/keysym.spec.ts"],"names":[],"mappings":""}

package/dist/lib/sandbox-browser-transport.d.ts

@@ -0,0 +1,30 @@
+import { SandboxBrowserSessionCredentials, SandboxBrowserTransport } from '../types/sandbox-browser';
+
+/**
+ * Decode one data-channel frame into a cursor position, or `null` if it is not one.
+ *
+ * Exported for its own unit test: the frame layout is three big-endian reads at fixed offsets, and getting
+ * one offset wrong puts the remote cursor somewhere plausible but wrong — which looks like a rendering bug,
+ * not a decoding one.
+ */
+export declare function decodeCursorFrame(data: ArrayBuffer): {
+    x: number;
+    y: number;
+} | null;
+/** How the transport obtains `{ wsUrl, token }`. Injected so the lab can swap in a direct Neko login. */
+export type SandboxBrowserCredentialSource = (sandboxName: string) => Promise<SandboxBrowserSessionCredentials>;
+export interface SandboxBrowserTransportOptions {
+    /** Mints connection credentials — normally `client.createSandboxBrowserSession.bind(client)`. */
+    createSession: SandboxBrowserCredentialSource;
+    /** Display name announced in `signal/answer`. Cosmetic; shows up in Neko's member list. */
+    displayName?: string;
+}
+/**
+ * Build a transport over the Neko protocol.
+ *
+ * Credentials are fetched per `connect()` call rather than cached, which is what makes reconnection
+ * correct: the token has no TTL but lives in the server's memory, so a pod restart invalidates it, and
+ * retrying with the old one fails in a way that looks like a network problem (spec §7.10).
+ */
+export declare function createSandboxBrowserTransport(options: SandboxBrowserTransportOptions): SandboxBrowserTransport;
+//# sourceMappingURL=sandbox-browser-transport.d.ts.map

package/dist/lib/sandbox-browser-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-browser-transport.d.ts","sourceRoot":"","sources":["../../src/lib/sandbox-browser-transport.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAKV,gCAAgC,EAChC,uBAAuB,EAExB,MAAM,0BAA0B,CAAC;AAyClC;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,GAAG;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAOpF;AAED,yGAAyG;AACzG,MAAM,MAAM,8BAA8B,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,gCAAgC,CAAC,CAAC;AAEhH,MAAM,WAAW,8BAA8B;IAC7C,iGAAiG;IACjG,aAAa,EAAE,8BAA8B,CAAC;IAC9C,2FAA2F;IAC3F,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,8BAA8B,GAAG,uBAAuB,CA0R9G"}

package/dist/lib/sandbox-browser-transport.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sandbox-browser-transport.spec.d.ts.map

package/dist/lib/sandbox-browser-transport.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-browser-transport.spec.d.ts","sourceRoot":"","sources":["../../src/lib/sandbox-browser-transport.spec.ts"],"names":[],"mappings":""}

package/dist/types/index.d.ts

@@ -7,6 +7,7 @@ export type * from './subagent';
 export type * from './event-emitter';
 export type * from './blob';
 export type * from './sandbox-fs';
+export type * from './sandbox-browser';
 export type * from './source-set-fs';
 export { HttpError, isHttpError } from './http-error';
 export { ChannelBusyError, isChannelBusyError } from './channel-busy-error';

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,QAAQ,CAAC;AAC5B,mBAAmB,UAAU,CAAC;AAC9B,mBAAmB,WAAW,CAAC;AAC/B,mBAAmB,gBAAgB,CAAC;AACpC,mBAAmB,QAAQ,CAAC;AAC5B,mBAAmB,YAAY,CAAC;AAChC,mBAAmB,iBAAiB,CAAC;AACrC,mBAAmB,QAAQ,CAAC;AAC5B,mBAAmB,cAAc,CAAC;AAClC,mBAAmB,iBAAiB,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,QAAQ,CAAC;AAC5B,mBAAmB,UAAU,CAAC;AAC9B,mBAAmB,WAAW,CAAC;AAC/B,mBAAmB,gBAAgB,CAAC;AACpC,mBAAmB,QAAQ,CAAC;AAC5B,mBAAmB,YAAY,CAAC;AAChC,mBAAmB,iBAAiB,CAAC;AACrC,mBAAmB,QAAQ,CAAC;AAC5B,mBAAmB,cAAc,CAAC;AAClC,mBAAmB,mBAAmB,CAAC;AACvC,mBAAmB,iBAAiB,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/types/sandbox-browser.d.ts

@@ -0,0 +1,131 @@
+/**
+ * Connection credentials from `POST …/sandbox/{name}/browser/session`.
+ *
+ * The token is **Neko's** session token, not Asgard's: it grants exactly what the user could already do
+ * through the older open-url flow, and it dies with the sandbox pod. It is a separate field from `wsUrl`
+ * rather than pre-baked into it — partly because the caller has to append it as a query parameter anyway
+ * (browsers cannot set headers on a WebSocket), partly so the credential never ends up inside a string
+ * that something else might log as a URL.
+ */
+export interface SandboxBrowserSessionCredentials {
+    /** The Neko WebSocket endpoint, e.g. `wss://…/api/ws`. Carries no token. */
+    wsUrl: string;
+    /** Neko session token, appended by the transport as `?token=…`. */
+    token: string;
+}
+/**
+ * Who currently holds the remote keyboard and mouse.
+ *
+ * The only authority is the server's `control/host` event — never a local optimistic guess. A UI that
+ * believes it has control when it does not is this panel's worst failure mode: the user clicks and types
+ * at a picture while the server silently discards everything (spec §6 — a refused `control/request`
+ * produces no client-visible error at all).
+ *
+ * - `me` — this session is the host.
+ * - `agent` — somebody else is (the agent, or another person who took over).
+ * - `none` — nobody holds it.
+ */
+export type BrowserHost = 'me' | 'agent' | 'none';
+/** Where the connection is. `live` means media is flowing; it does **not** mean the picture has dimensions yet. */
+export type BrowserStatus = 'idle' | 'connecting' | 'live' | 'error';
+/** One pointer action, already converted to remote desktop coordinates by the caller. */
+export interface RemotePointerEvent {
+    type: 'move' | 'down' | 'up' | 'scroll';
+    x: number;
+    y: number;
+    /** X11 button code — 1 left, 2 middle, 3 right (= JS `button + 1`). Present for `down` / `up`. */
+    button?: number;
+    /** Normalized scroll delta (see `normalizeWheel`). Present for `scroll`. */
+    deltaX?: number;
+    deltaY?: number;
+}
+/**
+ * One key action.
+ *
+ * `down` / `up` carry a keysym the **caller** already computed, because turning a browser `KeyboardEvent`
+ * into an X11 keysym is notoriously hard (cross-browser differences, keyboard layouts, modifier chords)
+ * and is therefore delegated to Guacamole's keyboard in the react package. Core does not guess.
+ *
+ * `text` carries a string the IME already composed; the transport converts it to Unicode keysyms itself,
+ * which is how CJK reaches a remote desktop that has no input method installed at all.
+ */
+export interface RemoteKeyEvent {
+    type: 'down' | 'up' | 'text';
+    /** For `down` / `up`: the X11 keysym, modifier remapping already applied. */
+    keysym?: number;
+    /** For `text`: the composed string. */
+    text?: string;
+}
+/** A remote desktop coordinate, used for the cursor the server streams over the data channel. */
+export interface RemoteCursorPosition {
+    x: number;
+    y: number;
+}
+/** Callbacks a transport reports into. All optional ones are genuinely optional — a headless consumer can skip them. */
+export interface SandboxBrowserTransportHandlers {
+    /** The media stream reached `ontrack`. */
+    onStream: (stream: MediaStream) => void;
+    /** Control changed hands. Fires with the server's view, including the initial one from `system/init`. */
+    onHostChange: (host: BrowserHost) => void;
+    /** Connection status moved; `detail` carries a human-readable reason for `error`. */
+    onStatus: (status: BrowserStatus, detail?: string) => void;
+    /**
+     * Position of the remote **X11** pointer, over the data channel — the video stream deliberately omits
+     * the cursor so position updates can outpace video encoding.
+     *
+     * Two consequences worth stating, because both look like bugs otherwise. The server does not send this
+     * to whoever holds control (that person has a zero-latency local cursor already). And the agent does not
+     * move the X11 pointer at all: it drives Chromium over CDP, whose input events are injected into the
+     * renderer and never reach X11. So while the agent works, this never fires — what the user sees change
+     * is the page content itself. This exists so that *another person* holding control has a visible pointer.
+     */
+    onRemoteCursor?: (position: RemoteCursorPosition | null) => void;
+    /**
+     * The remote clipboard changed. **Only the control holder receives this** — the server looks up the host
+     * first and skips everyone else. A viewer seeing nothing here is the design, not a fault.
+     */
+    onClipboardChange?: (text: string) => void;
+    /**
+     * Every WebSocket frame, both directions — for diagnostics harnesses (the neko lab page). `control/move`
+     * is excluded by the transport because its volume drowns out everything else.
+     */
+    onWire?: (direction: 'send' | 'recv', event: string, payload?: unknown) => void;
+}
+/** An established connection. Unusable once `close()` has been called. */
+export interface SandboxBrowserSession {
+    /** Ask to take over. The server answers with `control/host` — or, if it refuses, with nothing at all. */
+    requestControl: () => void;
+    /** Give control back. */
+    releaseControl: () => void;
+    sendPointer: (event: RemotePointerEvent) => void;
+    sendKey: (event: RemoteKeyEvent) => void;
+    /**
+     * Write the local clipboard into the **remote** clipboard without pasting anything. Needed so the remote
+     * page's own paste affordances (its right-click menu, its JavaScript) have something to read — not just
+     * the one chord we can intercept. Requires control; the server rejects it silently otherwise.
+     */
+    setClipboard: (text: string) => void;
+    /**
+     * Have the remote perform a paste: the server sets the clipboard and synthesizes Ctrl+V **itself**.
+     *
+     * Going through the server rather than forwarding the user's ⌘V sidesteps two separate problems at once —
+     * the macOS Meta↔Control remap, and the browser swallowing a chorded character before `input` fires. It
+     * is also the only route that works in an iOS / Android WebView, where physical key interception is not
+     * reliable.
+     */
+    paste: (text: string) => void;
+    /** Tear down: heartbeat timer, peer connection, socket. */
+    close: () => void;
+}
+/**
+ * The seam between "draw the picture" and "carry the protocol".
+ *
+ * The panel holds one of these and knows nothing below it. The production implementation fetches session
+ * credentials and negotiates WebRTC; a demo implementation can hand back a canvas `captureStream()`; the
+ * neko lab swaps in a direct-login variant. Same component above all three, which is the check that this
+ * line was drawn in the right place.
+ */
+export interface SandboxBrowserTransport {
+    connect: (sandboxName: string, handlers: SandboxBrowserTransportHandlers) => Promise<SandboxBrowserSession>;
+}
+//# sourceMappingURL=sandbox-browser.d.ts.map

package/dist/types/sandbox-browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-browser.d.ts","sourceRoot":"","sources":["../../src/types/sandbox-browser.ts"],"names":[],"mappings":"AASA;;;;;;;;GAQG;AACH,MAAM,WAAW,gCAAgC;IAC/C,4EAA4E;IAC5E,KAAK,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,WAAW,GAAG,IAAI,GAAG,OAAO,GAAG,MAAM,CAAC;AAElD,mHAAmH;AACnH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,YAAY,GAAG,MAAM,GAAG,OAAO,CAAC;AAErE,yFAAyF;AACzF,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,QAAQ,CAAC;IACxC,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,kGAAkG;IAClG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC;IAC7B,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,iGAAiG;AACjG,MAAM,WAAW,oBAAoB;IACnC,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;CACX;AAED,wHAAwH;AACxH,MAAM,WAAW,+BAA+B;IAC9C,0CAA0C;IAC1C,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,CAAC;IACxC,yGAAyG;IACzG,YAAY,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;IAC1C,qFAAqF;IACrF,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3D;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,oBAAoB,GAAG,IAAI,KAAK,IAAI,CAAC;IACjE;;;OAGG;IACH,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C;;;OAGG;IACH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;CACjF;AAED,0EAA0E;AAC1E,MAAM,WAAW,qBAAqB;IACpC,yGAAyG;IACzG,cAAc,EAAE,MAAM,IAAI,CAAC;IAC3B,yBAAyB;IACzB,cAAc,EAAE,MAAM,IAAI,CAAC;IAC3B,WAAW,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,CAAC;IACjD,OAAO,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;IACzC;;;;OAIG;IACH,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC;;;;;;;OAOG;IACH,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9B,2DAA2D;IAC3D,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,+BAA+B,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;CAC7G"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@asgard-js/core",
-  "version": "0.3.84",
+  "version": "0.3.86",
   "dependencies": {
     "@microsoft/fetch-event-source": "^2.0.1",
     "rxjs": "^7.8.1",