@skrr-ai/cli 0.1.88 → 0.1.89

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/computerWire.js

@@ -36,6 +36,22 @@ export const COMPUTER_EVENTS = {
     attach: 'computer:attach',
     /** client → API: leave. */
     detach: 'computer:detach',
+    /**
+     * client → API: read the whole manifest again ON THE SAME ATTACHMENT, after
+     * a missed delta or a `stale_epoch` (OSK-13815). The ack carries what an
+     * attach's does — the attachment id (unchanged), the manifest and the
+     * operations — or a typed refusal; `not_found` means the attachment is gone
+     * and only then does the client attach afresh. Re-reading state must never
+     * change who the reader is: a control lease is bound to the attachment
+     * (`holderAttachmentId`), and a resync that detached and attached again
+     * orphaned the hold the person had just taken. Answered by the API, which
+     * renews the binding with the daemon exactly as its periodic re-check does
+     * (a repeated `daemon:computer:attach` with the same id), so it has no
+     * daemon mirror and needs no daemon capability. An API that predates it
+     * never answers; the client bounds the wait and falls back to attaching
+     * afresh.
+     */
+    resync: 'computer:resync',
     /** API → client: this attachment was detached, with the reason (revoked, stale generation, …). */
     detached: 'computer:detached',
     /** API → client: a whole manifest, or a revisioned delta. */
@@ -177,6 +193,24 @@ export const COMPUTER_SERVER_EVENT_KEYS = [
     'activity',
     'filesChanged',
 ];
+/**
+ * Client → API requests the API answers itself, with no `daemon:computer:*`
+ * mirror: every other client request is relayed to the daemon under the same
+ * key. `resync` renews the binding through the daemon's existing attach
+ * (OSK-13815).
+ */
+export const COMPUTER_API_ANSWERED_EVENT_KEYS = [
+    'resync',
+];
+/** How long the client waits for a `computer:resync` answer before attaching afresh (an API that predates it never answers). */
+export const COMPUTER_RESYNC_TIMEOUT_MS = 12_000;
+/**
+ * How long a client holds a manifest delta that arrived AHEAD of its
+ * predecessor before reading the hole as a loss (OSK-13815). Deltas fan out
+ * through a relay of several replicas; a reorder is milliseconds, a loss is
+ * forever, and only a loss needs the whole manifest again.
+ */
+export const COMPUTER_MANIFEST_REORDER_WAIT_MS = 300;
 // ---------------------------------------------------------------------------
 // Capabilities (§7.1)
 // ---------------------------------------------------------------------------
@@ -281,6 +315,20 @@ export const COMPUTER_CAPABILITIES = {
      * browser; nothing is proxied to it. Announced by the relay that serves it.
      */
     declaredServices: 'computer_declared_services_v1',
+    /**
+     * The page follows the controlling window (§6.2 "a stable viewport", §7.1,
+     * OSK-13808): a browser `viewport` input, sent only by the attachment that
+     * holds the browser's lease at the current epoch, sizes the streamed page
+     * to that window's content box (`COMPUTER_BROWSER_VIEWPORT_LIMITS`). Only
+     * while a person holds control: handing back — or the hold lapsing, being
+     * revoked or moving to the agent any other way — restores the browser's own
+     * viewport before the agent can act, so an agent never inherits a person's
+     * size. Watchers keep seeing the page at whatever size it is, scaled to
+     * fit. Announced only where the browser driver can override and restore
+     * the page's metrics; without it the window scales the fixed page, as
+     * before, and never sends the input.
+     */
+    browserViewport: 'computer_browser_viewport_v1',
 };
 export const COMPUTER_CAPABILITY_VALUES = Object.values(COMPUTER_CAPABILITIES);
 // ---------------------------------------------------------------------------
@@ -322,6 +370,12 @@ export const COMPUTER_REFUSAL_CODES = [
     'machine_unavailable',
     /** The machine's daemon is not answering. */
     'daemon_unreachable',
+    /**
+     * The relay failed while answering — an exception, not a fact about the
+     * machine. Retryable; the API log carries the same `correlationId`
+     * (OSK-13823). Never `machine_unavailable`, which says the machine is down.
+     */
+    'relay_error',
     /** A bounded wait ran out (§7.2 R4). */
     'timeout',
     'invalid_request',
@@ -335,22 +389,16 @@ export const COMPUTER_REFUSAL_CODES = [
     'service_limit',
 ];
 /**
- * Older spellings the daemon boundary accepts for one release (§5.2). After
- * that release this map is emptied, and nothing else names the old spelling.
+ * The code when it is a computer refusal, else `null`. There is one spelling
+ * per code: the browser's older spelling of `human_control` was accepted for
+ * one release and retired with the old browser events (§5.2, OSK-13509).
  */
-export const COMPUTER_LEGACY_REFUSAL_SPELLINGS = Object.freeze({
-    live_view_active: 'human_control',
-});
-/** The canonical code for a received spelling, or `null` when it is not a computer refusal. */
 export function normalizeComputerRefusalCode(code) {
     if (typeof code !== 'string') {
         return null;
     }
-    if (COMPUTER_REFUSAL_CODES.includes(code)) {
-        return code;
-    }
-    return Object.prototype.hasOwnProperty.call(COMPUTER_LEGACY_REFUSAL_SPELLINGS, code)
-        ? COMPUTER_LEGACY_REFUSAL_SPELLINGS[code]
+    return COMPUTER_REFUSAL_CODES.includes(code)
+        ? code
         : null;
 }
 // ---------------------------------------------------------------------------
@@ -365,6 +413,25 @@ export const COMPUTER_ACTOR_KINDS = ['agent', 'human'];
  * API and a client saw a `seq` hole no fill could close.
  */
 export const COMPUTER_ACTIVITY_ACTOR_KINDS = [...COMPUTER_ACTOR_KINDS, 'system'];
+/**
+ * The session ids the PLATFORM's own routes run daemon tools under — the web
+ * Files surface (`computer-files:` on a personal machine, `dedicated-runtime:`
+ * on a Dedicated Runtime) and the owner's `skrr machines dedicated` commands.
+ * No agent and no model is behind such a session: the person who asked is
+ * known to the API (which audits it), not to the daemon. So an activity event
+ * produced under one names no agent (OSK-13790: a person's upload used to read
+ * "agent created …"). Built by `ComputerFileService.runPersonalMachineTool`
+ * and `DedicatedRuntimeMachineAccess.runDedicatedRuntimeTool`.
+ */
+export const COMPUTER_PLATFORM_ROUTE_SESSION_PREFIXES = [
+    'dedicated-runtime:',
+    'computer-files:',
+];
+/** Whether a tool call's session is one of the platform's own routes, not an agent's. */
+export function isComputerPlatformRouteSession(sessionId) {
+    return (typeof sessionId === 'string' &&
+        COMPUTER_PLATFORM_ROUTE_SESSION_PREFIXES.some((prefix) => sessionId.startsWith(prefix)));
+}
 /**
  * How a person present on the machine reached it: as its owner, or through a
  * grant at one of the two tiers. Agents carry no access level — an agent
@@ -533,7 +600,11 @@ export const COMPUTER_SURFACE_END_REASONS = [
     /** Someone signed the computer's browser out everywhere, which ends every browser window. */
     'browser_reset',
 ];
-/** The browser's fixed logical viewport, whoever is looking (§6.2). */
+/**
+ * The browser's logical viewport whoever is looking (§6.2): what the agent
+ * always works at. A person holding control may size the page to their window
+ * (`computer_browser_viewport_v1`); handing back restores this.
+ */
 export const COMPUTER_BROWSER_VIEWPORT = Object.freeze({ width: 1280, height: 800 });
 /** One frame never exceeds this, so it fits the SSE transport every guest uses (§7.2 R7). */
 export const COMPUTER_FRAME_MAX_BYTES = 1024 * 1024;
@@ -607,7 +678,10 @@ export const COMPUTER_TERMINAL_HISTORY_CAUSES = [
  * verified (OSK-13535).
  */
 export const COMPUTER_TERMINAL_CAVEATS = ['windows_pty_unverified'];
-/** Input a browser surface takes. `tab` needs `computer_browser_tabs_v1`. */
+/**
+ * Input a browser surface takes. `tab` needs `computer_browser_tabs_v1`;
+ * `viewport` needs `computer_browser_viewport_v1`.
+ */
 export const COMPUTER_BROWSER_INPUT_TYPES = [
     'pointer',
     'key',
@@ -615,7 +689,57 @@ export const COMPUTER_BROWSER_INPUT_TYPES = [
     'navigate',
     'history',
     'tab',
+    'viewport',
 ];
+/**
+ * What a `viewport` input may ask of the page (OSK-13808), in CSS pixels: the
+ * controlling window's content box, bounded so no window can make the page
+ * absurd for the agent that gets it back, and aspect-clamped (`minAspect` and
+ * `maxAspect` are width ÷ height) so a sliver of a window cannot either.
+ * Device pixel ratio is not part of it: the page keeps the browser's own, so a
+ * high-density screen changes no layout and no picture size.
+ */
+export const COMPUTER_BROWSER_VIEWPORT_LIMITS = Object.freeze({
+    minWidth: 320,
+    maxWidth: 2560,
+    minHeight: 240,
+    maxHeight: 1600,
+    minAspect: 0.4,
+    maxAspect: 3.2,
+});
+/**
+ * The size a `viewport` input asks for, made legal: whole CSS pixels inside
+ * `COMPUTER_BROWSER_VIEWPORT_LIMITS`, its aspect inside the clamp. Total and
+ * idempotent: the window sends what this returns and the daemon applies what
+ * this returns, so both ends agree on the page a size produces. Null for a size
+ * with no area (a hidden or collapsed window asks for nothing).
+ */
+export function clampComputerBrowserViewport(size) {
+    const { width: rawWidth, height: rawHeight } = size ?? {};
+    if (!Number.isFinite(rawWidth) || !Number.isFinite(rawHeight))
+        return null;
+    if (!(rawWidth > 0) || !(rawHeight > 0))
+        return null;
+    const limits = COMPUTER_BROWSER_VIEWPORT_LIMITS;
+    const bound = (value, low, high) => Math.max(low, Math.min(high, Math.round(value)));
+    let width = bound(rawWidth, limits.minWidth, limits.maxWidth);
+    let height = bound(rawHeight, limits.minHeight, limits.maxHeight);
+    if (width / height > limits.maxAspect) {
+        // Too wide: narrow it first; a height already at its floor cannot grow the other way.
+        width = Math.max(limits.minWidth, Math.floor(height * limits.maxAspect));
+        if (width / height > limits.maxAspect) {
+            height = Math.min(limits.maxHeight, Math.ceil(width / limits.maxAspect));
+        }
+    }
+    else if (width / height < limits.minAspect) {
+        // Too tall: shorten it first, then widen if the width is at its floor.
+        height = Math.max(limits.minHeight, Math.floor(width / limits.minAspect));
+        if (width / height < limits.minAspect) {
+            width = Math.min(limits.maxWidth, Math.ceil(height * limits.minAspect));
+        }
+    }
+    return { width, height };
+}
 /**
  * The client OS a browser `key` input comes from. A person's shortcuts are
  * mapped onto the Linux page's by the daemon: on `mac`, Command is Control,

package/dist/node_modules/@skrr-ai/auth-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skrr-ai/auth-core",
-  "version": "0.4.14",
+  "version": "0.4.15",
   "main": "dist/cjs/index.js",
   "types": "dist/esm/index.d.ts",
   "exports": {