@skrr-ai/cli 0.1.115 → 0.1.117

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/dedicatedRuntimeBusyWire.js

@@ -1,151 +1,118 @@
 "use strict";
-/**
- * The Dedicated Runtime busy-report wire contract (power-control task K2,
- * `dedicated-runtime-power-and-demand-wake-2026-10-07.md` §7.3 / §13.5).
- *
- * Declared ONCE, here. The daemon is published and cannot import the API, so
- * the capability name, the payload shape and its bounds live in this package,
- * which every end can import (`@skrr-ai/auth-core/dedicated-runtime-busy-wire`).
- * `dedicatedRuntimeBusyWire.test.ts` fails on a second spelling of the
- * capability anywhere else in the repo.
- *
- * WHAT THE REPORT SAYS
- * ---------------------------------------------------------------------------
- * "Does anything run in the tenant workload slice?" — read by the guest daemon
- * from cgroup v2 `skrr-workload.slice`, recursively (the slice root is empty by
- * contract; processes live in leaves), with the root-owned sshd listener left
- * out. It is a LOCAL read summarised into counts; no per-process list ever
- * crosses the wire.
- *
- * FAIL CLOSED. `busy` is `true | false | 'unknown'`. Any failure to read — a
- * missing slice, an unreadable file, a tree too large to walk, a quiesce in
- * progress, an sshd that is not where the image promises — is `'unknown'`, and
- * a reader MUST treat `'unknown'` as busy. `false` is only ever the daemon
- * having positively read an empty slice.
- *
- * THE POLICY KNOB (OPEN PRODUCT QUESTION — not decided here)
- * ---------------------------------------------------------------------------
- * An idle tmux server or a shell prompt keeps a leaf populated forever. The
- * owner decision is that tmux/SSH shells ARE protected, but whether an IDLE
- * shell should pin the machine is undecided. So the report carries both
- * readings and the server chooses:
- *
- *   - `busy`                    the STRICT reading (`policy: 'strict'`): every
- *                                process in the slice counts. This is the
- *                                default and the only one a server should act
- *                                on until the product question is answered.
- *   - `busyIgnoringIdleShells`  the same read with the `idleShell` bucket
- *                                removed. Classification is by process name
- *                                (a shell or tmux with nothing else running),
- *                                a HEURISTIC: it cannot see a shell loop, so
- *                                it must never be the default.
- *
- * The `breakdown` says which bucket made it busy, for the "why" text.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEDICATED_RUNTIME_BUSY_LIMITS = exports.DEDICATED_RUNTIME_BUSY_SLICE_HEALTH = exports.DEDICATED_RUNTIME_BUSY_POLICIES = exports.DEDICATED_RUNTIME_BUSY_REPORT_VERSION = exports.DEDICATED_RUNTIME_BUSY_HEARTBEAT_KEY = exports.DEDICATED_RUNTIME_BUSY_REPORT_CAPABILITY = void 0;
-exports.parseDedicatedRuntimeBusyReport = parseDedicatedRuntimeBusyReport;
-exports.DEDICATED_RUNTIME_BUSY_REPORT_CAPABILITY = 'dedicated_runtime_busy_report_v1';
-/** The heartbeat key the report rides under. Sent only by a daemon that announced the capability. */
-exports.DEDICATED_RUNTIME_BUSY_HEARTBEAT_KEY = 'dedicatedRuntimeBusy';
-exports.DEDICATED_RUNTIME_BUSY_REPORT_VERSION = 1;
-/**
- * `strict`: every process in the slice (less the root sshd listener) counts.
- * The only value v1 sends; the field exists so a later relaxation is a new
- * value rather than a silent change of meaning.
- */
-exports.DEDICATED_RUNTIME_BUSY_POLICIES = ['strict'];
-/**
- * Why the daemon could not give a definite answer, or `ok`. Anything but `ok`
- * pairs with `busy: 'unknown'`.
- */
-exports.DEDICATED_RUNTIME_BUSY_SLICE_HEALTH = [
-    'ok',
-    'not_a_guest',
-    'slice_missing',
-    'slice_unreadable',
-    'ssh_not_in_slice',
-    'tree_too_large',
-    'quiesced',
-    'read_error',
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var dedicatedRuntimeBusyWire_exports = {};
+__export(dedicatedRuntimeBusyWire_exports, {
+  DEDICATED_RUNTIME_BUSY_HEARTBEAT_KEY: () => DEDICATED_RUNTIME_BUSY_HEARTBEAT_KEY,
+  DEDICATED_RUNTIME_BUSY_LIMITS: () => DEDICATED_RUNTIME_BUSY_LIMITS,
+  DEDICATED_RUNTIME_BUSY_POLICIES: () => DEDICATED_RUNTIME_BUSY_POLICIES,
+  DEDICATED_RUNTIME_BUSY_REPORT_CAPABILITY: () => DEDICATED_RUNTIME_BUSY_REPORT_CAPABILITY,
+  DEDICATED_RUNTIME_BUSY_REPORT_VERSION: () => DEDICATED_RUNTIME_BUSY_REPORT_VERSION,
+  DEDICATED_RUNTIME_BUSY_SLICE_HEALTH: () => DEDICATED_RUNTIME_BUSY_SLICE_HEALTH,
+  parseDedicatedRuntimeBusyReport: () => parseDedicatedRuntimeBusyReport
+});
+module.exports = __toCommonJS(dedicatedRuntimeBusyWire_exports);
+const DEDICATED_RUNTIME_BUSY_REPORT_CAPABILITY = "dedicated_runtime_busy_report_v1";
+const DEDICATED_RUNTIME_BUSY_HEARTBEAT_KEY = "dedicatedRuntimeBusy";
+const DEDICATED_RUNTIME_BUSY_REPORT_VERSION = 1;
+const DEDICATED_RUNTIME_BUSY_POLICIES = ["strict"];
+const DEDICATED_RUNTIME_BUSY_SLICE_HEALTH = [
+  "ok",
+  "not_a_guest",
+  "slice_missing",
+  "slice_unreadable",
+  "ssh_not_in_slice",
+  "tree_too_large",
+  "quiesced",
+  "read_error"
 ];
-exports.DEDICATED_RUNTIME_BUSY_LIMITS = {
-    /** Service leaf names carried for the "busy because of service X" text. */
-    maxServiceNames: 8,
-    maxServiceNameLength: 48,
-    /** Cgroup leaves the daemon will visit; more is `tree_too_large` -> unknown. */
-    maxLeaves: 64,
-    maxDepth: 4,
-    /** Processes the daemon classifies per read; the rest count as workload. */
-    maxClassifiedPids: 256,
-    /** Hard ceiling on the serialized report. */
-    maxSerializedBytes: 1024,
+const DEDICATED_RUNTIME_BUSY_LIMITS = {
+  /** Service leaf names carried for the "busy because of service X" text. */
+  maxServiceNames: 8,
+  maxServiceNameLength: 48,
+  /** Cgroup leaves the daemon will visit; more is `tree_too_large` -> unknown. */
+  maxLeaves: 64,
+  maxDepth: 4,
+  /** Processes the daemon classifies per read; the rest count as workload. */
+  maxClassifiedPids: 256,
+  /** Hard ceiling on the serialized report. */
+  maxSerializedBytes: 1024
 };
-/**
- * The reader's view of a daemon's heartbeat section. Anything malformed, from
- * a daemon that did not announce the capability, or oversized is `null`, and
- * the caller must then treat the machine as busy. Never trusts a field it did
- * not validate; a value is clamped, not coerced to "idle".
- */
 function parseDedicatedRuntimeBusyReport(raw) {
-    if (!raw || typeof raw !== 'object')
-        return null;
-    const r = raw;
-    if (r.version !== exports.DEDICATED_RUNTIME_BUSY_REPORT_VERSION)
-        return null;
-    if (!exports.DEDICATED_RUNTIME_BUSY_POLICIES.includes(r.policy))
-        return null;
-    const tri = (v) => v === true || v === false || v === 'unknown' ? v : undefined;
-    const busy = tri(r.busy);
-    const ignoring = tri(r.busyIgnoringIdleShells);
-    if (busy === undefined || ignoring === undefined)
-        return null;
-    if (!exports.DEDICATED_RUNTIME_BUSY_SLICE_HEALTH.includes(r.sliceHealth)) {
-        return null;
-    }
-    const readAtMs = typeof r.readAt === 'string' ? Date.parse(r.readAt) : NaN;
-    if (!Number.isFinite(readAtMs))
-        return null;
-    const b = r.breakdown;
-    if (!b || typeof b !== 'object')
-        return null;
-    const count = (v) => typeof v === 'number' && Number.isSafeInteger(v) && v >= 0 ? v : null;
-    const workload = count(b.workload);
-    const service = count(b.service);
-    const ssh = count(b.ssh);
-    const idleShell = count(b.idleShell);
-    const excludedSshd = count(b.excludedSshd);
-    if (workload === null ||
-        service === null ||
-        ssh === null ||
-        idleShell === null ||
-        excludedSshd === null ||
-        typeof b.truncated !== 'boolean' ||
-        !Array.isArray(b.services)) {
-        return null;
-    }
-    const services = b.services
-        .filter((s) => typeof s === 'string')
-        .slice(0, exports.DEDICATED_RUNTIME_BUSY_LIMITS.maxServiceNames)
-        .map((s) => s.slice(0, exports.DEDICATED_RUNTIME_BUSY_LIMITS.maxServiceNameLength));
-    const report = {
-        version: exports.DEDICATED_RUNTIME_BUSY_REPORT_VERSION,
-        policy: r.policy,
-        busy,
-        busyIgnoringIdleShells: ignoring,
-        breakdown: {
-            workload,
-            service,
-            ssh,
-            idleShell,
-            excludedSshd,
-            truncated: b.truncated,
-            services,
-        },
-        readAt: new Date(readAtMs).toISOString(),
-        sliceHealth: r.sliceHealth,
-    };
-    if (JSON.stringify(report).length > exports.DEDICATED_RUNTIME_BUSY_LIMITS.maxSerializedBytes)
-        return null;
-    return report;
+  if (!raw || typeof raw !== "object")
+    return null;
+  const r = raw;
+  if (r.version !== DEDICATED_RUNTIME_BUSY_REPORT_VERSION)
+    return null;
+  if (!DEDICATED_RUNTIME_BUSY_POLICIES.includes(r.policy))
+    return null;
+  const tri = (v) => v === true || v === false || v === "unknown" ? v : void 0;
+  const busy = tri(r.busy);
+  const ignoring = tri(r.busyIgnoringIdleShells);
+  if (busy === void 0 || ignoring === void 0)
+    return null;
+  if (!DEDICATED_RUNTIME_BUSY_SLICE_HEALTH.includes(r.sliceHealth)) {
+    return null;
+  }
+  const readAtMs = typeof r.readAt === "string" ? Date.parse(r.readAt) : NaN;
+  if (!Number.isFinite(readAtMs))
+    return null;
+  const b = r.breakdown;
+  if (!b || typeof b !== "object")
+    return null;
+  const count = (v) => typeof v === "number" && Number.isSafeInteger(v) && v >= 0 ? v : null;
+  const workload = count(b.workload);
+  const service = count(b.service);
+  const ssh = count(b.ssh);
+  const idleShell = count(b.idleShell);
+  const excludedSshd = count(b.excludedSshd);
+  if (workload === null || service === null || ssh === null || idleShell === null || excludedSshd === null || typeof b.truncated !== "boolean" || !Array.isArray(b.services)) {
+    return null;
+  }
+  const services = b.services.filter((s) => typeof s === "string").slice(0, DEDICATED_RUNTIME_BUSY_LIMITS.maxServiceNames).map((s) => s.slice(0, DEDICATED_RUNTIME_BUSY_LIMITS.maxServiceNameLength));
+  const report = {
+    version: DEDICATED_RUNTIME_BUSY_REPORT_VERSION,
+    policy: r.policy,
+    busy,
+    busyIgnoringIdleShells: ignoring,
+    breakdown: {
+      workload,
+      service,
+      ssh,
+      idleShell,
+      excludedSshd,
+      truncated: b.truncated,
+      services
+    },
+    readAt: new Date(readAtMs).toISOString(),
+    sliceHealth: r.sliceHealth
+  };
+  if (JSON.stringify(report).length > DEDICATED_RUNTIME_BUSY_LIMITS.maxSerializedBytes)
+    return null;
+  return report;
 }
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  DEDICATED_RUNTIME_BUSY_HEARTBEAT_KEY,
+  DEDICATED_RUNTIME_BUSY_LIMITS,
+  DEDICATED_RUNTIME_BUSY_POLICIES,
+  DEDICATED_RUNTIME_BUSY_REPORT_CAPABILITY,
+  DEDICATED_RUNTIME_BUSY_REPORT_VERSION,
+  DEDICATED_RUNTIME_BUSY_SLICE_HEALTH,
+  parseDedicatedRuntimeBusyReport
+});

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/dedicatedRuntimeWakeWire.js

@@ -1,117 +1,95 @@
 "use strict";
-/**
- * The Dedicated Runtime wake-progress wire contract (power-control task W5,
- * `dedicated-runtime-power-and-demand-wake-2026-10-07.md` §5.3, §7.2, §9).
- *
- * Declared ONCE, here, for the same reason `computerWire.ts` is: the browser,
- * the React Native app and the CLI import it, and none of them may spell the
- * event, the capability or a code a second time. `dedicatedRuntimeWakeWire.test.ts`
- * fails on a second spelling in the API.
- *
- * WHAT IT IS
- * ---------------------------------------------------------------------------
- * A person opens a terminal, an SSH channel, a service call or the Computer on a
- * STOPPED Dedicated Runtime. That is wake progress, not an error: the relay asks
- * `requestWake` (source `person`) to start the machine, then tells THAT request,
- * in stages, how far the start has got, until the machine is assignable and the
- * original request is served, or a bound runs out and it says why and what to do.
- *
- * THE CLIENT ANNOUNCES IT
- * ---------------------------------------------------------------------------
- * A client that has not announced `dedicated_wake_progress_v1` in the open
- * request's `capabilities` array is NEVER sent `dedicated:wake:progress` and is
- * never made to wait: it gets an immediate typed refusal instead. (A client
- * socket has no registration step to announce on, so the announcement rides each
- * request — stateless, nothing held in the relay.)
- *
- * THE VOCABULARY
- * ---------------------------------------------------------------------------
- * `phase` uses the cold-start measurement's phase names
- * (`scripts/dedicated-runtime/measure-cold-start.js` `COLD_START_PHASES`), so
- * what the person sees and what F4 measures are the same words. A spec holds the
- * two lists equal.
- *
- * NOT A SPINNER WITHOUT A BOUND
- * ---------------------------------------------------------------------------
- * `boundMs` is carried on every event so a surface can show elapsed-of-bound.
- * The bound sits ABOVE a slow-but-working start (design §9): running out says
- * "this is taking longer than expected" and the machine is left starting; it is
- * never an accusation that the machine is dead.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEDICATED_WAKE_POLL_MS = exports.DEDICATED_WAKE_BOUND_MS = exports.DEDICATED_WAKE_CODES = exports.DEDICATED_WAKE_SURFACES = exports.DEDICATED_WAKE_STATES = exports.DEDICATED_WAKE_PHASES = exports.DEDICATED_WAKE_CAPABILITIES = exports.DEDICATED_WAKE_EVENTS = void 0;
-exports.clientAnnouncesWakeProgress = clientAnnouncesWakeProgress;
-/** API -> client, on the same socket as the request it belongs to. */
-exports.DEDICATED_WAKE_EVENTS = {
-    progress: 'dedicated:wake:progress',
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
 };
-/** Announced in the open request's `capabilities` array. */
-exports.DEDICATED_WAKE_CAPABILITIES = {
-    progress: 'dedicated_wake_progress_v1',
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
 };
-/** Same names, same order as `WAKE_PHASES` in api/server/services/DedicatedRuntime/wakePhases.js (pinned by a test). */
-exports.DEDICATED_WAKE_PHASES = [
-    'start_requested',
-    'provider_start_accepted',
-    'instance_running',
-    'daemon_connected',
-    'first_heartbeat',
-    'assignable',
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var dedicatedRuntimeWakeWire_exports = {};
+__export(dedicatedRuntimeWakeWire_exports, {
+  DEDICATED_WAKE_BOUND_MS: () => DEDICATED_WAKE_BOUND_MS,
+  DEDICATED_WAKE_CAPABILITIES: () => DEDICATED_WAKE_CAPABILITIES,
+  DEDICATED_WAKE_CODES: () => DEDICATED_WAKE_CODES,
+  DEDICATED_WAKE_EVENTS: () => DEDICATED_WAKE_EVENTS,
+  DEDICATED_WAKE_PHASES: () => DEDICATED_WAKE_PHASES,
+  DEDICATED_WAKE_POLL_MS: () => DEDICATED_WAKE_POLL_MS,
+  DEDICATED_WAKE_STATES: () => DEDICATED_WAKE_STATES,
+  DEDICATED_WAKE_SURFACES: () => DEDICATED_WAKE_SURFACES,
+  clientAnnouncesWakeProgress: () => clientAnnouncesWakeProgress
+});
+module.exports = __toCommonJS(dedicatedRuntimeWakeWire_exports);
+const DEDICATED_WAKE_EVENTS = {
+  progress: "dedicated:wake:progress"
+};
+const DEDICATED_WAKE_CAPABILITIES = {
+  progress: "dedicated_wake_progress_v1"
+};
+const DEDICATED_WAKE_PHASES = [
+  "start_requested",
+  "provider_start_accepted",
+  "instance_running",
+  "daemon_connected",
+  "first_heartbeat",
+  "assignable"
 ];
-/**
- * - `waking`    a start is in flight; `phase` says how far.
- * - `ready`     assignable; the original request is about to be served.
- * - `deferred`  the machine is stopping; nothing was started. Retry after `retryAfterSeconds`.
- * - `refused`   the start was refused, with `code`, `reason`, `detail`, `fix`.
- * - `timed_out` the bound ran out while it was still starting. Not a failure of the machine.
- */
-exports.DEDICATED_WAKE_STATES = [
-    'waking',
-    'ready',
-    'deferred',
-    'refused',
-    'timed_out',
+const DEDICATED_WAKE_STATES = [
+  "waking",
+  "ready",
+  "deferred",
+  "refused",
+  "timed_out"
 ];
-/** The surfaces a wake can be asked from. */
-exports.DEDICATED_WAKE_SURFACES = [
-    'terminal',
-    'ssh',
-    'services',
-    'templates',
-    'computer',
-    'http',
+const DEDICATED_WAKE_SURFACES = [
+  "terminal",
+  "ssh",
+  "services",
+  "templates",
+  "computer",
+  "http"
 ];
-/**
- * Typed refusals. Each is a different fact with a different next step; none of
- * them is the generic "Dedicated Runtime dispatch was refused".
- */
-exports.DEDICATED_WAKE_CODES = {
-    /** Stopped, and this request did not (or could not) wake it. */
-    stopped: 'DEDICATED_RUNTIME_STOPPED',
-    /** A stop is finishing; retry when it has. */
-    stopping: 'DEDICATED_RUNTIME_STOPPING',
-    /** A start is in flight (ours or someone's). */
-    starting: 'DEDICATED_RUNTIME_STARTING',
-    /** The bound ran out while it was still starting. */
-    timeout: 'DEDICATED_RUNTIME_WAKE_TIMEOUT',
-    /** The start was refused: the plan no longer includes the machine. */
-    entitlement: 'DEDICATED_RUNTIME_WAKE_REFUSED_ENTITLEMENT',
-    /** The start was refused: the spend cap was reached. */
-    spendCap: 'DEDICATED_RUNTIME_WAKE_REFUSED_SPEND_CAP',
-    /** Any other refusal; `reason` names it. */
-    refused: 'DEDICATED_RUNTIME_WAKE_REFUSED',
-    /** The start was requested and the machine fell back to stopped or failed. */
-    failed: 'DEDICATED_RUNTIME_WAKE_FAILED',
+const DEDICATED_WAKE_CODES = {
+  /** Stopped, and this request did not (or could not) wake it. */
+  stopped: "DEDICATED_RUNTIME_STOPPED",
+  /** A stop is finishing; retry when it has. */
+  stopping: "DEDICATED_RUNTIME_STOPPING",
+  /** A start is in flight (ours or someone's). */
+  starting: "DEDICATED_RUNTIME_STARTING",
+  /** The bound ran out while it was still starting. */
+  timeout: "DEDICATED_RUNTIME_WAKE_TIMEOUT",
+  /** The start was refused: the plan no longer includes the machine. */
+  entitlement: "DEDICATED_RUNTIME_WAKE_REFUSED_ENTITLEMENT",
+  /** The start was refused: the spend cap was reached. */
+  spendCap: "DEDICATED_RUNTIME_WAKE_REFUSED_SPEND_CAP",
+  /** Any other refusal; `reason` names it. */
+  refused: "DEDICATED_RUNTIME_WAKE_REFUSED",
+  /** The start was requested and the machine fell back to stopped or failed. */
+  failed: "DEDICATED_RUNTIME_WAKE_FAILED"
 };
-/**
- * How long a surface waits for a start before saying it is taking longer than
- * expected. Above the slow-but-working case: a cold start on a fresh guest
- * takes 25-30 s for the browser alone, and the AMI boot is longer. It is a
- * bound on what we show, never a verdict on the machine.
- */
-exports.DEDICATED_WAKE_BOUND_MS = 180_000;
-/** How often the relay re-reads the lease while waiting. */
-exports.DEDICATED_WAKE_POLL_MS = 2_000;
+const DEDICATED_WAKE_BOUND_MS = 18e4;
+const DEDICATED_WAKE_POLL_MS = 2e3;
 function clientAnnouncesWakeProgress(capabilities) {
-    return Array.isArray(capabilities) && capabilities.includes(exports.DEDICATED_WAKE_CAPABILITIES.progress);
+  return Array.isArray(capabilities) && capabilities.includes(DEDICATED_WAKE_CAPABILITIES.progress);
 }
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  DEDICATED_WAKE_BOUND_MS,
+  DEDICATED_WAKE_CAPABILITIES,
+  DEDICATED_WAKE_CODES,
+  DEDICATED_WAKE_EVENTS,
+  DEDICATED_WAKE_PHASES,
+  DEDICATED_WAKE_POLL_MS,
+  DEDICATED_WAKE_STATES,
+  DEDICATED_WAKE_SURFACES,
+  clientAnnouncesWakeProgress
+});

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/desktopWire.js

@@ -1,46 +1,80 @@
 "use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.COMPUTER_DESKTOP_CONTROL_CAPABILITY = exports.COMPUTER_DESKTOP_CLOSED_REASONS = exports.COMPUTER_DESKTOP_LIMITS = exports.DAEMON_COMPUTER_DESKTOP_EVENTS = exports.COMPUTER_DESKTOP_EVENTS = exports.COMPUTER_DESKTOP_SURFACE_ID = exports.COMPUTER_DESKTOP_CAPABILITY = void 0;
-exports.isComputerDesktopBase64 = isComputerDesktopBase64;
-/** A separately negotiated read-only desktop stream, not a browser surface or an input grant. */
-exports.COMPUTER_DESKTOP_CAPABILITY = 'computer_desktop_observe_v1';
-exports.COMPUTER_DESKTOP_SURFACE_ID = 'desktop:main';
-exports.COMPUTER_DESKTOP_EVENTS = {
-    subscribe: 'computer:desktop:subscribe',
-    protocol: 'computer:desktop:protocol',
-    unsubscribe: 'computer:desktop:unsubscribe',
-    data: 'computer:desktop:data',
-    control: 'computer:desktop:control',
-    input: 'computer:desktop:input',
-    controlChanged: 'computer:desktop:control-changed',
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
 };
-exports.DAEMON_COMPUTER_DESKTOP_EVENTS = {
-    subscribe: 'daemon:computer:desktop:subscribe',
-    protocol: 'daemon:computer:desktop:protocol',
-    unsubscribe: 'daemon:computer:desktop:unsubscribe',
-    data: 'daemon:computer:desktop:data',
-    control: 'daemon:computer:desktop:control',
-    input: 'daemon:computer:desktop:input',
-    controlChanged: 'daemon:computer:desktop:control-changed',
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
 };
-exports.COMPUTER_DESKTOP_LIMITS = Object.freeze({
-    maxIdChars: 160,
-    maxProtocolBase64Chars: 88 * 1024,
-    maxDataBase64Chars: 128 * 1024,
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var desktopWire_exports = {};
+__export(desktopWire_exports, {
+  COMPUTER_DESKTOP_CAPABILITY: () => COMPUTER_DESKTOP_CAPABILITY,
+  COMPUTER_DESKTOP_CLOSED_REASONS: () => COMPUTER_DESKTOP_CLOSED_REASONS,
+  COMPUTER_DESKTOP_CONTROL_CAPABILITY: () => COMPUTER_DESKTOP_CONTROL_CAPABILITY,
+  COMPUTER_DESKTOP_EVENTS: () => COMPUTER_DESKTOP_EVENTS,
+  COMPUTER_DESKTOP_LIMITS: () => COMPUTER_DESKTOP_LIMITS,
+  COMPUTER_DESKTOP_SURFACE_ID: () => COMPUTER_DESKTOP_SURFACE_ID,
+  DAEMON_COMPUTER_DESKTOP_EVENTS: () => DAEMON_COMPUTER_DESKTOP_EVENTS,
+  isComputerDesktopBase64: () => isComputerDesktopBase64
 });
-exports.COMPUTER_DESKTOP_CLOSED_REASONS = ['unavailable', 'revoked', 'protocol_error', 'slow_viewer', 'ended', 'private_control'];
-/** Canonical RFC 4648 base64 including zero pad bits; no whitespace/URL alphabet. */
+module.exports = __toCommonJS(desktopWire_exports);
+const COMPUTER_DESKTOP_CAPABILITY = "computer_desktop_observe_v1";
+const COMPUTER_DESKTOP_SURFACE_ID = "desktop:main";
+const COMPUTER_DESKTOP_EVENTS = {
+  subscribe: "computer:desktop:subscribe",
+  protocol: "computer:desktop:protocol",
+  unsubscribe: "computer:desktop:unsubscribe",
+  data: "computer:desktop:data",
+  control: "computer:desktop:control",
+  input: "computer:desktop:input",
+  controlChanged: "computer:desktop:control-changed"
+};
+const DAEMON_COMPUTER_DESKTOP_EVENTS = {
+  subscribe: "daemon:computer:desktop:subscribe",
+  protocol: "daemon:computer:desktop:protocol",
+  unsubscribe: "daemon:computer:desktop:unsubscribe",
+  data: "daemon:computer:desktop:data",
+  control: "daemon:computer:desktop:control",
+  input: "daemon:computer:desktop:input",
+  controlChanged: "daemon:computer:desktop:control-changed"
+};
+const COMPUTER_DESKTOP_LIMITS = Object.freeze({
+  maxIdChars: 160,
+  maxProtocolBase64Chars: 88 * 1024,
+  maxDataBase64Chars: 128 * 1024
+});
+const COMPUTER_DESKTOP_CLOSED_REASONS = ["unavailable", "revoked", "protocol_error", "slow_viewer", "ended", "private_control"];
 function isComputerDesktopBase64(value, maxChars) {
-    if (typeof value !== 'string' || !value.length || value.length > maxChars || value.length % 4 !== 0)
-        return false;
-    if (!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(value))
-        return false;
-    const alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
-    if (value.endsWith('=='))
-        return (alphabet.indexOf(value[value.length - 3]) & 15) === 0;
-    if (value.endsWith('='))
-        return (alphabet.indexOf(value[value.length - 2]) & 3) === 0;
-    return true;
+  if (typeof value !== "string" || !value.length || value.length > maxChars || value.length % 4 !== 0)
+    return false;
+  if (!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(value))
+    return false;
+  const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+  if (value.endsWith("=="))
+    return (alphabet.indexOf(value[value.length - 3]) & 15) === 0;
+  if (value.endsWith("="))
+    return (alphabet.indexOf(value[value.length - 2]) & 3) === 0;
+  return true;
 }
-/** Typed human input is independent of read-only RFB negotiation. */
-exports.COMPUTER_DESKTOP_CONTROL_CAPABILITY = 'computer_desktop_control_v1';
+const COMPUTER_DESKTOP_CONTROL_CAPABILITY = "computer_desktop_control_v1";
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  COMPUTER_DESKTOP_CAPABILITY,
+  COMPUTER_DESKTOP_CLOSED_REASONS,
+  COMPUTER_DESKTOP_CONTROL_CAPABILITY,
+  COMPUTER_DESKTOP_EVENTS,
+  COMPUTER_DESKTOP_LIMITS,
+  COMPUTER_DESKTOP_SURFACE_ID,
+  DAEMON_COMPUTER_DESKTOP_EVENTS,
+  isComputerDesktopBase64
+});