@skrr-ai/cli 0.1.115 → 0.1.116

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/computerUse.js

@@ -1,375 +1,407 @@
 "use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ComputerUseContractError = exports.COMPUTER_USE_ELICITATION_CHOICES = exports.COMPUTER_USE_RUNTIME_STATES = exports.COMPUTER_USE_LIMITS = exports.COMPUTER_USE_DEFAULT_BUDGETS = exports.COMPUTER_USE_OPERATIONS = exports.COMPUTER_USE_PUBLIC_TOOLS = exports.COMPUTER_USE_CLOUD_CONSENT = exports.COMPUTER_USE_EXECUTION_CAPABILITY = exports.COMPUTER_USE_ROTATE_CREDENTIAL_EVENT = exports.COMPUTER_USE_PROTOCOL = exports.COMPUTER_USE_PROVIDER = exports.COMPUTER_USE_TOOL = void 0;
-exports.computerUseModelInstructions = computerUseModelInstructions;
-exports.assertComputerUseRotateCredentialRequest = assertComputerUseRotateCredentialRequest;
-exports.assertComputerUseHostContext = assertComputerUseHostContext;
-exports.computerUseBudgets = computerUseBudgets;
-exports.assertComputerUseInput = assertComputerUseInput;
-exports.assertComputerUseRequest = assertComputerUseRequest;
-exports.assertComputerUseSurface = assertComputerUseSurface;
-exports.assertComputerUseMcpResult = assertComputerUseMcpResult;
-exports.sameComputerUseContext = sameComputerUseContext;
-exports.assertComputerUseElicitationRequest = assertComputerUseElicitationRequest;
-exports.assertComputerUseElicitationResponse = assertComputerUseElicitationResponse;
-exports.acceptsComputerUseElicitationResponse = acceptsComputerUseElicitationResponse;
-exports.projectComputerUseResultForModel = projectComputerUseResultForModel;
-/**
- * Computer Use v1 is a host-to-host protocol, never a model tool schema.
- * Models see exactly the runtime's js/js_reset surface. In particular, script
- * contents cannot prove that a call is read-only or supply execution identity.
- * Kept dependency-free so daemon, API, browser and native clients agree.
- */
-exports.COMPUTER_USE_TOOL = 'ComputerUse';
-exports.COMPUTER_USE_PROVIDER = 'lcu';
-exports.COMPUTER_USE_PROTOCOL = 'computer_use_mcp_v1';
-exports.COMPUTER_USE_ROTATE_CREDENTIAL_EVENT = 'daemon:computer-use:rotate-credential';
-exports.COMPUTER_USE_EXECUTION_CAPABILITY = 'computer_use';
-exports.COMPUTER_USE_CLOUD_CONSENT = 'computer_use_cloud_agents_v1';
-exports.COMPUTER_USE_PUBLIC_TOOLS = ['js', 'js_reset'];
-exports.COMPUTER_USE_OPERATIONS = ['describe', 'call', 'end_turn', 'close', 'status', 'control_stop'];
-exports.COMPUTER_USE_DEFAULT_BUDGETS = Object.freeze({
-    activeExecutionMs: 120_000,
-    humanResponseMs: 300_000,
-    totalLifetimeMs: 900_000,
-    cleanupGraceMs: 10_000,
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var computerUse_exports = {};
+__export(computerUse_exports, {
+  COMPUTER_USE_CLOUD_CONSENT: () => COMPUTER_USE_CLOUD_CONSENT,
+  COMPUTER_USE_DEFAULT_BUDGETS: () => COMPUTER_USE_DEFAULT_BUDGETS,
+  COMPUTER_USE_ELICITATION_CHOICES: () => COMPUTER_USE_ELICITATION_CHOICES,
+  COMPUTER_USE_EXECUTION_CAPABILITY: () => COMPUTER_USE_EXECUTION_CAPABILITY,
+  COMPUTER_USE_LIMITS: () => COMPUTER_USE_LIMITS,
+  COMPUTER_USE_OPERATIONS: () => COMPUTER_USE_OPERATIONS,
+  COMPUTER_USE_PROTOCOL: () => COMPUTER_USE_PROTOCOL,
+  COMPUTER_USE_PROVIDER: () => COMPUTER_USE_PROVIDER,
+  COMPUTER_USE_PUBLIC_TOOLS: () => COMPUTER_USE_PUBLIC_TOOLS,
+  COMPUTER_USE_ROTATE_CREDENTIAL_EVENT: () => COMPUTER_USE_ROTATE_CREDENTIAL_EVENT,
+  COMPUTER_USE_RUNTIME_STATES: () => COMPUTER_USE_RUNTIME_STATES,
+  COMPUTER_USE_TOOL: () => COMPUTER_USE_TOOL,
+  ComputerUseContractError: () => ComputerUseContractError,
+  acceptsComputerUseElicitationResponse: () => acceptsComputerUseElicitationResponse,
+  assertComputerUseElicitationRequest: () => assertComputerUseElicitationRequest,
+  assertComputerUseElicitationResponse: () => assertComputerUseElicitationResponse,
+  assertComputerUseHostContext: () => assertComputerUseHostContext,
+  assertComputerUseInput: () => assertComputerUseInput,
+  assertComputerUseMcpResult: () => assertComputerUseMcpResult,
+  assertComputerUseRequest: () => assertComputerUseRequest,
+  assertComputerUseRotateCredentialRequest: () => assertComputerUseRotateCredentialRequest,
+  assertComputerUseSurface: () => assertComputerUseSurface,
+  computerUseBudgets: () => computerUseBudgets,
+  computerUseModelInstructions: () => computerUseModelInstructions,
+  projectComputerUseResultForModel: () => projectComputerUseResultForModel,
+  sameComputerUseContext: () => sameComputerUseContext
 });
-/** Negotiated ceilings; exceeding a limit is an error, never silent clipping. */
-exports.COMPUTER_USE_LIMITS = Object.freeze({
-    maxEnvelopeBytes: 32 * 1024 * 1024,
-    maxInstructionsBytes: 1024 * 1024,
-    maxSchemaBytes: 1024 * 1024,
-    maxContentBlocks: 512,
-    maxIdentityChars: 512,
-    maxActiveExecutionMs: 900_000,
-    maxHumanResponseMs: 900_000,
-    maxTotalLifetimeMs: 1_800_000,
-    maxCleanupGraceMs: 60_000,
+module.exports = __toCommonJS(computerUse_exports);
+const COMPUTER_USE_TOOL = "ComputerUse";
+const COMPUTER_USE_PROVIDER = "lcu";
+const COMPUTER_USE_PROTOCOL = "computer_use_mcp_v1";
+const COMPUTER_USE_ROTATE_CREDENTIAL_EVENT = "daemon:computer-use:rotate-credential";
+const COMPUTER_USE_EXECUTION_CAPABILITY = "computer_use";
+const COMPUTER_USE_CLOUD_CONSENT = "computer_use_cloud_agents_v1";
+const COMPUTER_USE_PUBLIC_TOOLS = ["js", "js_reset"];
+const COMPUTER_USE_OPERATIONS = ["describe", "call", "end_turn", "close", "status", "control_stop"];
+const COMPUTER_USE_DEFAULT_BUDGETS = Object.freeze({
+  activeExecutionMs: 12e4,
+  humanResponseMs: 3e5,
+  totalLifetimeMs: 9e5,
+  cleanupGraceMs: 1e4
+});
+const COMPUTER_USE_LIMITS = Object.freeze({
+  maxEnvelopeBytes: 32 * 1024 * 1024,
+  maxInstructionsBytes: 1024 * 1024,
+  maxSchemaBytes: 1024 * 1024,
+  maxContentBlocks: 512,
+  maxIdentityChars: 512,
+  maxActiveExecutionMs: 9e5,
+  maxHumanResponseMs: 9e5,
+  maxTotalLifetimeMs: 18e5,
+  maxCleanupGraceMs: 6e4
 });
-/** Preserve original documentation while explaining the host's narrower lifecycle. */
 function computerUseModelInstructions(surface) {
-    assertComputerUseSurface(surface);
-    if (!surface.runtimePolicy)
-        return surface.instructions;
-    return surface.instructions + '\n\nOverSky host policy\n' +
-        'Audio cleanup retires the complete runtime after js_reset and at the end of each host turn. ' +
-        'JavaScript variables and application handles persist only within the current turn. ' +
-        'Initialize fresh handles in the next turn; do not reuse handles from an earlier runtime.';
+  assertComputerUseSurface(surface);
+  if (!surface.runtimePolicy)
+    return surface.instructions;
+  return surface.instructions + "\n\nOverSky host policy\nAudio cleanup retires the complete runtime after js_reset and at the end of each host turn. JavaScript variables and application handles persist only within the current turn. Initialize fresh handles in the next turn; do not reuse handles from an earlier runtime.";
 }
-exports.COMPUTER_USE_RUNTIME_STATES = [
-    'disabled', 'starting', 'ready', 'executing', 'awaiting_approval',
-    'ending_turn', 'unavailable', 'closed',
+const COMPUTER_USE_RUNTIME_STATES = [
+  "disabled",
+  "starting",
+  "ready",
+  "executing",
+  "awaiting_approval",
+  "ending_turn",
+  "unavailable",
+  "closed"
 ];
-exports.COMPUTER_USE_ELICITATION_CHOICES = ['once', 'session', 'always', 'decline'];
+const COMPUTER_USE_ELICITATION_CHOICES = ["once", "session", "always", "decline"];
 class ComputerUseContractError extends Error {
-    code;
-    constructor(code, message) {
-        super(message);
-        this.code = code;
-        this.name = 'ComputerUseContractError';
-    }
+  code;
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "ComputerUseContractError";
+  }
 }
-exports.ComputerUseContractError = ComputerUseContractError;
 function fail(message) {
-    throw new ComputerUseContractError('invalid_computer_use_contract', message);
+  throw new ComputerUseContractError("invalid_computer_use_contract", message);
 }
 function record(value) {
-    return value !== null && typeof value === 'object' && !Array.isArray(value);
+  return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function exactKeys(value, keys, name) {
-    if (Object.keys(value).some((key) => !keys.includes(key)))
-        fail(`Unsupported ${name} field`);
+  if (Object.keys(value).some((key) => !keys.includes(key)))
+    fail(`Unsupported ${name} field`);
 }
 function identifier(value, name) {
-    if (typeof value !== 'string' || value.trim().length === 0 || value.length > exports.COMPUTER_USE_LIMITS.maxIdentityChars)
-        fail(`Invalid ${name}`);
+  if (typeof value !== "string" || value.trim().length === 0 || value.length > COMPUTER_USE_LIMITS.maxIdentityChars)
+    fail(`Invalid ${name}`);
 }
-/** Reject non-JSON data before transport, including lossy NaN/undefined values. */
 function jsonSize(value) {
-    const seen = new Set();
-    const visit = (item) => {
-        if (item === null || typeof item === 'string' || typeof item === 'boolean')
-            return;
-        if (typeof item === 'number' && Number.isFinite(item))
-            return;
-        if (typeof item !== 'object' || !item || seen.has(item))
-            fail('Expected acyclic JSON data');
-        if (!Array.isArray(item) && Object.getPrototypeOf(item) !== Object.prototype && Object.getPrototypeOf(item) !== null)
-            fail('Expected plain JSON object');
-        seen.add(item);
-        for (const child of Array.isArray(item) ? item : Object.values(item))
-            visit(child);
-        seen.delete(item);
-    };
-    visit(value);
-    return new TextEncoder().encode(JSON.stringify(value)).byteLength;
+  const seen = /* @__PURE__ */ new Set();
+  const visit = (item) => {
+    if (item === null || typeof item === "string" || typeof item === "boolean")
+      return;
+    if (typeof item === "number" && Number.isFinite(item))
+      return;
+    if (typeof item !== "object" || !item || seen.has(item))
+      fail("Expected acyclic JSON data");
+    if (!Array.isArray(item) && Object.getPrototypeOf(item) !== Object.prototype && Object.getPrototypeOf(item) !== null)
+      fail("Expected plain JSON object");
+    seen.add(item);
+    for (const child of Array.isArray(item) ? item : Object.values(item))
+      visit(child);
+    seen.delete(item);
+  };
+  visit(value);
+  return new TextEncoder().encode(JSON.stringify(value)).byteLength;
 }
 function boundedJson(value, max, name) {
-    if (jsonSize(value) > max)
-        fail(`${name} exceeds negotiated byte limit`);
+  if (jsonSize(value) > max)
+    fail(`${name} exceeds negotiated byte limit`);
 }
-/** Validate the hosted rotation envelope before changing runtime admission. */
 function assertComputerUseRotateCredentialRequest(value) {
-    if (!record(value))
-        fail('Expected credential rotation request');
-    const ids = ['requestId', 'ownerUserId', 'machineUuid', 'leaseId'];
-    exactKeys(value, [...ids, 'generation'], 'credential rotation');
-    for (const key of ids) {
-        identifier(value[key], key);
-        if (value[key].length > 160)
-            fail(`Invalid ${key}`);
-    }
-    if (!Number.isSafeInteger(value.generation) || value.generation < 1)
-        fail('Invalid hosted desktop generation');
+  if (!record(value))
+    fail("Expected credential rotation request");
+  const ids = ["requestId", "ownerUserId", "machineUuid", "leaseId"];
+  exactKeys(value, [...ids, "generation"], "credential rotation");
+  for (const key of ids) {
+    identifier(value[key], key);
+    if (value[key].length > 160)
+      fail(`Invalid ${key}`);
+  }
+  if (!Number.isSafeInteger(value.generation) || value.generation < 1)
+    fail("Invalid hosted desktop generation");
 }
 function assertComputerUseHostContext(value) {
-    if (!record(value))
-        fail('Expected host context');
-    const required = ['principalId', 'machineId', 'sessionId', 'turnId'];
-    const optional = ['toolCallId', 'agentId', 'engine', 'conversationId', 'contextKey'];
-    exactKeys(value, [...required, ...optional, 'generation'], 'host context');
-    for (const key of required)
-        identifier(value[key], key);
-    for (const key of optional)
-        if (value[key] !== undefined)
-            identifier(value[key], key);
-    if (!Number.isSafeInteger(value.generation) || value.generation < 0)
-        fail('Invalid generation');
+  if (!record(value))
+    fail("Expected host context");
+  const required = ["principalId", "machineId", "sessionId", "turnId"];
+  const optional = ["toolCallId", "agentId", "engine", "conversationId", "contextKey"];
+  exactKeys(value, [...required, ...optional, "generation"], "host context");
+  for (const key of required)
+    identifier(value[key], key);
+  for (const key of optional)
+    if (value[key] !== void 0)
+      identifier(value[key], key);
+  if (!Number.isSafeInteger(value.generation) || value.generation < 0)
+    fail("Invalid generation");
 }
 function computerUseBudgets(value = {}) {
-    if (!record(value))
-        fail('Expected execution budgets');
-    const ceilings = {
-        activeExecutionMs: exports.COMPUTER_USE_LIMITS.maxActiveExecutionMs,
-        humanResponseMs: exports.COMPUTER_USE_LIMITS.maxHumanResponseMs,
-        totalLifetimeMs: exports.COMPUTER_USE_LIMITS.maxTotalLifetimeMs,
-        cleanupGraceMs: exports.COMPUTER_USE_LIMITS.maxCleanupGraceMs,
-    };
-    exactKeys(value, Object.keys(ceilings), 'budget');
-    const result = { ...exports.COMPUTER_USE_DEFAULT_BUDGETS };
-    for (const key of Object.keys(ceilings)) {
-        if (value[key] === undefined)
-            continue;
-        if (!Number.isSafeInteger(value[key]) || value[key] <= 0 || value[key] > ceilings[key])
-            fail(`Invalid ${key}`);
-        result[key] = value[key];
-    }
-    if (result.totalLifetimeMs < result.activeExecutionMs || result.totalLifetimeMs < result.cleanupGraceMs)
-        fail('Total lifetime is shorter than execution or cleanup budget');
-    return result;
+  if (!record(value))
+    fail("Expected execution budgets");
+  const ceilings = {
+    activeExecutionMs: COMPUTER_USE_LIMITS.maxActiveExecutionMs,
+    humanResponseMs: COMPUTER_USE_LIMITS.maxHumanResponseMs,
+    totalLifetimeMs: COMPUTER_USE_LIMITS.maxTotalLifetimeMs,
+    cleanupGraceMs: COMPUTER_USE_LIMITS.maxCleanupGraceMs
+  };
+  exactKeys(value, Object.keys(ceilings), "budget");
+  const result = { ...COMPUTER_USE_DEFAULT_BUDGETS };
+  for (const key of Object.keys(ceilings)) {
+    if (value[key] === void 0)
+      continue;
+    if (!Number.isSafeInteger(value[key]) || value[key] <= 0 || value[key] > ceilings[key])
+      fail(`Invalid ${key}`);
+    result[key] = value[key];
+  }
+  if (result.totalLifetimeMs < result.activeExecutionMs || result.totalLifetimeMs < result.cleanupGraceMs)
+    fail("Total lifetime is shorter than execution or cleanup budget");
+  return result;
 }
 function assertComputerUseInput(value) {
-    if (!record(value))
-        fail('Expected Computer Use operation');
-    switch (value.operation) {
-        case 'describe':
-            exactKeys(value, ['operation', 'surfaceMode'], 'describe');
-            if (value.surfaceMode !== undefined && !['computer', 'browser', 'all'].includes(value.surfaceMode))
-                fail('Unsupported surface mode');
-            break;
-        case 'call':
-            exactKeys(value, ['operation', 'tool', 'arguments', 'surfaceDigest', 'budgets'], 'call');
-            if (!exports.COMPUTER_USE_PUBLIC_TOOLS.includes(value.tool))
-                fail('Unsupported public tool');
-            if (!record(value.arguments))
-                fail('Expected original tool arguments');
-            if (value.surfaceDigest !== undefined)
-                identifier(value.surfaceDigest, 'surfaceDigest');
-            if (value.budgets !== undefined)
-                computerUseBudgets(value.budgets);
-            break;
-        case 'end_turn':
-            exactKeys(value, ['operation', 'reason'], 'end_turn');
-            if (value.reason !== 'Stop' && value.reason !== 'Interrupt')
-                fail('Unsupported end reason');
-            break;
-        case 'close':
-        case 'control_stop':
-            exactKeys(value, ['operation', 'reason'], value.operation);
-            if (value.reason !== undefined)
-                identifier(value.reason, 'reason');
-            break;
-        case 'status':
-            exactKeys(value, ['operation'], 'status');
-            break;
-        default: fail('Unsupported Computer Use operation');
-    }
-    boundedJson(value, exports.COMPUTER_USE_LIMITS.maxEnvelopeBytes, 'Request');
+  if (!record(value))
+    fail("Expected Computer Use operation");
+  switch (value.operation) {
+    case "describe":
+      exactKeys(value, ["operation", "surfaceMode"], "describe");
+      if (value.surfaceMode !== void 0 && !["computer", "browser", "all"].includes(value.surfaceMode))
+        fail("Unsupported surface mode");
+      break;
+    case "call":
+      exactKeys(value, ["operation", "tool", "arguments", "surfaceDigest", "budgets"], "call");
+      if (!COMPUTER_USE_PUBLIC_TOOLS.includes(value.tool))
+        fail("Unsupported public tool");
+      if (!record(value.arguments))
+        fail("Expected original tool arguments");
+      if (value.surfaceDigest !== void 0)
+        identifier(value.surfaceDigest, "surfaceDigest");
+      if (value.budgets !== void 0)
+        computerUseBudgets(value.budgets);
+      break;
+    case "end_turn":
+      exactKeys(value, ["operation", "reason"], "end_turn");
+      if (value.reason !== "Stop" && value.reason !== "Interrupt")
+        fail("Unsupported end reason");
+      break;
+    case "close":
+    case "control_stop":
+      exactKeys(value, ["operation", "reason"], value.operation);
+      if (value.reason !== void 0)
+        identifier(value.reason, "reason");
+      break;
+    case "status":
+      exactKeys(value, ["operation"], "status");
+      break;
+    default:
+      fail("Unsupported Computer Use operation");
+  }
+  boundedJson(value, COMPUTER_USE_LIMITS.maxEnvelopeBytes, "Request");
 }
 function assertComputerUseRequest(value) {
-    if (!record(value) || value.protocol !== exports.COMPUTER_USE_PROTOCOL || value.provider !== exports.COMPUTER_USE_PROVIDER)
-        fail('Unsupported Computer Use protocol/provider');
-    assertComputerUseHostContext(value.context);
-    const { protocol: _protocol, provider: _provider, context, ...input } = value;
-    assertComputerUseInput(input);
-    if (input.operation === 'call' && !context.toolCallId)
-        fail('Calls require exact host toolCallId');
-    boundedJson(value, exports.COMPUTER_USE_LIMITS.maxEnvelopeBytes, 'Request');
+  if (!record(value) || value.protocol !== COMPUTER_USE_PROTOCOL || value.provider !== COMPUTER_USE_PROVIDER)
+    fail("Unsupported Computer Use protocol/provider");
+  assertComputerUseHostContext(value.context);
+  const { protocol: _protocol, provider: _provider, context, ...input } = value;
+  assertComputerUseInput(input);
+  if (input.operation === "call" && !context.toolCallId)
+    fail("Calls require exact host toolCallId");
+  boundedJson(value, COMPUTER_USE_LIMITS.maxEnvelopeBytes, "Request");
 }
 function assertComputerUseSurface(value) {
-    if (!record(value) || value.protocol !== exports.COMPUTER_USE_PROTOCOL || value.provider !== exports.COMPUTER_USE_PROVIDER)
-        fail('Unsupported Computer Use surface');
-    if (typeof value.instructions !== 'string')
-        fail('Expected original runtime instructions');
-    if (new TextEncoder().encode(value.instructions).byteLength > exports.COMPUTER_USE_LIMITS.maxInstructionsBytes)
-        fail('Instructions exceed negotiated byte limit');
-    identifier(value.digest, 'surface digest');
-    if (!['computer', 'browser', 'all'].includes(value.surfaceMode))
-        fail('Unsupported surface mode');
-    if (value.runtimePolicy !== undefined) {
-        if (!record(value.runtimePolicy))
-            fail('Invalid host runtime policy');
-        exactKeys(value.runtimePolicy, ['replPersistence', 'audioCleanup'], 'host runtime policy');
-        if (value.runtimePolicy.replPersistence !== 'turn' || value.runtimePolicy.audioCleanup !== 'retire-runtime')
-            fail('Unsupported host runtime policy');
-    }
-    if (!record(value.versions) || typeof value.versions.lcu !== 'string' || !value.versions.lcu)
-        fail('Missing LCU version');
-    if (Object.values(value.versions).some((v) => typeof v !== 'string'))
-        fail('Invalid runtime version');
-    if (!Array.isArray(value.tools) || value.tools.length !== 2)
-        fail('Expected js and js_reset descriptors');
-    const names = new Set();
-    for (const tool of value.tools) {
-        if (!record(tool) || !exports.COMPUTER_USE_PUBLIC_TOOLS.includes(tool.name) || !record(tool.inputSchema))
-            fail('Invalid original tool descriptor');
-        if (tool.description !== undefined && typeof tool.description !== 'string')
-            fail('Invalid tool description');
-        if (names.has(tool.name))
-            fail('Duplicate public tool');
-        names.add(tool.name);
-        boundedJson(tool, exports.COMPUTER_USE_LIMITS.maxSchemaBytes, 'Tool descriptor');
-    }
-    boundedJson(value, exports.COMPUTER_USE_LIMITS.maxEnvelopeBytes, 'Surface');
+  if (!record(value) || value.protocol !== COMPUTER_USE_PROTOCOL || value.provider !== COMPUTER_USE_PROVIDER)
+    fail("Unsupported Computer Use surface");
+  if (typeof value.instructions !== "string")
+    fail("Expected original runtime instructions");
+  if (new TextEncoder().encode(value.instructions).byteLength > COMPUTER_USE_LIMITS.maxInstructionsBytes)
+    fail("Instructions exceed negotiated byte limit");
+  identifier(value.digest, "surface digest");
+  if (!["computer", "browser", "all"].includes(value.surfaceMode))
+    fail("Unsupported surface mode");
+  if (value.runtimePolicy !== void 0) {
+    if (!record(value.runtimePolicy))
+      fail("Invalid host runtime policy");
+    exactKeys(value.runtimePolicy, ["replPersistence", "audioCleanup"], "host runtime policy");
+    if (value.runtimePolicy.replPersistence !== "turn" || value.runtimePolicy.audioCleanup !== "retire-runtime")
+      fail("Unsupported host runtime policy");
+  }
+  if (!record(value.versions) || typeof value.versions.lcu !== "string" || !value.versions.lcu)
+    fail("Missing LCU version");
+  if (Object.values(value.versions).some((v) => typeof v !== "string"))
+    fail("Invalid runtime version");
+  if (!Array.isArray(value.tools) || value.tools.length !== 2)
+    fail("Expected js and js_reset descriptors");
+  const names = /* @__PURE__ */ new Set();
+  for (const tool of value.tools) {
+    if (!record(tool) || !COMPUTER_USE_PUBLIC_TOOLS.includes(tool.name) || !record(tool.inputSchema))
+      fail("Invalid original tool descriptor");
+    if (tool.description !== void 0 && typeof tool.description !== "string")
+      fail("Invalid tool description");
+    if (names.has(tool.name))
+      fail("Duplicate public tool");
+    names.add(tool.name);
+    boundedJson(tool, COMPUTER_USE_LIMITS.maxSchemaBytes, "Tool descriptor");
+  }
+  boundedJson(value, COMPUTER_USE_LIMITS.maxEnvelopeBytes, "Surface");
 }
-/** Validate the envelope without rewriting blocks or discarding upstream extensions. */
 function assertComputerUseMcpResult(value) {
-    if (!record(value) || !Array.isArray(value.content) || value.content.length > exports.COMPUTER_USE_LIMITS.maxContentBlocks)
-        fail('Invalid MCP result content');
-    if (value.isError !== undefined && typeof value.isError !== 'boolean')
-        fail('Invalid MCP isError');
-    if (value.structuredContent !== undefined && !record(value.structuredContent))
-        fail('Invalid MCP structuredContent');
-    for (const block of value.content) {
-        if (!record(block) || typeof block.type !== 'string' || !block.type)
-            fail('Invalid MCP content block');
-        if (block.type === 'text' && typeof block.text !== 'string')
-            fail('Invalid MCP text block');
-        if (block.type === 'image' && (typeof block.data !== 'string' || typeof block.mimeType !== 'string'))
-            fail('Invalid MCP image block');
-    }
-    boundedJson(value, exports.COMPUTER_USE_LIMITS.maxEnvelopeBytes, 'MCP result');
+  if (!record(value) || !Array.isArray(value.content) || value.content.length > COMPUTER_USE_LIMITS.maxContentBlocks)
+    fail("Invalid MCP result content");
+  if (value.isError !== void 0 && typeof value.isError !== "boolean")
+    fail("Invalid MCP isError");
+  if (value.structuredContent !== void 0 && !record(value.structuredContent))
+    fail("Invalid MCP structuredContent");
+  for (const block of value.content) {
+    if (!record(block) || typeof block.type !== "string" || !block.type)
+      fail("Invalid MCP content block");
+    if (block.type === "text" && typeof block.text !== "string")
+      fail("Invalid MCP text block");
+    if (block.type === "image" && (typeof block.data !== "string" || typeof block.mimeType !== "string"))
+      fail("Invalid MCP image block");
+  }
+  boundedJson(value, COMPUTER_USE_LIMITS.maxEnvelopeBytes, "MCP result");
 }
-/** Compare full execution identity; a matching conversation alone never grants access. */
 function sameComputerUseContext(left, right) {
-    return ['principalId', 'machineId', 'sessionId', 'turnId', 'generation', 'agentId', 'engine', 'conversationId', 'contextKey']
-        .every((key) => left[key] === right[key]);
+  return ["principalId", "machineId", "sessionId", "turnId", "generation", "agentId", "engine", "conversationId", "contextKey"].every((key) => left[key] === right[key]);
 }
 function assertComputerUseElicitationRequest(value) {
-    if (!record(value) || value.kind !== 'computer_use_runtime')
-        fail('Expected runtime elicitation');
-    exactKeys(value, ['kind', 'requestId', 'context', 'message', 'resource', 'options', 'expiresAt'], 'elicitation request');
-    identifier(value.requestId, 'requestId');
-    assertComputerUseHostContext(value.context);
-    identifier(value.context.toolCallId, 'toolCallId');
-    if (typeof value.message !== 'string' || !value.message)
-        fail('Missing runtime elicitation message');
-    if (value.resource !== undefined && !record(value.resource))
-        fail('Invalid runtime resource');
-    if (!Number.isSafeInteger(value.expiresAt) || value.expiresAt <= 0)
-        fail('Invalid runtime elicitation expiry');
-    if (!Array.isArray(value.options) || value.options.length === 0 || value.options.length > exports.COMPUTER_USE_ELICITATION_CHOICES.length)
-        fail('Invalid runtime choices');
-    const choices = new Set();
-    for (const option of value.options) {
-        if (!record(option))
-            fail('Invalid runtime option');
-        exactKeys(option, ['value', 'label', 'description'], 'elicitation option');
-        if (!exports.COMPUTER_USE_ELICITATION_CHOICES.includes(option.value) || choices.has(option.value))
-            fail('Unsupported or duplicate runtime choice');
-        if (typeof option.label !== 'string' || !option.label || (option.description !== undefined && typeof option.description !== 'string'))
-            fail('Invalid runtime choice label');
-        choices.add(option.value);
-    }
-    boundedJson(value, exports.COMPUTER_USE_LIMITS.maxEnvelopeBytes, 'Runtime elicitation');
+  if (!record(value) || value.kind !== "computer_use_runtime")
+    fail("Expected runtime elicitation");
+  exactKeys(value, ["kind", "requestId", "context", "message", "resource", "options", "expiresAt"], "elicitation request");
+  identifier(value.requestId, "requestId");
+  assertComputerUseHostContext(value.context);
+  identifier(value.context.toolCallId, "toolCallId");
+  if (typeof value.message !== "string" || !value.message)
+    fail("Missing runtime elicitation message");
+  if (value.resource !== void 0 && !record(value.resource))
+    fail("Invalid runtime resource");
+  if (!Number.isSafeInteger(value.expiresAt) || value.expiresAt <= 0)
+    fail("Invalid runtime elicitation expiry");
+  if (!Array.isArray(value.options) || value.options.length === 0 || value.options.length > COMPUTER_USE_ELICITATION_CHOICES.length)
+    fail("Invalid runtime choices");
+  const choices = /* @__PURE__ */ new Set();
+  for (const option of value.options) {
+    if (!record(option))
+      fail("Invalid runtime option");
+    exactKeys(option, ["value", "label", "description"], "elicitation option");
+    if (!COMPUTER_USE_ELICITATION_CHOICES.includes(option.value) || choices.has(option.value))
+      fail("Unsupported or duplicate runtime choice");
+    if (typeof option.label !== "string" || !option.label || option.description !== void 0 && typeof option.description !== "string")
+      fail("Invalid runtime choice label");
+    choices.add(option.value);
+  }
+  boundedJson(value, COMPUTER_USE_LIMITS.maxEnvelopeBytes, "Runtime elicitation");
 }
 function assertComputerUseElicitationResponse(value) {
-    if (!record(value))
-        fail('Expected runtime elicitation response');
-    exactKeys(value, ['requestId', 'context', 'choice'], 'elicitation response');
-    identifier(value.requestId, 'requestId');
-    assertComputerUseHostContext(value.context);
-    identifier(value.context.toolCallId, 'toolCallId');
-    if (!exports.COMPUTER_USE_ELICITATION_CHOICES.includes(value.choice))
-        fail('Unsupported runtime choice');
-    boundedJson(value, exports.COMPUTER_USE_LIMITS.maxEnvelopeBytes, 'Runtime elicitation response');
+  if (!record(value))
+    fail("Expected runtime elicitation response");
+  exactKeys(value, ["requestId", "context", "choice"], "elicitation response");
+  identifier(value.requestId, "requestId");
+  assertComputerUseHostContext(value.context);
+  identifier(value.context.toolCallId, "toolCallId");
+  if (!COMPUTER_USE_ELICITATION_CHOICES.includes(value.choice))
+    fail("Unsupported runtime choice");
+  boundedJson(value, COMPUTER_USE_LIMITS.maxEnvelopeBytes, "Runtime elicitation response");
 }
-/** A human answer can only satisfy this exact pending request and offered scope.
- * This matcher is not authentication: the caller must verify the human responder.
- */
 function acceptsComputerUseElicitationResponse(request, response, now = Date.now()) {
-    try {
-        assertComputerUseElicitationRequest(request);
-        assertComputerUseElicitationResponse(response);
-    }
-    catch {
-        return false;
-    }
-    return request.kind === 'computer_use_runtime' && request.requestId === response.requestId &&
-        Number.isFinite(request.expiresAt) && now < request.expiresAt &&
-        sameComputerUseContext(request.context, response.context) &&
-        typeof request.context.toolCallId === 'string' && request.context.toolCallId === response.context.toolCallId &&
-        exports.COMPUTER_USE_ELICITATION_CHOICES.includes(response.choice) &&
-        request.options.some((option) => option.value === response.choice);
+  try {
+    assertComputerUseElicitationRequest(request);
+    assertComputerUseElicitationResponse(response);
+  } catch {
+    return false;
+  }
+  return request.kind === "computer_use_runtime" && request.requestId === response.requestId && Number.isFinite(request.expiresAt) && now < request.expiresAt && sameComputerUseContext(request.context, response.context) && typeof request.context.toolCallId === "string" && request.context.toolCallId === response.context.toolCallId && COMPUTER_USE_ELICITATION_CHOICES.includes(response.choice) && request.options.some((option) => option.value === response.choice);
 }
-/**
- * Consumer capability projection, never a rewrite of the canonical daemon
- * result. Some model hosts accept MCP AudioContent but silently omit its bytes.
- * Those hosts receive explicit references to already-persisted owned audio.
- * This function never uploads, transcribes, invents a path or grants access.
- */
 function projectComputerUseResultForModel(result, options) {
-    assertComputerUseMcpResult(result);
-    if (!options || !['inline', 'artifact-reference'].includes(options.audio))
-        fail('Unsupported Computer Use model audio capability');
-    const audioCount = result.content.filter((block) => block.type === 'audio').length;
-    if (options.audio === 'inline' || audioCount === 0)
-        return result;
-    identifier(options.principalId, 'audio artifact owner');
-    identifier(options.sessionId, 'audio artifact session');
-    if (options.consumer !== undefined)
-        identifier(options.consumer, 'audio consumer');
-    const metadata = record(result._meta) ? result._meta : {};
-    const candidates = metadata['skrr.ai/computer-use-artifacts'];
-    const references = Array.isArray(candidates)
-        ? candidates.filter((item) => record(item) && typeof item.mimeType === 'string' && item.mimeType.startsWith('audio/'))
-        : [];
-    if (references.length < audioCount || references.some((item) => !record(item) || typeof item.fileId !== 'string' || !/^[A-Za-z0-9_-]{1,512}$/.test(item.fileId) ||
-        item.reference !== `file:${item.fileId}` || item.ownerUserId !== options.principalId ||
-        item.sessionId !== options.sessionId || !Number.isSafeInteger(item.bytes) || item.bytes <= 0 ||
-        typeof item.sha256 !== 'string' || !/^[a-f0-9]{64}$/.test(item.sha256) ||
-        typeof item.mimeType !== 'string' || item.mimeType.length > 256 || !/^audio\/[A-Za-z0-9.+-]+(?:;[ -~]*)?$/.test(item.mimeType))) {
-        throw new ComputerUseContractError('computer_use_audio_artifact_required', 'This model cannot receive inline audio. Every audio block requires an existing owned file artifact for this exact session.');
+  assertComputerUseMcpResult(result);
+  if (!options || !["inline", "artifact-reference"].includes(options.audio))
+    fail("Unsupported Computer Use model audio capability");
+  const audioCount = result.content.filter((block) => block.type === "audio").length;
+  if (options.audio === "inline" || audioCount === 0)
+    return result;
+  identifier(options.principalId, "audio artifact owner");
+  identifier(options.sessionId, "audio artifact session");
+  if (options.consumer !== void 0)
+    identifier(options.consumer, "audio consumer");
+  const metadata = record(result._meta) ? result._meta : {};
+  const candidates = metadata["skrr.ai/computer-use-artifacts"];
+  const references = Array.isArray(candidates) ? candidates.filter((item) => record(item) && typeof item.mimeType === "string" && item.mimeType.startsWith("audio/")) : [];
+  if (references.length < audioCount || references.some((item) => !record(item) || typeof item.fileId !== "string" || !/^[A-Za-z0-9_-]{1,512}$/.test(item.fileId) || item.reference !== `file:${item.fileId}` || item.ownerUserId !== options.principalId || item.sessionId !== options.sessionId || !Number.isSafeInteger(item.bytes) || item.bytes <= 0 || typeof item.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(item.sha256) || typeof item.mimeType !== "string" || item.mimeType.length > 256 || !/^audio\/[A-Za-z0-9.+-]+(?:;[ -~]*)?$/.test(item.mimeType))) {
+    throw new ComputerUseContractError("computer_use_audio_artifact_required", "This model cannot receive inline audio. Every audio block requires an existing owned file artifact for this exact session.");
+  }
+  const notice = [
+    "Audio is available as owned file artifacts. This model receives references instead of inline audio and has not listened to the recording.",
+    ...references.map((item) => `${item.reference} (${item.mimeType}; ${item.bytes} bytes; sha256 ${item.sha256})`)
+  ].join("\n");
+  let inserted = false;
+  const content = result.content.flatMap((block) => {
+    if (block.type !== "audio")
+      return [block];
+    if (inserted)
+      return [];
+    inserted = true;
+    return [{ type: "text", text: notice }];
+  });
+  const projected = { ...result, content, _meta: {
+    ...metadata,
+    "skrr.ai/computer-use-model-projection": {
+      audio: "artifact-reference",
+      audioBlocks: audioCount,
+      ...options.consumer ? { consumer: options.consumer } : {}
     }
-    const notice = [
-        'Audio is available as owned file artifacts. This model receives references instead of inline audio and has not listened to the recording.',
-        ...references.map((item) => `${item.reference} (${item.mimeType}; ${item.bytes} bytes; sha256 ${item.sha256})`),
-    ].join('\n');
-    let inserted = false;
-    const content = result.content.flatMap((block) => {
-        if (block.type !== 'audio')
-            return [block];
-        if (inserted)
-            return [];
-        inserted = true;
-        return [{ type: 'text', text: notice }];
-    });
-    const projected = { ...result, content, _meta: { ...metadata,
-            'skrr.ai/computer-use-model-projection': {
-                audio: 'artifact-reference', audioBlocks: audioCount,
-                ...(options.consumer ? { consumer: options.consumer } : {}),
-            },
-        } };
-    assertComputerUseMcpResult(projected);
-    return projected;
+  } };
+  assertComputerUseMcpResult(projected);
+  return projected;
 }
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  COMPUTER_USE_CLOUD_CONSENT,
+  COMPUTER_USE_DEFAULT_BUDGETS,
+  COMPUTER_USE_ELICITATION_CHOICES,
+  COMPUTER_USE_EXECUTION_CAPABILITY,
+  COMPUTER_USE_LIMITS,
+  COMPUTER_USE_OPERATIONS,
+  COMPUTER_USE_PROTOCOL,
+  COMPUTER_USE_PROVIDER,
+  COMPUTER_USE_PUBLIC_TOOLS,
+  COMPUTER_USE_ROTATE_CREDENTIAL_EVENT,
+  COMPUTER_USE_RUNTIME_STATES,
+  COMPUTER_USE_TOOL,
+  ComputerUseContractError,
+  acceptsComputerUseElicitationResponse,
+  assertComputerUseElicitationRequest,
+  assertComputerUseElicitationResponse,
+  assertComputerUseHostContext,
+  assertComputerUseInput,
+  assertComputerUseMcpResult,
+  assertComputerUseRequest,
+  assertComputerUseRotateCredentialRequest,
+  assertComputerUseSurface,
+  computerUseBudgets,
+  computerUseModelInstructions,
+  projectComputerUseResultForModel,
+  sameComputerUseContext
+});