@livedesk/hub 0.1.66 → 0.1.68

package/src/server.js

@@ -35,6 +35,11 @@ import {
   isReusedLiveStreamFrameReady
 } from './live-stream-monitor-contract.js';
 import { createLiveCaptureTransitionRetryCoordinator } from './live-capture-transition-retry.mjs';
+import {
+  selectSharedWallSourceProfile,
+  shouldRetainWallOwnerUntilPendingStartCommits,
+  wallBindingMatchesFailedOwner
+} from './shared-wall-profile-contract.mjs';
 import {
   createPlanDeviceAccessSnapshot,
   partitionPlanDeviceIds,
@@ -61,7 +66,7 @@ import { LiveDeskSettingsStore, SettingsConflictError } from './settings/setting
 import { effectiveDevicePolicy } from './settings/settings-schema.js';
 import { buildEffectiveDevicePolicy } from './settings/effective-device-policy.js';
 import { CaptureStore } from './captures/capture-store.js';
-import { createLiveDeskUpdateManager } from './live-desk-update.js';
+import { createVuvoDeskUpdateManager } from './vuvodesk-update.js';
 import { createHubUdpTransport } from './transport/udp-hub-transport.js';
 import { normalizeRuntimeAuthSession, runtimeRoleError } from '../../runtime-core/src/index.js';
 import { fetchAuthResponse, AUTH_REQUEST_TIMEOUT_MS } from '../../runtime-core/src/auth-http.js';
@@ -435,7 +440,25 @@ function handleRemoteHubEvent(type, event) {
     || type === 'RemoteLiveStreamStopped') {
     const liveStreamEventDeviceId = String(event?.deviceId || event?.device?.deviceId || '').trim();
     const liveStreamEventPurpose = readRemoteLiveStreamEventPurpose(event);
-    if ((type === 'RemoteLiveStreamStarted' || type === 'RemoteLiveStreamOpened')
+    if (type === 'RemoteLiveStreamOpened' && liveStreamEventPurpose === 'wall') {
+      const committedOwner = event?.device?.activeLiveStream;
+      if (String(committedOwner?.commandId || '').trim() === String(event?.commandId || '').trim()
+        && Number(committedOwner?.captureGeneration || 0) === Number(event?.captureGeneration || 0)) {
+        rebindSharedWallSubscribersToOwner(liveStreamEventDeviceId, {
+          ...committedOwner,
+          sessionId: event?.device?.sessionId || ''
+        }, {
+          effectiveProfile: {
+            fps: Number(committedOwner?.fps || 0),
+            maxWidth: Number(committedOwner?.maxWidth || 0),
+            maxHeight: Number(committedOwner?.maxHeight || 0),
+            quality: Number(committedOwner?.quality || 0)
+          },
+          readySent: false,
+          reason: 'shared-wall-profile-upgrade-committed'
+        });
+      }
+    } else if ((type === 'RemoteLiveStreamStarted' || type === 'RemoteLiveStreamOpened')
       && liveStreamEventPurpose === 'control') {
       readOnlyControlPresentationReconcileCoordinator
         .cancelForControlTransition(liveStreamEventDeviceId);
@@ -449,6 +472,37 @@ function handleRemoteHubEvent(type, event) {
         .scheduleAfterConfirmedStop(liveStreamEventDeviceId);
     }
   }
+  if (type === 'RemoteLiveStreamRestartFailed') {
+    const failedDeviceId = String(event?.deviceId || event?.device?.deviceId || '').trim();
+    const retainedOwner = event?.device?.activeLiveStream;
+    if (String(retainedOwner?.streamPurpose || '').trim().toLowerCase() === 'wall') {
+      const rebound = rebindSharedWallSubscribersToOwner(failedDeviceId, {
+        ...retainedOwner,
+        sessionId: event?.device?.sessionId || ''
+      }, {
+        effectiveProfile: {
+          fps: Number(retainedOwner?.fps || 0),
+          maxWidth: Number(retainedOwner?.maxWidth || 0),
+          maxHeight: Number(retainedOwner?.maxHeight || 0),
+          quality: Number(retainedOwner?.quality || 0)
+        },
+        readySent: true,
+        replaceOnlyOwner: {
+          commandId: event?.commandId || '',
+          captureGeneration: Number(event?.captureGeneration || 0)
+        },
+        reason: 'shared-wall-profile-upgrade-failed'
+      });
+      console.warn(
+        `[VuvoDesk Hub] Wall replacement failed device=${failedDeviceId} `
+        + `attemptedCommand=${String(event?.commandId || '').slice(0, 8) || '-'} `
+        + `attemptedGeneration=${Number(event?.captureGeneration || 0)} `
+        + `retainedCommand=${String(event?.retainedCommandId || retainedOwner?.commandId || '').slice(0, 8) || '-'} `
+        + `retainedGeneration=${Number(event?.retainedCaptureGeneration || retainedOwner?.captureGeneration || 0)} `
+        + `rebound=${rebound} error=${String(event?.error || 'stream-start-failed').slice(0, 160)}`
+      );
+    }
+  }
   if (type === 'RemoteDeviceConnected' || type === 'RemoteDeviceDisconnected') {
     connectedDeviceCount = Number(remoteHub.getStatus({ includeSecrets: false }).connectedDeviceCount || 0);
     refreshPlanDeviceAccess(type === 'RemoteDeviceConnected' ? 'device-connected' : 'device-disconnected');
@@ -1256,7 +1310,7 @@ function getLiveDeskUpdateStatus() {
 }
 
 const electronDesktopOwnsSelfUpdate = process.env.LIVEDESK_DESKTOP_HOST === '1';
-liveDeskUpdateManager = createLiveDeskUpdateManager({
+liveDeskUpdateManager = createVuvoDeskUpdateManager({
   remoteHub,
   currentManagerVersion: process.env.LIVEDESK_MANAGER_VERSION || packageInfo.version,
   currentClientVersion: process.env.LIVEDESK_CLIENT_PACKAGE_VERSION || '',
@@ -2591,7 +2645,7 @@ function hasOtherFrameStreamOwner(ws, deviceId, streamId, streamPurpose = '') {
   return false;
 }
 
-function hasOtherFrameStreamDemand(ws, deviceId, streamPurpose = '') {
+function hasOtherFrameStreamDemand(ws, deviceId, streamPurpose = '') {
   const normalizedPurpose = String(streamPurpose || '').trim().toLowerCase();
   if (!deviceId || !normalizedPurpose) {
     return false;
@@ -2608,8 +2662,137 @@ function hasOtherFrameStreamDemand(ws, deviceId, streamPurpose = '') {
       return true;
     }
   }
-  return false;
-}
+  return false;
+}
+
+function frameClientMonitorIndex(ws, deviceId, liveOptions = ws?.liveDeskLiveOptions || {}) {
+  return Object.prototype.hasOwnProperty.call(liveOptions.monitorSelections || {}, deviceId)
+    ? normalizeMonitorIndex(liveOptions.monitorSelections[deviceId])
+    : normalizeMonitorIndex(liveOptions.monitorIndex);
+}
+
+function resolveSharedWallSourceDemand(ws, deviceId, liveOptions, monitorIndex) {
+  const requestedMode = String(liveOptions?.frameMode || liveOptions?.mode || '').trim().toLowerCase();
+  const requestedPurpose = String(liveOptions?.streamPurpose || '').trim().toLowerCase();
+  const requestedMonitorIndex = normalizeMonitorIndex(monitorIndex);
+  const demands = [{
+    fps: liveOptions?.fps,
+    maxWidth: liveOptions?.maxWidth,
+    maxHeight: liveOptions?.maxHeight,
+    quality: liveOptions?.quality
+  }];
+  if (requestedPurpose === 'wall') {
+    for (const candidate of frameClients) {
+      const candidateOptions = candidate?.liveDeskLiveOptions;
+      if (candidate === ws
+        || candidate?.readyState !== candidate?.OPEN
+        || candidate?.liveDeskAutoStart !== true
+        || !(candidate.liveDeskDeviceIds instanceof Set)
+        || !candidate.liveDeskDeviceIds.has(deviceId)
+        || String(candidateOptions?.streamPurpose || '').trim().toLowerCase() !== 'wall'
+        || String(candidateOptions?.frameMode || candidateOptions?.mode || '').trim().toLowerCase()
+          !== requestedMode
+        || frameClientMonitorIndex(candidate, deviceId, candidateOptions) !== requestedMonitorIndex) {
+        continue;
+      }
+      demands.push({
+        fps: candidateOptions.fps,
+        maxWidth: candidateOptions.maxWidth,
+        maxHeight: candidateOptions.maxHeight,
+        quality: candidateOptions.quality
+      });
+    }
+  }
+  return {
+    ...selectSharedWallSourceProfile(demands),
+    // Keep the strongest healthy generation until the final Wall viewer
+    // releases it. This prevents a lone late low-rate refresh from undoing a
+    // 30 fps upgrade and makes start order irrelevant.
+    preserveDominantProfile: requestedPurpose === 'wall'
+  };
+}
+
+function rebindSharedWallSubscribersToOwner(deviceId, owner, {
+  effectiveProfile = null,
+  readySent = false,
+  replaceOnlyOwner = null,
+  reason = 'shared-wall-profile-owner-changed'
+} = {}) {
+  const normalizedDeviceId = String(deviceId || '').trim();
+  const sessionId = String(owner?.sessionId || owner?.device?.sessionId || '').trim();
+  const streamId = String(owner?.streamId || '').trim();
+  const commandId = String(owner?.commandId || '').trim();
+  const captureGeneration = Number(owner?.captureGeneration || 0);
+  const monitorIndex = normalizeMonitorIndex(owner?.monitorIndex);
+  const frameMode = String(owner?.frameMode || owner?.mode || '').trim().toLowerCase();
+  const streamPurpose = String(owner?.streamPurpose || '').trim().toLowerCase();
+  if (!normalizedDeviceId
+    || !sessionId
+    || !streamId
+    || !commandId
+    || !Number.isSafeInteger(captureGeneration)
+    || captureGeneration <= 0
+    || streamPurpose !== 'wall') {
+    return 0;
+  }
+  let rebound = 0;
+  const candidates = new Set([
+    ...(frameClientsByDeviceId.get(normalizedDeviceId) || []),
+    ...frameWildcardClients
+  ]);
+  for (const candidate of candidates) {
+    const candidateOptions = candidate?.liveDeskLiveOptions;
+    if (candidate?.readyState !== candidate?.OPEN
+      || candidate?.liveDeskAutoStart !== true
+      || !(candidate.liveDeskDeviceIds instanceof Set)
+      || !candidate.liveDeskDeviceIds.has(normalizedDeviceId)
+      || String(candidateOptions?.streamPurpose || '').trim().toLowerCase() !== 'wall'
+      || String(candidateOptions?.frameMode || candidateOptions?.mode || '').trim().toLowerCase()
+        !== frameMode
+      || frameClientMonitorIndex(candidate, normalizedDeviceId, candidateOptions) !== monitorIndex) {
+      continue;
+    }
+    const previousBinding = candidate.liveDeskExpectedStreamBindingsByDeviceId instanceof Map
+      ? candidate.liveDeskExpectedStreamBindingsByDeviceId.get(normalizedDeviceId)
+      : null;
+    if (!previousBinding || previousBinding.readOnlyControlBorrow === true) continue;
+    if (replaceOnlyOwner && !wallBindingMatchesFailedOwner(previousBinding, replaceOnlyOwner)) continue;
+    const nextBinding = {
+      deviceId: normalizedDeviceId,
+      sessionId,
+      streamId,
+      streamPurpose: 'wall',
+      commandId,
+      captureGeneration,
+      monitorIndex,
+      readOnlyControlBorrow: false,
+      presentationPurpose: '',
+      effectiveProfile,
+      readySent: readySent === true
+    };
+    const previousIdentity = frameLaneBindingIdentity(previousBinding);
+    const nextIdentity = replaceExpectedFrameBindingForClient(
+      candidate,
+      normalizedDeviceId,
+      nextBinding
+    );
+    if (!nextIdentity || nextIdentity === previousIdentity) continue;
+    candidate.liveDeskStreamIdsByDeviceId?.set?.(normalizedDeviceId, streamId);
+    candidate.liveDeskSharedProfileUpgradeCount = Math.max(
+      0,
+      Number(candidate.liveDeskSharedProfileUpgradeCount || 0)
+    ) + 1;
+    rebound += 1;
+  }
+  if (rebound > 0) {
+    console.log(
+      `[VuvoDesk Hub] rebound ${rebound} Wall browser lane(s) device=${normalizedDeviceId} `
+      + `generation=${captureGeneration} profile=${Number(effectiveProfile?.fps || owner?.fps || 0)}fps `
+      + `reason=${String(reason || 'shared-wall-profile-owner-changed')}`
+    );
+  }
+  return rebound;
+}
 
 function frameStreamStopKey(deviceId, streamId, streamPurpose) {
   return `${deviceId}\u0000${streamId}\u0000${streamPurpose}`;
@@ -3004,8 +3187,9 @@ function snapshotFrameLaneResourceHealth() {
           maxWidth: Math.max(0, Number(ws.liveDeskLiveOptions.maxWidth || 0)),
           maxHeight: Math.max(0, Number(ws.liveDeskLiveOptions.maxHeight || 0)),
           quality: Math.max(0, Number(ws.liveDeskLiveOptions.quality || 0))
-        } : null,
-        sharedProfileReuseCount: Math.max(0, Number(ws.liveDeskSharedProfileReuseCount || 0)),
+        } : null,
+        sharedProfileReuseCount: Math.max(0, Number(ws.liveDeskSharedProfileReuseCount || 0)),
+        sharedProfileUpgradeCount: Math.max(0, Number(ws.liveDeskSharedProfileUpgradeCount || 0)),
         queueDepth: Math.max(0, Number(lane?.queue?.length || 0)),
         queueLimit: frameClientQueueLimit(ws),
         queueHighWaterPackets: Math.max(0, Number(lane?.queuedPacketsHighWater || 0)),
@@ -3810,12 +3994,33 @@ function startFrameSubscriptionLive(
       skipped.push({ deviceId, reason: device?.connected ? 'live-unavailable' : 'not-connected' });
       continue;
     }
-    const monitorIndex = Object.prototype.hasOwnProperty.call(liveOptions.monitorSelections || {}, deviceId)
-      ? liveOptions.monitorSelections[deviceId]
-      : liveOptions.monitorIndex;
+    const monitorIndex = Object.prototype.hasOwnProperty.call(liveOptions.monitorSelections || {}, deviceId)
+      ? liveOptions.monitorSelections[deviceId]
+      : liveOptions.monitorIndex;
+    const sharedWallSourceProfile = resolveSharedWallSourceDemand(
+      ws,
+      deviceId,
+      liveOptions,
+      monitorIndex
+    );
+    const sourceLiveOptions = sharedWallSourceProfile.preserveDominantProfile
+      ? {
+          ...liveOptions,
+          fps: sharedWallSourceProfile.fps,
+          maxWidth: sharedWallSourceProfile.maxWidth,
+          maxHeight: sharedWallSourceProfile.maxHeight,
+          quality: sharedWallSourceProfile.quality
+        }
+      : liveOptions;
     const result = remoteHub.startLiveStream(deviceId, {
-      ...liveOptions,
+      ...sourceLiveOptions,
       monitorIndex,
+      subscriberRequestedProfile: {
+        fps: liveOptions.fps,
+        maxWidth: liveOptions.maxWidth,
+        maxHeight: liveOptions.maxHeight,
+        quality: liveOptions.quality
+      },
       reuseExisting: liveOptions.forceRestart !== true
         && (liveOptions.reuseExisting === true || reason === 'subscribe' || reason === 'watchdog'),
       // Wall capture is one shared native encoder per device. Two open browser
@@ -3825,7 +4030,8 @@ function startFrameSubscriptionLive(
       // and forth every time either view refreshes its subscription.
       reuseSharedExisting: liveOptions.forceRestart !== true
         && String(liveOptions.streamPurpose || '').trim().toLowerCase() === 'wall'
-        && hasOtherFrameStreamDemand(ws, deviceId, 'wall'),
+        && (hasOtherFrameStreamDemand(ws, deviceId, 'wall')
+          || sharedWallSourceProfile.preserveDominantProfile === true),
       silentReuse: reason === 'watchdog' && liveOptions.forceRestart !== true
     });
     if (liveOptions.forceRestart === true) {
@@ -3834,35 +4040,71 @@ function startFrameSubscriptionLive(
         `[VuvoDesk Hub] browser frame recovery client=${String(ws.liveDeskFrameClientId || '-')} device=${deviceId} purpose=${String(liveOptions.streamPurpose || 'wall')} reason=${String(liveOptions.restartReason || reason || 'browser-stale')} token=${token ? token.slice(0, 12) : '-'} result=${result?.ok ? 'accepted' : String(result?.error || 'failed')} session=${String(result?.sessionId || device?.sessionId || '').slice(0, 8)} stream=${String(result?.streamId || '-')} generation=${Number(result?.captureGeneration || 0)} reused=${result?.reused === true}`
       );
     }
-    if (result?.ok) {
-      if (result.sharedProfileReused === true) {
+    if (result?.ok) {
+      const activeStream = device?.activeLiveStream;
+      const retainWallOwner = shouldRetainWallOwnerUntilPendingStartCommits(
+        result,
+        activeStream
+      );
+      const effectiveWallProfile = String(result.streamPurpose || liveOptions.streamPurpose || '')
+        .trim().toLowerCase() === 'wall'
+        ? {
+            fps: Number(result.effectiveProfile?.fps || sourceLiveOptions.fps || result.fps || 0),
+            maxWidth: Number(result.effectiveProfile?.maxWidth || sourceLiveOptions.maxWidth || 0),
+            maxHeight: Number(result.effectiveProfile?.maxHeight || sourceLiveOptions.maxHeight || 0),
+            quality: Number(result.effectiveProfile?.quality || sourceLiveOptions.quality || 0)
+          }
+        : result.effectiveProfile || null;
+      if (result.reused !== true
+        && retainWallOwner !== true
+        && String(result.streamPurpose || '').trim().toLowerCase() === 'wall') {
+        rebindSharedWallSubscribersToOwner(deviceId, result, {
+          effectiveProfile: effectiveWallProfile,
+          readySent: false,
+          reason: 'shared-wall-profile-upgraded'
+        });
+      }
+      if (result.sharedProfileReused === true) {
         ws.liveDeskSharedProfileReuseCount = Math.max(
           0,
           Number(ws.liveDeskSharedProfileReuseCount || 0)
         ) + 1;
       }
       frameCaptureTransitionRetries.complete(ws, deviceId, intentGeneration, 'capture-started');
+      const bindingOwner = retainWallOwner
+        ? {
+            ...activeStream,
+            sessionId: String(device?.sessionId || result.sessionId || '')
+          }
+        : result;
+      const bindingEffectiveWallProfile = retainWallOwner
+        ? {
+            fps: Number(activeStream?.fps || 0),
+            maxWidth: Number(activeStream?.maxWidth || 0),
+            maxHeight: Number(activeStream?.maxHeight || 0),
+            quality: Number(activeStream?.quality || 0)
+          }
+        : effectiveWallProfile;
       const expectedBinding = {
-        deviceId,
-        sessionId: String(result.sessionId || device.sessionId || ''),
-        streamId: String(result.streamId || ''),
-        streamPurpose: String(result.streamPurpose || liveOptions.streamPurpose || 'wall'),
-        commandId: String(result.commandId || ''),
-        captureGeneration: Number(result.captureGeneration || 0),
-        monitorIndex: Number(result.monitorIndex || 0),
-        readOnlyControlBorrow: result.readOnlyControlBorrow === true,
-        presentationPurpose: result.presentationPurpose === 'wall' ? 'wall' : '',
-        effectiveProfile: result.effectiveProfile || null,
+        deviceId,
+        sessionId: String(bindingOwner?.sessionId || device.sessionId || ''),
+        streamId: String(bindingOwner?.streamId || ''),
+        streamPurpose: String(bindingOwner?.streamPurpose || liveOptions.streamPurpose || 'wall'),
+        commandId: String(bindingOwner?.commandId || ''),
+        captureGeneration: Number(bindingOwner?.captureGeneration || 0),
+        monitorIndex: Number(bindingOwner?.monitorIndex || 0),
+        readOnlyControlBorrow: bindingOwner?.readOnlyControlBorrow === true,
+        presentationPurpose: bindingOwner?.presentationPurpose === 'wall' ? 'wall' : '',
+        effectiveProfile: bindingEffectiveWallProfile,
         readySent: false
-      };
-      const activeStream = device?.activeLiveStream;
+      };
       // A new read-only browser presentation has no decoder history from the
       // already-running Control stream. It must enter through the next exact
       // key frame even when the native owner itself is already ready.
       const reusedFrameReady = expectedBinding.readOnlyControlBorrow !== true
         && isReusedLiveStreamFrameReady(result, activeStream, expectedBinding);
       expectedBinding.readySent = reusedFrameReady;
-      ws.liveDeskStreamIdsByDeviceId.set(deviceId, result.streamId);
+      ws.liveDeskStreamIdsByDeviceId.set(deviceId, expectedBinding.streamId);
       const installedBindingIdentity = replaceExpectedFrameBindingForClient(
         ws,
         deviceId,
@@ -3871,9 +4113,9 @@ function startFrameSubscriptionLive(
       if (!installedBindingIdentity) {
         skipped.push({ deviceId, reason: 'invalid-live-stream-binding' });
         continue;
-      }
+      }
       if (expectedBinding.readOnlyControlBorrow !== true) {
-        cancelPendingFrameStreamStop(deviceId, result.streamId, expectedBinding.streamPurpose);
+        cancelPendingFrameStreamStop(deviceId, expectedBinding.streamId, expectedBinding.streamPurpose);
       }
       started.push({
         deviceId: expectedBinding.deviceId,

package/src/shared-wall-profile-contract.mjs

@@ -0,0 +1,69 @@
+function finiteProfileNumber(value, fallback = 0) {
+  const numeric = Number(value);
+  return Number.isFinite(numeric) && numeric > 0 ? numeric : fallback;
+}
+
+export function selectSharedWallSourceProfile(demands = []) {
+  const profiles = Array.isArray(demands) ? demands.filter(Boolean) : [];
+  if (profiles.length === 0) {
+    return Object.freeze({
+      fps: 0,
+      maxWidth: 0,
+      maxHeight: 0,
+      quality: 0,
+      demandCount: 0
+    });
+  }
+  const selected = profiles.reduce((profile, demand) => ({
+    fps: Math.max(profile.fps, finiteProfileNumber(demand.fps)),
+    maxWidth: Math.max(profile.maxWidth, finiteProfileNumber(demand.maxWidth)),
+    maxHeight: Math.max(profile.maxHeight, finiteProfileNumber(demand.maxHeight)),
+    quality: Math.max(profile.quality, finiteProfileNumber(demand.quality))
+  }), {
+    fps: 0,
+    maxWidth: 0,
+    maxHeight: 0,
+    quality: 0
+  });
+  return Object.freeze({
+    ...selected,
+    demandCount: profiles.length
+  });
+}
+
+export function liveProfileSatisfiesDemand(activeProfile, requestedProfile) {
+  if (!activeProfile || !requestedProfile) return false;
+  return finiteProfileNumber(activeProfile.fps) >= finiteProfileNumber(requestedProfile.fps)
+    && finiteProfileNumber(activeProfile.maxWidth) >= finiteProfileNumber(requestedProfile.maxWidth)
+    && finiteProfileNumber(activeProfile.maxHeight) >= finiteProfileNumber(requestedProfile.maxHeight)
+    && finiteProfileNumber(activeProfile.quality) >= finiteProfileNumber(requestedProfile.quality);
+}
+
+export function shouldRetainWallOwnerUntilPendingStartCommits(startResult, activeOwner) {
+  if (!startResult || startResult.pending !== true || !activeOwner) return false;
+  const startPurpose = String(startResult.streamPurpose || '').trim().toLowerCase();
+  const activePurpose = String(activeOwner.streamPurpose || '').trim().toLowerCase();
+  const startStreamId = String(startResult.streamId || '').trim();
+  const activeStreamId = String(activeOwner.streamId || '').trim();
+  const activeCommandId = String(activeOwner.commandId || '').trim();
+  const activeGeneration = Number(activeOwner.captureGeneration || 0);
+  return startPurpose === 'wall'
+    && activePurpose === 'wall'
+    && !!startStreamId
+    && startStreamId === activeStreamId
+    && !!activeCommandId
+    && Number.isSafeInteger(activeGeneration)
+    && activeGeneration > 0
+    && activeOwner.active === true;
+}
+
+export function wallBindingMatchesFailedOwner(binding, failedOwner) {
+  const commandId = String(failedOwner?.commandId || '').trim();
+  const captureGeneration = Number(failedOwner?.captureGeneration || 0);
+  return !!binding
+    && !!commandId
+    && Number.isSafeInteger(captureGeneration)
+    && captureGeneration > 0
+    && String(binding.commandId || '').trim() === commandId
+    && Number(binding.captureGeneration || 0) === captureGeneration;
+}

package/src/shared-wall-profile-contract.test.mjs

@@ -0,0 +1,99 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import {
+  liveProfileSatisfiesDemand,
+  selectSharedWallSourceProfile,
+  shouldRetainWallOwnerUntilPendingStartCommits,
+  wallBindingMatchesFailedOwner
+} from './shared-wall-profile-contract.mjs';
+
+test('shared Wall source keeps the strongest field from every current viewer', () => {
+  assert.deepEqual(selectSharedWallSourceProfile([
+    { fps: 5, maxWidth: 960, maxHeight: 540, quality: 68 },
+    { fps: 30, maxWidth: 1920, maxHeight: 1080, quality: 75 }
+  ]), {
+    fps: 30,
+    maxWidth: 1920,
+    maxHeight: 1080,
+    quality: 75,
+    demandCount: 2
+  });
+  assert.deepEqual(selectSharedWallSourceProfile([
+    { fps: 5, maxWidth: 3840, maxHeight: 2160, quality: 70 },
+    { fps: 30, maxWidth: 1920, maxHeight: 1080, quality: 80 }
+  ]), {
+    fps: 30,
+    maxWidth: 3840,
+    maxHeight: 2160,
+    quality: 80,
+    demandCount: 2
+  });
+});
+
+test('a shared source is reused only when it satisfies every requested profile field', () => {
+  const high = { fps: 30, maxWidth: 1920, maxHeight: 1080, quality: 75 };
+  const low = { fps: 5, maxWidth: 960, maxHeight: 540, quality: 68 };
+  assert.equal(liveProfileSatisfiesDemand(high, low), true);
+  assert.equal(liveProfileSatisfiesDemand(low, high), false);
+  assert.equal(liveProfileSatisfiesDemand({ ...high, fps: 5 }, high), false);
+});
+
+test('a pending Wall replacement keeps the current browser owner until a real frame commits it', () => {
+  const activeOwner = {
+    active: true,
+    streamId: 'wall-device',
+    streamPurpose: 'wall',
+    commandId: 'wall-command-current',
+    captureGeneration: 41
+  };
+  const pendingStart = {
+    ok: true,
+    pending: true,
+    streamId: 'wall-device',
+    streamPurpose: 'wall',
+    commandId: 'wall-command-pending',
+    captureGeneration: 42
+  };
+  assert.equal(
+    shouldRetainWallOwnerUntilPendingStartCommits(pendingStart, activeOwner),
+    true
+  );
+  assert.equal(
+    shouldRetainWallOwnerUntilPendingStartCommits({ ...pendingStart, pending: false }, activeOwner),
+    false
+  );
+  assert.equal(
+    shouldRetainWallOwnerUntilPendingStartCommits(pendingStart, {
+      ...activeOwner,
+      streamPurpose: 'control'
+    }),
+    false
+  );
+  assert.equal(
+    shouldRetainWallOwnerUntilPendingStartCommits({
+      ...pendingStart,
+      streamId: 'wall-other'
+    }, activeOwner),
+    false
+  );
+});
+
+test('a late failed upgrade cannot rewind a newer Wall binding', () => {
+  const failedOwner = {
+    commandId: 'wall-command-42',
+    captureGeneration: 42
+  };
+  assert.equal(wallBindingMatchesFailedOwner({
+    commandId: 'wall-command-42',
+    captureGeneration: 42
+  }, failedOwner), true);
+  assert.equal(wallBindingMatchesFailedOwner({
+    commandId: 'wall-command-43',
+    captureGeneration: 43
+  }, failedOwner), false);
+  assert.equal(wallBindingMatchesFailedOwner({
+    commandId: 'wall-command-42',
+    captureGeneration: 43
+  }, failedOwner), false);
+});

package/src/{live-desk-update.js → vuvodesk-update.js}

@@ -259,7 +259,7 @@ function resetReconnectCandidate(target) {
   target.stabilityDeadlineAt = '';
 }
 
-export function createLiveDeskUpdateManager({
+export function createVuvoDeskUpdateManager({
   remoteHub,
   currentManagerVersion,
   currentClientVersion,

package/src/wall-source-restart-runtime.test.mjs

@@ -138,7 +138,17 @@ test('a new Wall frame lane reuses a healthy exact capture', async () => {
       restartToken: 'explicit-owner-restart'
     });
     assert.equal(hardRestart.ok, true);
+    assert.equal(hardRestart.pending, true);
     assert.ok(hardRestart.captureGeneration > first.captureGeneration);
+    const pendingDevice = hub.listDevices({ includeDataUrl: false })
+      .find(device => device.deviceId === 'wall-source-device');
+    assert.equal(pendingDevice.activeLiveStream.commandId, first.commandId);
+    assert.equal(pendingDevice.activeLiveStream.captureGeneration, first.captureGeneration);
+    assert.equal(pendingDevice.activeLiveStream.pendingCommandId, hardRestart.commandId);
+    assert.equal(
+      pendingDevice.activeLiveStream.pendingCaptureGeneration,
+      hardRestart.captureGeneration
+    );
   } finally {
     socket?.destroy();
     await hub.close();