@skrr-ai/cli 0.1.113 → 0.1.115

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/daemonWire.js

@@ -52,6 +52,7 @@ exports.DAEMON_WIRE_NAMES = exports.DAEMON_WIRE = exports.DAEMON_WIRE_CARRIERS =
 exports.daemonWireEntry = daemonWireEntry;
 exports.daemonWireSends = daemonWireSends;
 exports.daemonWireHandles = daemonWireHandles;
+const desktopWire_js_1 = require("./desktopWire.js");
 const computerWire_js_1 = require("./computerWire.js");
 // ---------------------------------------------------------------------------
 // Vocabulary
@@ -127,6 +128,15 @@ const CONNECTION = [
     toServer('daemon:shuttingDown', 'The daemon is draining before it exits, so the API can fail over without waiting for the socket to time out.'),
     toDaemon('server:draining', 'This API task is draining: reconnect (after jitter) to another one.'),
     toDaemon('auth:revoked', 'The credential this socket used was revoked: stop retrying and ask the person to sign in again.'),
+    toDaemon('error:stale-process', 'This daemon process was replaced by a fresher registration; stop transport drain recovery before disconnect.', {
+        payload: { kind: 'zod', schema: 'daemonConnectionFenceErrorSchema' },
+    }),
+    toDaemon('error:stale-generation', 'This Dedicated Runtime generation is no longer active; stop transport drain recovery before disconnect.', {
+        payload: { kind: 'zod', schema: 'daemonConnectionFenceErrorSchema' },
+    }),
+    toDaemon('error:stale-binding', 'This daemon credential was rebound to another account; stop transport drain recovery before disconnect.', {
+        payload: { kind: 'zod', schema: 'daemonConnectionFenceErrorSchema' },
+    }),
     toServer('daemon:auth-failed', 'The daemon could not refresh its own credential and needs the person to sign in again.'),
     toServer('daemon:auth-warning', "The daemon's credential expires soon."),
     toDaemon('error:unauthorized', 'The API refused an event this daemon sent, for lack of authority, naming the event.'),
@@ -279,6 +289,36 @@ const TOOLS = [
         capability: TOOL_RESPONSE_OUTBOX,
     }),
     toDaemon('daemon:tool:cancel', 'Abandon a running tool call.'),
+    toDaemon('daemon:computer:use-control', 'An authorized person observes, configures, stops or recovers the machine Computer Use provider.', {
+        stability: 'experimental', capability: 'computer_use_mcp_v1', delivery: 'acked', answeredBy: 'daemon:computer:ack',
+        payload: { kind: 'zod', schema: 'daemonComputerUseControlSchema' },
+    }),
+    toDaemon('daemon:computer-use:rotate-credential', 'The approved hosted-desktop owner requests credential rotation for this exact active machine lease generation.', {
+        stability: 'experimental', capability: 'computer_use_mcp_v1', delivery: 'acked', answeredBy: 'daemon:computer:ack',
+        payload: { kind: 'zod', schema: 'daemonComputerUseRotateCredentialSchema' },
+    }),
+    toDaemon('daemon:computer-use:revoke', 'Revoke cloud Computer Use bindings after owner machine authority was removed.', {
+        stability: 'experimental', capability: 'computer_use_mcp_v1',
+        payload: { kind: 'zod', schema: 'daemonComputerUseRevokeSchema' },
+    }),
+    ...['subscribe', 'protocol', 'unsubscribe'].map((operation) => toDaemon(desktopWire_js_1.DAEMON_COMPUTER_DESKTOP_EVENTS[operation], `Read-only desktop stream: ${operation}; bound to an authenticated attachment and generation.`, {
+        stability: 'experimental', capability: desktopWire_js_1.COMPUTER_DESKTOP_CAPABILITY,
+        delivery: 'acked', answeredBy: 'daemon:computer:ack',
+        payload: { kind: 'zod', schema: `daemonComputerDesktop${operation[0].toUpperCase()}${operation.slice(1)}Schema` },
+    })),
+    ...['control', 'input'].map((operation) => toDaemon(desktopWire_js_1.DAEMON_COMPUTER_DESKTOP_EVENTS[operation], `Human-only typed desktop ${operation}; exact authenticated attachment, stream and generation.`, {
+        stability: 'experimental', capability: desktopWire_js_1.COMPUTER_DESKTOP_CONTROL_CAPABILITY,
+        delivery: 'acked', answeredBy: 'daemon:computer:ack',
+        payload: { kind: 'zod', schema: `daemonComputerDesktop${operation[0].toUpperCase()}${operation.slice(1)}Schema` },
+    })),
+    toServer(desktopWire_js_1.DAEMON_COMPUTER_DESKTOP_EVENTS.controlChanged, 'Private desktop holder and input revocation fact; never carries a control token.', {
+        stability: 'experimental', capability: desktopWire_js_1.COMPUTER_DESKTOP_CONTROL_CAPABILITY,
+        payload: { kind: 'zod', schema: 'computerDesktopControlResultSchema' },
+    }),
+    toServer(desktopWire_js_1.DAEMON_COMPUTER_DESKTOP_EVENTS.data, 'Read-only desktop stream data or a terminal close fact for one attachment generation.', {
+        stability: 'experimental', capability: desktopWire_js_1.COMPUTER_DESKTOP_CAPABILITY,
+        payload: { kind: 'zod', schema: 'computerDesktopDataSchema' },
+    }),
     toServer('daemon:wire:chunk', 'One slice of a tool or session response above the single-message ceiling, sha256-checked and reassembled by the API before the reassembled event reaches its normal handler. Sent only to a server that announced `serverCaps.wireChunking`; the last slice is acked by that handler (OSK-16616).', {
         delivery: 'acked',
         stability: 'experimental',

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/desktopWire.d.ts

@@ -0,0 +1,140 @@
+/** A separately negotiated read-only desktop stream, not a browser surface or an input grant. */
+export declare const COMPUTER_DESKTOP_CAPABILITY: "computer_desktop_observe_v1";
+export declare const COMPUTER_DESKTOP_SURFACE_ID: "desktop:main";
+export declare const COMPUTER_DESKTOP_EVENTS: {
+    readonly subscribe: "computer:desktop:subscribe";
+    readonly protocol: "computer:desktop:protocol";
+    readonly unsubscribe: "computer:desktop:unsubscribe";
+    readonly data: "computer:desktop:data";
+    readonly control: "computer:desktop:control";
+    readonly input: "computer:desktop:input";
+    readonly controlChanged: "computer:desktop:control-changed";
+};
+export declare const DAEMON_COMPUTER_DESKTOP_EVENTS: {
+    readonly subscribe: "daemon:computer:desktop:subscribe";
+    readonly protocol: "daemon:computer:desktop:protocol";
+    readonly unsubscribe: "daemon:computer:desktop:unsubscribe";
+    readonly data: "daemon:computer:desktop:data";
+    readonly control: "daemon:computer:desktop:control";
+    readonly input: "daemon:computer:desktop:input";
+    readonly controlChanged: "daemon:computer:desktop:control-changed";
+};
+export declare const COMPUTER_DESKTOP_LIMITS: Readonly<{
+    maxIdChars: 160;
+    maxProtocolBase64Chars: number;
+    maxDataBase64Chars: number;
+}>;
+export declare const COMPUTER_DESKTOP_CLOSED_REASONS: readonly ["unavailable", "revoked", "protocol_error", "slow_viewer", "ended", "private_control"];
+export type ComputerDesktopClosedReason = (typeof COMPUTER_DESKTOP_CLOSED_REASONS)[number];
+export interface ComputerDesktopSubscribe {
+    attachmentId: string;
+    surfaceId: typeof COMPUTER_DESKTOP_SURFACE_ID;
+}
+export interface ComputerDesktopProtocol {
+    attachmentId: string;
+    streamId: string;
+    seq: number;
+    data: string;
+}
+export interface ComputerDesktopUnsubscribe {
+    attachmentId: string;
+    streamId: string;
+}
+export interface ComputerDesktopSubscribeResult {
+    attachmentId: string;
+    generation: number;
+    streamId: string;
+    surfaceId: typeof COMPUTER_DESKTOP_SURFACE_ID;
+    lane: 'desktop';
+    readOnly: true;
+}
+export type DaemonComputerDesktopSubscribe = ComputerDesktopSubscribe & {
+    requestId: string;
+    generation: number;
+};
+export type DaemonComputerDesktopProtocol = ComputerDesktopProtocol & {
+    requestId: string;
+    generation: number;
+};
+export type DaemonComputerDesktopUnsubscribe = ComputerDesktopUnsubscribe & {
+    requestId: string;
+    generation: number;
+};
+export type ComputerDesktopData = {
+    attachmentId: string;
+    generation: number;
+    streamId: string;
+    surfaceId: typeof COMPUTER_DESKTOP_SURFACE_ID;
+    lane: 'desktop';
+} & ({
+    kind: 'data';
+    seq: number;
+    data: string;
+} | {
+    kind: 'closed';
+    reason: ComputerDesktopClosedReason;
+});
+/** Canonical RFC 4648 base64 including zero pad bits; no whitespace/URL alphabet. */
+export declare function isComputerDesktopBase64(value: unknown, maxChars: number): value is string;
+/** Typed human input is independent of read-only RFB negotiation. */
+export declare const COMPUTER_DESKTOP_CONTROL_CAPABILITY: "computer_desktop_control_v1";
+export type ComputerDesktopInputEvent = {
+    type: 'pointer';
+    action: 'move' | 'down' | 'up' | 'scroll';
+    x: number;
+    y: number;
+    button?: 0 | 1 | 2;
+    deltaX?: number;
+    deltaY?: number;
+} | {
+    type: 'key';
+    action: 'down' | 'up';
+    key: string;
+} | {
+    type: 'text';
+    text: string;
+};
+export interface ComputerDesktopControl {
+    attachmentId: string;
+    streamId?: string;
+    action: 'takeover' | 'handback' | 'status' | 'recover_private';
+    expectedController?: {
+        sessionId: string;
+        turnId: string;
+        generation: number;
+    };
+    controlToken?: string;
+    epoch?: number;
+}
+export interface ComputerDesktopInput {
+    attachmentId: string;
+    streamId: string;
+    controlToken: string;
+    epoch: number;
+    seq: number;
+    event: ComputerDesktopInputEvent;
+}
+export interface ComputerDesktopControlResult {
+    attachmentId: string;
+    streamId?: string;
+    generation: number;
+    controlling: boolean;
+    private: boolean;
+    epoch: number;
+    controlToken?: string;
+    holderAttachmentId?: string;
+    holderUserId?: string;
+    state?: 'idle' | 'controlled' | 'private' | 'unavailable';
+    idleDeadline?: number;
+}
+export type DaemonComputerDesktopControl = ComputerDesktopControl & {
+    requestId: string;
+    generation: number;
+    userId: string;
+    label?: string;
+};
+export type DaemonComputerDesktopInput = ComputerDesktopInput & {
+    requestId: string;
+    generation: number;
+    userId: string;
+};

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/desktopWire.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.COMPUTER_DESKTOP_CONTROL_CAPABILITY = exports.COMPUTER_DESKTOP_CLOSED_REASONS = exports.COMPUTER_DESKTOP_LIMITS = exports.DAEMON_COMPUTER_DESKTOP_EVENTS = exports.COMPUTER_DESKTOP_EVENTS = exports.COMPUTER_DESKTOP_SURFACE_ID = exports.COMPUTER_DESKTOP_CAPABILITY = void 0;
+exports.isComputerDesktopBase64 = isComputerDesktopBase64;
+/** A separately negotiated read-only desktop stream, not a browser surface or an input grant. */
+exports.COMPUTER_DESKTOP_CAPABILITY = 'computer_desktop_observe_v1';
+exports.COMPUTER_DESKTOP_SURFACE_ID = 'desktop:main';
+exports.COMPUTER_DESKTOP_EVENTS = {
+    subscribe: 'computer:desktop:subscribe',
+    protocol: 'computer:desktop:protocol',
+    unsubscribe: 'computer:desktop:unsubscribe',
+    data: 'computer:desktop:data',
+    control: 'computer:desktop:control',
+    input: 'computer:desktop:input',
+    controlChanged: 'computer:desktop:control-changed',
+};
+exports.DAEMON_COMPUTER_DESKTOP_EVENTS = {
+    subscribe: 'daemon:computer:desktop:subscribe',
+    protocol: 'daemon:computer:desktop:protocol',
+    unsubscribe: 'daemon:computer:desktop:unsubscribe',
+    data: 'daemon:computer:desktop:data',
+    control: 'daemon:computer:desktop:control',
+    input: 'daemon:computer:desktop:input',
+    controlChanged: 'daemon:computer:desktop:control-changed',
+};
+exports.COMPUTER_DESKTOP_LIMITS = Object.freeze({
+    maxIdChars: 160,
+    maxProtocolBase64Chars: 88 * 1024,
+    maxDataBase64Chars: 128 * 1024,
+});
+exports.COMPUTER_DESKTOP_CLOSED_REASONS = ['unavailable', 'revoked', 'protocol_error', 'slow_viewer', 'ended', 'private_control'];
+/** Canonical RFC 4648 base64 including zero pad bits; no whitespace/URL alphabet. */
+function isComputerDesktopBase64(value, maxChars) {
+    if (typeof value !== 'string' || !value.length || value.length > maxChars || value.length % 4 !== 0)
+        return false;
+    if (!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(value))
+        return false;
+    const alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
+    if (value.endsWith('=='))
+        return (alphabet.indexOf(value[value.length - 3]) & 15) === 0;
+    if (value.endsWith('='))
+        return (alphabet.indexOf(value[value.length - 2]) & 3) === 0;
+    return true;
+}
+/** Typed human input is independent of read-only RFB negotiation. */
+exports.COMPUTER_DESKTOP_CONTROL_CAPABILITY = 'computer_desktop_control_v1';

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/firstPartyHarness.d.ts

@@ -2,7 +2,7 @@
  * The first-party harness identity — the ONLY place its product name is written.
  *
  * "First-party harness" is the harness provider this platform builds, signs,
- * distributes and installs itself: today a fork of OpenCode sold as skrr Code.
+ * distributes and installs itself: today a fork of OpenCode sold as Skrr Code.
  * It is a different axis from trust Tier 1 in `harnessTrust.ts`, whose
  * "first-party" means an audited VENDOR harness such as Claude Code.
  *
@@ -68,7 +68,7 @@
  * both bundles at a distance.
  */
 export interface FirstPartyHarnessIdentity {
-    /** What a person reads. Lowercase brand inside a compound (naming map §1). */
+    /** What a person reads, with the product's proper-name capitalization. */
     readonly displayName: string;
     /** The command a person types, as it appears in prose. */
     readonly command: string;
@@ -93,7 +93,7 @@ export interface FirstPartyHarnessIdentity {
  * release or a stored value written before the rename is looked for.
  */
 declare const IDENTITY: {
-    readonly displayName: "skrr Code";
+    readonly displayName: "Skrr Code";
     readonly command: "skrr code";
     readonly provider: "skrr-code";
     readonly aliases: readonly [];
@@ -365,7 +365,7 @@ export declare const FIRST_PARTY_HARNESS_ENGINE: Readonly<{
      * `readFirstPartyHarnessEngineEnv` to read one the way the engine does and
      * `firstPartyHarnessEngineEnvEntries` to set one every engine build honours.
      */
-    env: Readonly<Record<"appName" | "serverPassword" | "serverUsername" | "home" | "config" | "scriptName" | "allowUpstreamEgress" | "compatOpencode" | "noCompatPrompts" | "maxInputTokens" | "sessionId", string>>;
+    env: Readonly<Record<"sessionId" | "appName" | "serverPassword" | "serverUsername" | "home" | "config" | "scriptName" | "allowUpstreamEgress" | "compatOpencode" | "noCompatPrompts" | "maxInputTokens", string>>;
 }>;
 /**
  * Every name the engine reads for one purpose, current namespace first — the

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/firstPartyHarness.js

@@ -3,7 +3,7 @@
  * The first-party harness identity — the ONLY place its product name is written.
  *
  * "First-party harness" is the harness provider this platform builds, signs,
- * distributes and installs itself: today a fork of OpenCode sold as skrr Code.
+ * distributes and installs itself: today a fork of OpenCode sold as Skrr Code.
  * It is a different axis from trust Tier 1 in `harnessTrust.ts`, whose
  * "first-party" means an audited VENDOR harness such as Claude Code.
  *
@@ -138,7 +138,7 @@ const PROVIDER = 'skrr-code';
  * release or a stored value written before the rename is looked for.
  */
 const IDENTITY = {
-    displayName: 'skrr Code',
+    displayName: 'Skrr Code',
     command: 'skrr code',
     provider: PROVIDER,
     aliases: [],

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/index.d.ts

@@ -6,7 +6,7 @@
  * wire up its logger, config dir, kill switches, and binary name — then
  * uses the rest of the API uniformly.
  */
-export { SCOPES, ALL_DAEMON_SCOPES, VALID_DAEMON_SCOPE_SET, isDaemonScope, OAUTH_CLI_SCOPE, type DaemonScope, type OAuthCliScope, type OAuthScope, } from './daemonScopes.js';
+export { SCOPES, ALL_DAEMON_SCOPES, DEFAULT_DAEMON_SCOPES, VALID_DAEMON_SCOPE_SET, isDaemonScope, OAUTH_CLI_SCOPE, type DaemonScope, type OAuthCliScope, type OAuthScope, } from './daemonScopes.js';
 export { configureAuthCore, getAuthLogger, getAuthConfigDir, getAuthKillSwitches, getAuthBinaryName, emitAuthTelemetry, type AuthCoreConfig, type AuthLogger, type AuthKillSwitches, type AuthTelemetryEvent, } from './runtime.js';
 export { PermanentAuthFailure, TransientAuthFailure, type PermanentAuthReason, type ReauthState, type TokenPair, } from './types.js';
 export { decodeJwtExpiry, decodeJwtPayload } from './jwtUtils.js';
@@ -48,3 +48,5 @@ export { resolveConfigRoot, configRootPath, isConfigRootOverridden } from './con
 export { PROFILES_SEGMENT, SUPERSEDED_MARKER_SUFFIX, SUPERSEDED_COPY_SUFFIX, profileStateDir, legacyProfileStateDir, resolveProfileStateDir, resolveProfileStateFile, profileStateFileLocations, profileStateFilePathsToClear, consolidateProfileState, type ResolvedProfileStateDir, type ConsolidationSpec, type ConsolidationStatus, type ConsolidationOutcome, } from './profileStateDir.js';
 export * from './harnessPermissionControls.js';
 export { compareReleaseVersions } from './releaseVersions.js';
+export * from './computerUse.js';
+export * from './desktopWire.js';

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/index.js

@@ -22,11 +22,11 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.runHeadersHelper = exports.SENTINEL_TRIGGERING_FAILURES = exports.__resetAuthHelperFailureReasonForTest = exports.getLastAuthHelperFailureReason = exports.getDefaultHelperTtlMs = exports.invokeAuthHelper = exports.AuthHelperUnavailableError = exports.AuthHelperUntrustedError = exports.isStaticTokenKind = exports.PERSONAL_ACCESS_TOKEN_PREFIX = exports.CI_TOKEN_PREFIX = exports.classifyTokenKind = exports.invalidateAuthHelperCache = exports.__resetCredentialResolverForTest = exports.CREDENTIAL_PRECEDENCE = exports.CredentialResolver = exports.__setFdReaderForTest = exports.readAuthFromFd = exports.createRefreshScheduler = exports.UNKNOWN_401_BUDGET = exports.__resetUnknown401StreaksForTest = exports.__refreshDiagnostics = exports.installLockExitHandlers = exports.clearReauthState = exports.needsReauthState = exports.persistReauthState = exports.withAuthLock = exports.revokeDaemonRefreshSession = exports.refreshDaemonToken = exports.classifyRefreshResponse = exports.EXIT_NEEDS_REAUTH = exports.reauthCommand = exports.formatReauthMessage = exports.handleMidStreamAuthExpiry = exports.isAuthExpiredSseEvent = exports.decodeJwtPayload = exports.decodeJwtExpiry = exports.TransientAuthFailure = exports.PermanentAuthFailure = exports.emitAuthTelemetry = exports.getAuthBinaryName = exports.getAuthKillSwitches = exports.getAuthConfigDir = exports.getAuthLogger = exports.configureAuthCore = exports.OAUTH_CLI_SCOPE = exports.isDaemonScope = exports.VALID_DAEMON_SCOPE_SET = exports.ALL_DAEMON_SCOPES = exports.SCOPES = void 0;
-exports.jwkThumbprint = exports.generateDeviceKeyPair = exports.buildDeviceProof = exports.zeroizeKekCaches = exports.WindowsKek = exports.registerZeroizeHook = exports.MacosKek = exports.LinuxKek = exports.KekUnavailableError = exports.UnavailableKek = exports.InMemoryKek = exports.getKekStrategy = exports.__setKekStrategyForTest = exports.credEnvelopeWrap = exports.credEnvelopeUnwrap = exports.credEnvelopeSerialize = exports.credSealBuffer = exports.credOpenBuffer = exports.CRED_KEY_LEN = exports.isCredEnvelopeString = exports.generateDek = exports.CRED_ENVELOPE_MAGIC = exports.credEnvelopeEncrypt = exports.credEnvelopeDeserialize = exports.credEnvelopeDecrypt = exports.buildCredentialAad = exports.isValidRecoveryCode = exports.normalizeRecoveryCode = exports.parseRecoveryCode = exports.formatRecoveryCode = exports.MAX_TTL_DAYS = exports.MIN_TTL_DAYS = exports.parseTtlDays = exports.LoginExchangeError = exports.LoginInitError = exports.loginWithLocalhost = exports.LocalCallbackMalformedError = exports.LocalCallbackDeniedError = exports.LocalCallbackStateMismatchError = exports.LocalCallbackTimeoutError = exports.LocalCallbackBindError = exports.LocalCallbackError = exports.DEFAULT_LOGIN_TIMEOUT_MS = exports.startLocalCallback = exports.verifyChallenge = exports.safeEqual = exports.generateState = exports.challenge = exports.generateVerifier = exports.invalidateHeadersHelperCache = void 0;
-exports.setMachineUuidProfile = exports.getHardwareMachineUuid = exports.describeMachineIdentity = exports.getMachineUuidForProfile = exports.getMachineUuid = exports.__getDeviceIdentityStateForTest = exports.__setDeviceIdentityStateForTest = exports.__enrollmentBackoffPathForTest = exports.__enrollmentMarkerPathForTest = exports.__privateKeyPathForTest = exports.__publicKeyPathForTest = exports.describeDeviceKeySplit = exports.describeDeviceIdentityState = exports.getDevicePublicKey = exports.isDeviceIdentityActive = exports.clearEnrollmentMarker = exports.enrollWithServer = exports.signServerRequest = exports.resetDeviceIdentity = exports.initDeviceIdentity = exports.__resetShutdownGuardForTest = exports.__getCredEnvelopeStateForTest = exports.__setCredEnvelopeStateForTest = exports.__wrappedDekFilePathForTest = exports.DEFAULT_UNREADABLE_CREDENTIAL_HINT = exports.maybeDecryptOnRead = exports.maybeEncryptForWrite = exports.splitKeyConvergencePolicy = exports.describeCredEnvelopeState = exports.hasCredEnvelopePathConflict = exports.isCredEnvelopeActive = exports.shutdownCredEnvelope = exports.resetCredEnvelope = exports.initCredEnvelope = exports.verifyDpopProof = exports.normalizeDpopHtu = exports.isJwkThumbprint = exports.isAth = exports.createDpopKey = exports.accessTokenHash = exports.DPOP_PROOF_VERIFY_UNAVAILABLE = exports.DPOP_PROOF_TYP = exports.DPOP_PROOF_REQUIRED = exports.DPOP_PROOF_INVALID = exports.DPOP_MAX_AGE_SECONDS = exports.DPOP_HEADER = exports.verifyDeviceProof = exports.tokenHash = exports.publicJwkFromX = exports.normalizeHtu = void 0;
-exports.isLoopbackAddress = exports.isLoopbackHostname = exports.assertLoopbackHttpUrl = exports.loopbackFetch = exports.withLoopbackNoProxy = exports.envHasProxy = exports.LOOPBACK_NO_PROXY_HOSTS = exports.isDaemonChildEnv = exports.DAEMON_CHILD_ENV = exports.SENSITIVE_ENV_PREFIX_EXCEPTIONS = exports.SENSITIVE_ENV_NAME_TOKENS = exports.SENSITIVE_ENV_SUFFIXES = exports.SENSITIVE_ENV_PREFIXES = exports.SENSITIVE_ENV_VARS = exports.sanitizeSpawnEnv = exports.harnessLoadsClaudeSkillsLayout = exports.claudeSkillsLayoutEvidence = exports.HARNESSES_LOADING_CLAUDE_SKILLS_LAYOUT = exports.tierPermitsConfiguredAutoMode = exports.credentialPolicyForTier = exports.getHarnessTier = exports.HARNESS_TIERS = exports.pairUint8ArrayToBase64Url = exports.pairUint8ArrayToBase64 = exports.parsePairUrl = exports.parsePairPlaintext = exports.parsePairBundle = exports.openPairBundleBase64 = exports.generatePairKeyPair = exports.buildPairUrl = exports.buildPairAad = exports.pairBase64UrlToUint8Array = exports.pairBase64ToUint8Array = exports.assemblePairBundleBase64 = exports.PairBundleError = exports.PAIR_SECRET_LEN = exports.PAIR_PUBKEY_LEN = exports.PAIR_NONCE_LEN = exports.PAIR_BUNDLE_MAX_BASE64_LEN = exports.PAIR_AAD_MAX_LEN = exports.PAIR_AAD_PREFIX = exports.__resetCachedDaemonIdForTest = exports.legacyDaemonUuids = exports.ensureMachineDaemonId = exports.__resetMachineUuidCacheForTest = exports.HOSTED_RUNTIME_MACHINE_SOURCES = exports.hostedRuntimeIdOverride = exports.MACHINE_IDENTITY_FILENAME = exports.qualifyMachineUuid = exports.getMachineUuidProfile = void 0;
-exports.compareReleaseVersions = exports.consolidateProfileState = exports.profileStateFilePathsToClear = exports.profileStateFileLocations = exports.resolveProfileStateFile = exports.resolveProfileStateDir = exports.legacyProfileStateDir = exports.profileStateDir = exports.SUPERSEDED_COPY_SUFFIX = exports.SUPERSEDED_MARKER_SUFFIX = exports.PROFILES_SEGMENT = exports.isConfigRootOverridden = exports.configRootPath = exports.resolveConfigRoot = exports.verifyManifest = exports.verifyArtifact = exports.isTrustedArtifactOrigin = exports.getDeltaFor = exports.buildManifestMessage = exports.buildArtifactMessage = exports.TRUSTED_FEED_ORIGINS = exports.MAX_SIGS = exports.OVERSKY_RELEASE_PUBLIC_KEYS = exports.resolveFirstPartyHarnessChannel = exports.resolveChannelManifestUrl = exports.isFirstPartyHarnessChannel = exports.firstPartyHarnessFeedCandidates = exports.firstPartyHarnessFeedBase = exports.firstPartyHarnessChannelPrefix = exports.FIRST_PARTY_HARNESS_CHANNELS = exports.DEFAULT_FIRST_PARTY_HARNESS_CHANNEL = exports.migrateFirstPartyHarnessHome = exports.linkFirstPartyHarnessAliases = exports.firstPartyHarnessInstalledBinaryPath = exports.firstPartyHarnessHomeDir = exports.firstPartyHarnessBinDir = exports.FIRST_PARTY_HARNESS_PROVENANCE_SUFFIX = exports.FIRST_PARTY_HARNESS_PREVIOUS_SUFFIX = exports.describeLegacyState = exports.findLegacyLocalState = exports.DEFAULT_BINARY_NAME = exports.LEGACY_NATIVE_ID_PREFIXES = exports.NATIVE_ID_PREFIX = exports.LEGACY_CONFIG_DIR_NAMES = exports.CONFIG_DIR_NAME = exports.LOOPBACK_DEFAULT_MAX_BODY_BYTES = exports.LoopbackTargetRefusedError = void 0;
+exports.SENTINEL_TRIGGERING_FAILURES = exports.__resetAuthHelperFailureReasonForTest = exports.getLastAuthHelperFailureReason = exports.getDefaultHelperTtlMs = exports.invokeAuthHelper = exports.AuthHelperUnavailableError = exports.AuthHelperUntrustedError = exports.isStaticTokenKind = exports.PERSONAL_ACCESS_TOKEN_PREFIX = exports.CI_TOKEN_PREFIX = exports.classifyTokenKind = exports.invalidateAuthHelperCache = exports.__resetCredentialResolverForTest = exports.CREDENTIAL_PRECEDENCE = exports.CredentialResolver = exports.__setFdReaderForTest = exports.readAuthFromFd = exports.createRefreshScheduler = exports.UNKNOWN_401_BUDGET = exports.__resetUnknown401StreaksForTest = exports.__refreshDiagnostics = exports.installLockExitHandlers = exports.clearReauthState = exports.needsReauthState = exports.persistReauthState = exports.withAuthLock = exports.revokeDaemonRefreshSession = exports.refreshDaemonToken = exports.classifyRefreshResponse = exports.EXIT_NEEDS_REAUTH = exports.reauthCommand = exports.formatReauthMessage = exports.handleMidStreamAuthExpiry = exports.isAuthExpiredSseEvent = exports.decodeJwtPayload = exports.decodeJwtExpiry = exports.TransientAuthFailure = exports.PermanentAuthFailure = exports.emitAuthTelemetry = exports.getAuthBinaryName = exports.getAuthKillSwitches = exports.getAuthConfigDir = exports.getAuthLogger = exports.configureAuthCore = exports.OAUTH_CLI_SCOPE = exports.isDaemonScope = exports.VALID_DAEMON_SCOPE_SET = exports.DEFAULT_DAEMON_SCOPES = exports.ALL_DAEMON_SCOPES = exports.SCOPES = void 0;
+exports.generateDeviceKeyPair = exports.buildDeviceProof = exports.zeroizeKekCaches = exports.WindowsKek = exports.registerZeroizeHook = exports.MacosKek = exports.LinuxKek = exports.KekUnavailableError = exports.UnavailableKek = exports.InMemoryKek = exports.getKekStrategy = exports.__setKekStrategyForTest = exports.credEnvelopeWrap = exports.credEnvelopeUnwrap = exports.credEnvelopeSerialize = exports.credSealBuffer = exports.credOpenBuffer = exports.CRED_KEY_LEN = exports.isCredEnvelopeString = exports.generateDek = exports.CRED_ENVELOPE_MAGIC = exports.credEnvelopeEncrypt = exports.credEnvelopeDeserialize = exports.credEnvelopeDecrypt = exports.buildCredentialAad = exports.isValidRecoveryCode = exports.normalizeRecoveryCode = exports.parseRecoveryCode = exports.formatRecoveryCode = exports.MAX_TTL_DAYS = exports.MIN_TTL_DAYS = exports.parseTtlDays = exports.LoginExchangeError = exports.LoginInitError = exports.loginWithLocalhost = exports.LocalCallbackMalformedError = exports.LocalCallbackDeniedError = exports.LocalCallbackStateMismatchError = exports.LocalCallbackTimeoutError = exports.LocalCallbackBindError = exports.LocalCallbackError = exports.DEFAULT_LOGIN_TIMEOUT_MS = exports.startLocalCallback = exports.verifyChallenge = exports.safeEqual = exports.generateState = exports.challenge = exports.generateVerifier = exports.invalidateHeadersHelperCache = exports.runHeadersHelper = void 0;
+exports.getHardwareMachineUuid = exports.describeMachineIdentity = exports.getMachineUuidForProfile = exports.getMachineUuid = exports.__getDeviceIdentityStateForTest = exports.__setDeviceIdentityStateForTest = exports.__enrollmentBackoffPathForTest = exports.__enrollmentMarkerPathForTest = exports.__privateKeyPathForTest = exports.__publicKeyPathForTest = exports.describeDeviceKeySplit = exports.describeDeviceIdentityState = exports.getDevicePublicKey = exports.isDeviceIdentityActive = exports.clearEnrollmentMarker = exports.enrollWithServer = exports.signServerRequest = exports.resetDeviceIdentity = exports.initDeviceIdentity = exports.__resetShutdownGuardForTest = exports.__getCredEnvelopeStateForTest = exports.__setCredEnvelopeStateForTest = exports.__wrappedDekFilePathForTest = exports.DEFAULT_UNREADABLE_CREDENTIAL_HINT = exports.maybeDecryptOnRead = exports.maybeEncryptForWrite = exports.splitKeyConvergencePolicy = exports.describeCredEnvelopeState = exports.hasCredEnvelopePathConflict = exports.isCredEnvelopeActive = exports.shutdownCredEnvelope = exports.resetCredEnvelope = exports.initCredEnvelope = exports.verifyDpopProof = exports.normalizeDpopHtu = exports.isJwkThumbprint = exports.isAth = exports.createDpopKey = exports.accessTokenHash = exports.DPOP_PROOF_VERIFY_UNAVAILABLE = exports.DPOP_PROOF_TYP = exports.DPOP_PROOF_REQUIRED = exports.DPOP_PROOF_INVALID = exports.DPOP_MAX_AGE_SECONDS = exports.DPOP_HEADER = exports.verifyDeviceProof = exports.tokenHash = exports.publicJwkFromX = exports.normalizeHtu = exports.jwkThumbprint = void 0;
+exports.isLoopbackHostname = exports.assertLoopbackHttpUrl = exports.loopbackFetch = exports.withLoopbackNoProxy = exports.envHasProxy = exports.LOOPBACK_NO_PROXY_HOSTS = exports.isDaemonChildEnv = exports.DAEMON_CHILD_ENV = exports.SENSITIVE_ENV_PREFIX_EXCEPTIONS = exports.SENSITIVE_ENV_NAME_TOKENS = exports.SENSITIVE_ENV_SUFFIXES = exports.SENSITIVE_ENV_PREFIXES = exports.SENSITIVE_ENV_VARS = exports.sanitizeSpawnEnv = exports.harnessLoadsClaudeSkillsLayout = exports.claudeSkillsLayoutEvidence = exports.HARNESSES_LOADING_CLAUDE_SKILLS_LAYOUT = exports.tierPermitsConfiguredAutoMode = exports.credentialPolicyForTier = exports.getHarnessTier = exports.HARNESS_TIERS = exports.pairUint8ArrayToBase64Url = exports.pairUint8ArrayToBase64 = exports.parsePairUrl = exports.parsePairPlaintext = exports.parsePairBundle = exports.openPairBundleBase64 = exports.generatePairKeyPair = exports.buildPairUrl = exports.buildPairAad = exports.pairBase64UrlToUint8Array = exports.pairBase64ToUint8Array = exports.assemblePairBundleBase64 = exports.PairBundleError = exports.PAIR_SECRET_LEN = exports.PAIR_PUBKEY_LEN = exports.PAIR_NONCE_LEN = exports.PAIR_BUNDLE_MAX_BASE64_LEN = exports.PAIR_AAD_MAX_LEN = exports.PAIR_AAD_PREFIX = exports.__resetCachedDaemonIdForTest = exports.legacyDaemonUuids = exports.ensureMachineDaemonId = exports.__resetMachineUuidCacheForTest = exports.HOSTED_RUNTIME_MACHINE_SOURCES = exports.hostedRuntimeIdOverride = exports.MACHINE_IDENTITY_FILENAME = exports.qualifyMachineUuid = exports.getMachineUuidProfile = exports.setMachineUuidProfile = void 0;
+exports.compareReleaseVersions = exports.consolidateProfileState = exports.profileStateFilePathsToClear = exports.profileStateFileLocations = exports.resolveProfileStateFile = exports.resolveProfileStateDir = exports.legacyProfileStateDir = exports.profileStateDir = exports.SUPERSEDED_COPY_SUFFIX = exports.SUPERSEDED_MARKER_SUFFIX = exports.PROFILES_SEGMENT = exports.isConfigRootOverridden = exports.configRootPath = exports.resolveConfigRoot = exports.verifyManifest = exports.verifyArtifact = exports.isTrustedArtifactOrigin = exports.getDeltaFor = exports.buildManifestMessage = exports.buildArtifactMessage = exports.TRUSTED_FEED_ORIGINS = exports.MAX_SIGS = exports.OVERSKY_RELEASE_PUBLIC_KEYS = exports.resolveFirstPartyHarnessChannel = exports.resolveChannelManifestUrl = exports.isFirstPartyHarnessChannel = exports.firstPartyHarnessFeedCandidates = exports.firstPartyHarnessFeedBase = exports.firstPartyHarnessChannelPrefix = exports.FIRST_PARTY_HARNESS_CHANNELS = exports.DEFAULT_FIRST_PARTY_HARNESS_CHANNEL = exports.migrateFirstPartyHarnessHome = exports.linkFirstPartyHarnessAliases = exports.firstPartyHarnessInstalledBinaryPath = exports.firstPartyHarnessHomeDir = exports.firstPartyHarnessBinDir = exports.FIRST_PARTY_HARNESS_PROVENANCE_SUFFIX = exports.FIRST_PARTY_HARNESS_PREVIOUS_SUFFIX = exports.describeLegacyState = exports.findLegacyLocalState = exports.DEFAULT_BINARY_NAME = exports.LEGACY_NATIVE_ID_PREFIXES = exports.NATIVE_ID_PREFIX = exports.LEGACY_CONFIG_DIR_NAMES = exports.CONFIG_DIR_NAME = exports.LOOPBACK_DEFAULT_MAX_BODY_BYTES = exports.LoopbackTargetRefusedError = exports.isLoopbackAddress = void 0;
 // Daemon scope vocabulary — single source of truth for non-Mongoose tiers
 // (daemon, desktop, cli). Schema-bound canonical lives in
 // `@skrr-ai/data-schemas/common/daemonScopes`; the two are kept byte-equal
@@ -34,6 +34,7 @@ exports.compareReleaseVersions = exports.consolidateProfileState = exports.profi
 var daemonScopes_js_1 = require("./daemonScopes.js");
 Object.defineProperty(exports, "SCOPES", { enumerable: true, get: function () { return daemonScopes_js_1.SCOPES; } });
 Object.defineProperty(exports, "ALL_DAEMON_SCOPES", { enumerable: true, get: function () { return daemonScopes_js_1.ALL_DAEMON_SCOPES; } });
+Object.defineProperty(exports, "DEFAULT_DAEMON_SCOPES", { enumerable: true, get: function () { return daemonScopes_js_1.DEFAULT_DAEMON_SCOPES; } });
 Object.defineProperty(exports, "VALID_DAEMON_SCOPE_SET", { enumerable: true, get: function () { return daemonScopes_js_1.VALID_DAEMON_SCOPE_SET; } });
 Object.defineProperty(exports, "isDaemonScope", { enumerable: true, get: function () { return daemonScopes_js_1.isDaemonScope; } });
 Object.defineProperty(exports, "OAUTH_CLI_SCOPE", { enumerable: true, get: function () { return daemonScopes_js_1.OAUTH_CLI_SCOPE; } });
@@ -443,3 +444,5 @@ Object.defineProperty(exports, "consolidateProfileState", { enumerable: true, ge
 __exportStar(require("./harnessPermissionControls.js"), exports);
 var releaseVersions_js_1 = require("./releaseVersions.js");
 Object.defineProperty(exports, "compareReleaseVersions", { enumerable: true, get: function () { return releaseVersions_js_1.compareReleaseVersions; } });
+__exportStar(require("./computerUse.js"), exports);
+__exportStar(require("./desktopWire.js"), exports);

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/computerUse.d.ts

@@ -0,0 +1,228 @@
+/**
+ * Computer Use v1 is a host-to-host protocol, never a model tool schema.
+ * Models see exactly the runtime's js/js_reset surface. In particular, script
+ * contents cannot prove that a call is read-only or supply execution identity.
+ * Kept dependency-free so daemon, API, browser and native clients agree.
+ */
+export declare const COMPUTER_USE_TOOL: "ComputerUse";
+export declare const COMPUTER_USE_PROVIDER: "lcu";
+export declare const COMPUTER_USE_PROTOCOL: "computer_use_mcp_v1";
+export declare const COMPUTER_USE_ROTATE_CREDENTIAL_EVENT: "daemon:computer-use:rotate-credential";
+/** Owner-approved hosted credential upgrade; no bearer secret travels in this request. */
+export interface ComputerUseRotateCredentialRequest {
+    requestId: string;
+    ownerUserId: string;
+    machineUuid: string;
+    leaseId: string;
+    generation: number;
+}
+export declare const COMPUTER_USE_EXECUTION_CAPABILITY: "computer_use";
+export declare const COMPUTER_USE_CLOUD_CONSENT: "computer_use_cloud_agents_v1";
+export declare const COMPUTER_USE_PUBLIC_TOOLS: readonly ["js", "js_reset"];
+export type ComputerUsePublicTool = (typeof COMPUTER_USE_PUBLIC_TOOLS)[number];
+export declare const COMPUTER_USE_OPERATIONS: readonly ["describe", "call", "end_turn", "close", "status", "control_stop"];
+export type ComputerUseOperation = (typeof COMPUTER_USE_OPERATIONS)[number];
+export type ComputerUseSurfaceMode = 'computer' | 'browser' | 'all';
+export type ComputerUseEndReason = 'Stop' | 'Interrupt';
+/** Identity is derived from authenticated execution, never tool arguments. */
+export interface ComputerUseHostContext {
+    principalId: string;
+    machineId: string;
+    sessionId: string;
+    turnId: string;
+    generation: number;
+    toolCallId?: string;
+    agentId?: string;
+    engine?: string;
+    conversationId?: string;
+    contextKey?: string;
+}
+export interface ComputerUseBudgets {
+    activeExecutionMs: number;
+    humanResponseMs: number;
+    totalLifetimeMs: number;
+    cleanupGraceMs: number;
+}
+export declare const COMPUTER_USE_DEFAULT_BUDGETS: Readonly<ComputerUseBudgets>;
+/** Negotiated ceilings; exceeding a limit is an error, never silent clipping. */
+export declare const COMPUTER_USE_LIMITS: Readonly<{
+    maxEnvelopeBytes: number;
+    maxInstructionsBytes: number;
+    maxSchemaBytes: number;
+    maxContentBlocks: 512;
+    maxIdentityChars: 512;
+    maxActiveExecutionMs: 900000;
+    maxHumanResponseMs: 900000;
+    maxTotalLifetimeMs: 1800000;
+    maxCleanupGraceMs: 60000;
+}>;
+/** Preserve upstream fields and schemas, including annotations and extensions. */
+export interface ComputerUseToolDescriptor {
+    name: ComputerUsePublicTool;
+    description?: string;
+    inputSchema: Record<string, unknown>;
+    [key: string]: unknown;
+}
+export interface ComputerUseMcpContent {
+    type: string;
+    [key: string]: unknown;
+}
+export interface ComputerUseMcpResult {
+    content: ComputerUseMcpContent[];
+    isError?: boolean;
+    structuredContent?: Record<string, unknown>;
+    [key: string]: unknown;
+}
+export interface ComputerUseVersions {
+    lcu: string;
+    adapter?: string;
+    app?: string;
+    runtime?: string;
+    [key: string]: string | undefined;
+}
+export interface ComputerUseRuntimePolicy {
+    replPersistence: 'turn';
+    audioCleanup: 'retire-runtime';
+}
+export interface ComputerUseSurface {
+    protocol: typeof COMPUTER_USE_PROTOCOL;
+    provider: typeof COMPUTER_USE_PROVIDER;
+    instructions: string;
+    tools: ComputerUseToolDescriptor[];
+    versions: ComputerUseVersions;
+    /** Digest of the actual instructions and full descriptors, not a version label. */
+    digest: string;
+    surfaceMode: ComputerUseSurfaceMode;
+    /** Host-observed lifecycle constraints, separate from original runtime instructions. */
+    runtimePolicy?: ComputerUseRuntimePolicy;
+}
+/** Preserve original documentation while explaining the host's narrower lifecycle. */
+export declare function computerUseModelInstructions(surface: ComputerUseSurface): string;
+export declare const COMPUTER_USE_RUNTIME_STATES: readonly ["disabled", "starting", "ready", "executing", "awaiting_approval", "ending_turn", "unavailable", "closed"];
+export type ComputerUseRuntimeState = (typeof COMPUTER_USE_RUNTIME_STATES)[number];
+export interface ComputerUseReadiness {
+    provider: typeof COMPUTER_USE_PROVIDER;
+    protocol: typeof COMPUTER_USE_PROTOCOL;
+    state: ComputerUseRuntimeState;
+    available: boolean;
+    enabled: boolean;
+    cloudAgentsAllowed: boolean;
+    reason?: string;
+    versions?: ComputerUseVersions;
+    surfaceDigest?: string;
+    /** Capability readiness is independent of whether a person granted consent. */
+    browserReady?: boolean;
+    audioReady?: boolean;
+}
+export interface ComputerUseStatus extends ComputerUseReadiness {
+    controller?: Pick<ComputerUseHostContext, 'sessionId' | 'turnId' | 'generation' | 'agentId' | 'conversationId'>;
+    pendingApprovalId?: string;
+    cleanupConfirmed?: boolean;
+}
+export type ComputerUseInput = {
+    operation: 'describe';
+    surfaceMode?: ComputerUseSurfaceMode;
+} | {
+    operation: 'call';
+    tool: ComputerUsePublicTool;
+    arguments: Record<string, unknown>;
+    surfaceDigest?: string;
+    budgets?: Partial<ComputerUseBudgets>;
+} | {
+    operation: 'end_turn';
+    reason: ComputerUseEndReason;
+} | {
+    operation: 'close';
+    reason?: string;
+} | {
+    operation: 'status';
+} | {
+    operation: 'control_stop';
+    reason?: string;
+};
+export type ComputerUseRequest = ComputerUseInput & {
+    protocol: typeof COMPUTER_USE_PROTOCOL;
+    provider: typeof COMPUTER_USE_PROVIDER;
+    context: ComputerUseHostContext;
+};
+export interface ComputerUseCleanupResult {
+    /** True only after the runtime confirms execution can no longer produce input. */
+    cleanupConfirmed: boolean;
+    closed: boolean;
+    generation: number;
+}
+export type ComputerUseResponse = {
+    operation: 'describe';
+    surface: ComputerUseSurface;
+} | {
+    operation: 'call';
+    mcpResult: ComputerUseMcpResult;
+} | {
+    operation: 'status';
+    status: ComputerUseStatus;
+} | {
+    operation: 'end_turn' | 'close' | 'control_stop';
+    cleanup: ComputerUseCleanupResult;
+};
+export declare const COMPUTER_USE_ELICITATION_CHOICES: readonly ["once", "session", "always", "decline"];
+export type ComputerUseElicitationChoice = (typeof COMPUTER_USE_ELICITATION_CHOICES)[number];
+export interface ComputerUseElicitationOption {
+    value: ComputerUseElicitationChoice;
+    label: string;
+    description?: string;
+}
+/** This is a dedicated permission request, not AskUserQuestion or sticky tool approval. */
+export interface ComputerUseElicitationRequest {
+    kind: 'computer_use_runtime';
+    requestId: string;
+    context: ComputerUseHostContext & {
+        toolCallId: string;
+    };
+    message: string;
+    resource?: Record<string, unknown>;
+    options: ComputerUseElicitationOption[];
+    expiresAt: number;
+}
+export interface ComputerUseElicitationResponse {
+    requestId: string;
+    context: ComputerUseHostContext & {
+        toolCallId: string;
+    };
+    choice: ComputerUseElicitationChoice;
+}
+export declare class ComputerUseContractError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+/** Validate the hosted rotation envelope before changing runtime admission. */
+export declare function assertComputerUseRotateCredentialRequest(value: unknown): asserts value is ComputerUseRotateCredentialRequest;
+export declare function assertComputerUseHostContext(value: unknown): asserts value is ComputerUseHostContext;
+export declare function computerUseBudgets(value?: unknown): ComputerUseBudgets;
+export declare function assertComputerUseInput(value: unknown): asserts value is ComputerUseInput;
+export declare function assertComputerUseRequest(value: unknown): asserts value is ComputerUseRequest;
+export declare function assertComputerUseSurface(value: unknown): asserts value is ComputerUseSurface;
+/** Validate the envelope without rewriting blocks or discarding upstream extensions. */
+export declare function assertComputerUseMcpResult(value: unknown): asserts value is ComputerUseMcpResult;
+/** Compare full execution identity; a matching conversation alone never grants access. */
+export declare function sameComputerUseContext(left: ComputerUseHostContext, right: ComputerUseHostContext): boolean;
+export declare function assertComputerUseElicitationRequest(value: unknown): asserts value is ComputerUseElicitationRequest;
+export declare function assertComputerUseElicitationResponse(value: unknown): asserts value is ComputerUseElicitationResponse;
+/** A human answer can only satisfy this exact pending request and offered scope.
+ * This matcher is not authentication: the caller must verify the human responder.
+ */
+export declare function acceptsComputerUseElicitationResponse(request: ComputerUseElicitationRequest, response: ComputerUseElicitationResponse, now?: number): boolean;
+export type ComputerUseModelProjectionOptions = {
+    audio: 'inline';
+} | {
+    audio: 'artifact-reference';
+    principalId: string;
+    sessionId: string;
+    consumer?: string;
+};
+/**
+ * Consumer capability projection, never a rewrite of the canonical daemon
+ * result. Some model hosts accept MCP AudioContent but silently omit its bytes.
+ * Those hosts receive explicit references to already-persisted owned audio.
+ * This function never uploads, transcribes, invents a path or grants access.
+ */
+export declare function projectComputerUseResultForModel(result: ComputerUseMcpResult, options: ComputerUseModelProjectionOptions): ComputerUseMcpResult;