@skrr-ai/cli 0.1.89 → 0.1.90

package/dist/lib/dedicated-power.d.ts

@@ -0,0 +1,61 @@
+import { type DedicatedRuntimePowerSummary, type DedicatedPowerPolicy, type DedicatedRuntimePowerPolicyState, type OnDemandIneligibleError, type SetDedicatedRuntimePowerPolicyResponse } from '@skrr-ai/data-provider';
+import { type WhenOptions } from './format';
+import { type DedicatedRuntimeScope } from './dedicated-machines';
+/**
+ * Domain lib for `skrr machines dedicated power …` (W6). Like its siblings in
+ * `dedicated-machines.ts` it speaks `apiFetch` so every refusal arrives as an
+ * `ApiFetchError` the Dedicated commands already know how to word; the route is
+ * covered by the machines parity spec through this file. The web calls the same
+ * route through `dataService.setDedicatedRuntimePowerPolicy`.
+ */
+export type SetPowerOutcome = {
+    ok: true;
+    response: SetDedicatedRuntimePowerPolicyResponse;
+} | {
+    ok: false;
+    refusal: OnDemandIneligibleError;
+};
+/**
+ * Set the policy. An ineligible `on_demand` is a RESULT, not an exception: the
+ * refusal is the answer the caller must explain (reason + fix). Every other
+ * failure is rethrown for the command's usual error handling.
+ */
+export declare function setDedicatedPowerPolicy(leaseId: string, request: {
+    policy?: DedicatedPowerPolicy;
+    idleAfterMinutes?: number;
+    budgetHoursPerMonth?: number | null;
+}, scope?: DedicatedRuntimeScope): Promise<SetPowerOutcome>;
+/**
+ * The policy in words. `on_demand` promises a stop only when the platform stops idle machines at all
+ * (`autoStopMode`); an unknown mode is never read as on, so the sentence never promises one.
+ */
+export declare function describePolicyWords(policy: DedicatedPowerPolicy, idleAfterMinutes: number, autoStopMode?: 'off' | 'canary' | 'on'): string;
+export declare function describePowerPolicy(power: DedicatedRuntimePowerPolicyState, autoStopMode?: 'off' | 'canary' | 'on'): string;
+/** `GET /api/machines/dedicated/:leaseId/power` — the read-only power card. */
+export declare function getDedicatedPowerSummary(leaseId: string, scope?: DedicatedRuntimeScope): Promise<DedicatedRuntimePowerSummary>;
+type PowerDecisionView = NonNullable<DedicatedRuntimePowerSummary['decision']>;
+/** The stay/stop/wake decision in words: the shared reason copy backs the server's detail. */
+export declare function describePowerDecisionLines(decision: PowerDecisionView): {
+    headline: string;
+    detail: string;
+    fix: string | null;
+};
+/**
+ * The last automatic stop and how it was judged (A3). Every word comes from the shared copy
+ * (`describeAutoStopVerdict`, `describeMachineCheckpointOutcome`); nothing is composed here.
+ * `verdict: null` is "not judged yet", and is said so: it is never rendered as clean. A sentence
+ * the decision text already carries (the server appends it while the machine is stopped) is not
+ * repeated.
+ */
+export declare function describeLastAutoStopLines(last: DedicatedRuntimePowerSummary['lastAutoStop'], decisionDetail?: string, when?: WhenOptions): {
+    lines: string[];
+    fix: string | null;
+};
+/** The latest wake decision and who asked, as lines; empty when there is none. */
+export declare function describeLastWakeDecisionLines(wake: DedicatedRuntimePowerSummary['lastWakeDecision'], when?: WhenOptions): string[];
+/** The lines of `power show`. */
+export declare function describePowerSummary(summary: DedicatedRuntimePowerSummary, when?: WhenOptions): string[];
+/** The lines of `power explain`; the fix is always last. */
+export declare function describePowerExplanation(summary: DedicatedRuntimePowerSummary, when?: WhenOptions): string[];
+export declare function describeBudget(power: DedicatedRuntimePowerPolicyState): string;
+export {};

package/dist/lib/dedicated-power.js

@@ -0,0 +1,243 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setDedicatedPowerPolicy = setDedicatedPowerPolicy;
+exports.describePolicyWords = describePolicyWords;
+exports.describePowerPolicy = describePowerPolicy;
+exports.getDedicatedPowerSummary = getDedicatedPowerSummary;
+exports.describePowerDecisionLines = describePowerDecisionLines;
+exports.describeLastAutoStopLines = describeLastAutoStopLines;
+exports.describeLastWakeDecisionLines = describeLastWakeDecisionLines;
+exports.describePowerSummary = describePowerSummary;
+exports.describePowerExplanation = describePowerExplanation;
+exports.describeBudget = describeBudget;
+const data_provider_1 = require("@skrr-ai/data-provider");
+const api_fetch_1 = require("./api-fetch");
+const format_1 = require("./format");
+const dedicated_machines_1 = require("./dedicated-machines");
+function bodyOf(err) {
+    const raw = err?.body;
+    if (typeof raw !== 'string')
+        return null;
+    try {
+        const parsed = JSON.parse(raw);
+        return parsed && typeof parsed === 'object' ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Set the policy. An ineligible `on_demand` is a RESULT, not an exception: the
+ * refusal is the answer the caller must explain (reason + fix). Every other
+ * failure is rethrown for the command's usual error handling.
+ */
+async function setDedicatedPowerPolicy(leaseId, request, scope = {}) {
+    try {
+        const response = await (0, api_fetch_1.apiFetch)((0, dedicated_machines_1.withDedicatedScope)(`/api/machines/dedicated/${encodeURIComponent(leaseId)}/power`, scope), { method: 'PUT', body: request });
+        return { ok: true, response };
+    }
+    catch (err) {
+        const body = bodyOf(err);
+        if (err?.status === 409 && body?.code === 'ON_DEMAND_INELIGIBLE') {
+            const reason = String(body.reason ?? '');
+            // The vocabulary is shared; the server's words win, the shared copy backs them up.
+            const copy = (0, data_provider_1.describeOnDemandIneligibility)(reason);
+            return {
+                ok: false,
+                refusal: {
+                    error: String(body.error ?? 'on_demand is not available for this machine yet.'),
+                    code: 'ON_DEMAND_INELIGIBLE',
+                    reason: reason,
+                    detail: String(body.detail ?? copy?.detail ?? ''),
+                    fix: String(body.fix ?? copy?.fix ?? ''),
+                },
+            };
+        }
+        throw err;
+    }
+}
+/**
+ * The policy in words. `on_demand` promises a stop only when the platform stops idle machines at all
+ * (`autoStopMode`); an unknown mode is never read as on, so the sentence never promises one.
+ */
+function describePolicyWords(policy, idleAfterMinutes, autoStopMode) {
+    if (policy === 'on_demand') {
+        if (autoStopMode === 'on' || autoStopMode === 'canary') {
+            return `on_demand (stops after ${idleAfterMinutes} minutes idle)`;
+        }
+        // Unknown is neutral, never a claim in either direction.
+        return autoStopMode === 'off'
+            ? `on_demand (idle limit ${idleAfterMinutes} minutes; automatic stop is not turned on yet, so nothing stops it)`
+            : `on_demand (stops after ${idleAfterMinutes} minutes idle when automatic stop is on)`;
+    }
+    if (policy === 'manual')
+        return 'manual (stops and starts only when you do)';
+    return policy;
+}
+function describePowerPolicy(power, autoStopMode) {
+    const base = describePolicyWords(power.policy, power.idleAfterMinutes, autoStopMode);
+    return power.policyStored ? base : `${base} (default; never set)`;
+}
+/* ---- power show / explain (V5) ---------------------------------------------- */
+/** `GET /api/machines/dedicated/:leaseId/power` — the read-only power card. */
+function getDedicatedPowerSummary(leaseId, scope = {}) {
+    return (0, api_fetch_1.apiFetch)((0, dedicated_machines_1.withDedicatedScope)(`/api/machines/dedicated/${encodeURIComponent(leaseId)}/power`, scope));
+}
+/** The stay/stop/wake decision in words: the shared reason copy backs the server's detail. */
+function describePowerDecisionLines(decision) {
+    const copy = (0, data_provider_1.describePowerReason)(decision.reason);
+    const VERBS = { stay: 'Staying on', stop: 'Stopped', wake: 'Wake' };
+    const verb = VERBS[decision.question] ?? decision.question;
+    return {
+        // The headline is the human label only; the reason token lives in `--json` and `power explain`.
+        // With no shared copy and no server detail there is no sentence, so the token is the last resort.
+        headline: decision.detail || copy?.detail ? verb : `${verb}: ${decision.reason}`,
+        detail: decision.detail || copy?.detail || '',
+        fix: decision.fix ?? copy?.fix ?? null,
+    };
+}
+/**
+ * The last automatic stop and how it was judged (A3). Every word comes from the shared copy
+ * (`describeAutoStopVerdict`, `describeMachineCheckpointOutcome`); nothing is composed here.
+ * `verdict: null` is "not judged yet", and is said so: it is never rendered as clean. A sentence
+ * the decision text already carries (the server appends it while the machine is stopped) is not
+ * repeated.
+ */
+function describeLastAutoStopLines(last, decisionDetail = '', when = {}) {
+    if (!last)
+        return { lines: [], fix: null };
+    const lines = [];
+    const verdict = (0, data_provider_1.describeAutoStopVerdict)(last.verdict, { evidence: last.evidence });
+    const atText = last.at ? ` at ${(0, format_1.formatWhen)(last.at, when)}` : '';
+    lines.push(`Auto stop: ${verdict ? `${verdict.label} (${verdict.verdict})` : 'not checked yet'}${atText}`);
+    const checkpoint = (0, data_provider_1.describeMachineCheckpointOutcome)(last.checkpointOutcome, { action: 'stop' });
+    if (checkpoint && !decisionDetail.includes(checkpoint.sentence)) {
+        lines.push(`          ${checkpoint.sentence}`);
+    }
+    if (verdict && last.verdict !== 'clean') {
+        if (!decisionDetail.includes(verdict.detail))
+            lines.push(`          ${verdict.detail}`);
+        return { lines, fix: verdict.fix };
+    }
+    return { lines, fix: null };
+}
+function formatHours(hours) {
+    return `${Math.round(hours * 100) / 100}h`;
+}
+function formatUsage(usage) {
+    if (!usage.available)
+        return `unavailable (${usage.reason})`;
+    const cost = String(usage.currency).toLowerCase() === 'usd'
+        ? (0, dedicated_machines_1.formatUsdCents)(usage.costCents)
+        : `${usage.cost.toFixed(2)} ${String(usage.currency).toUpperCase()}`;
+    return `${formatHours(usage.hours)}, ${cost} in ${usage.month}${usage.openInterval ? ' (still running)' : ''}`;
+}
+function formatHolder(h, when) {
+    if (h.kind === 'unreadable') {
+        return `cannot see — staying on${h.detail ? ` (${h.detail})` : ''}`;
+    }
+    return [h.kind, h.ref, h.since ? `since ${(0, format_1.formatWhen)(h.since, when)}` : null]
+        .filter(Boolean)
+        .join(' · ');
+}
+/** The latest wake decision and who asked, as lines; empty when there is none. */
+function describeLastWakeDecisionLines(wake, when = {}) {
+    if (!wake)
+        return [];
+    // The sentence is the answer. The reason token and the transport ("http") are internals; who asked is
+    // named only when it is not the person reading this.
+    const asked = wake.source && wake.source !== 'person'
+        ? ` Asked by ${wake.source}${wake.sourceRef ? ` ${wake.sourceRef}` : ''}.`
+        : '';
+    const copy = (0, data_provider_1.describePowerReason)(wake.reason);
+    const sentence = wake.detail || copy?.detail || wake.reason;
+    const lines = [
+        `Wake:     ${sentence}${asked}${wake.at ? ` (${(0, format_1.formatWhen)(wake.at, when)})` : ''}`,
+    ];
+    if (wake.fix)
+        lines.push(`          ${wake.fix}`);
+    return lines;
+}
+/** The lines of `power show`. */
+function describePowerSummary(summary, when = {}) {
+    const { power } = summary;
+    const lines = [];
+    lines.push(`Dedicated Runtime ${summary.leaseId}`);
+    lines.push(`State:    ${summary.state}${summary.stateSince ? ` since ${(0, format_1.formatWhen)(summary.stateSince, when)}` : ''}`);
+    const policy = describePolicyWords(power.policy, power.idleAfterMinutes, summary.autoStopMode);
+    lines.push(`Policy:   ${policy}`);
+    if (power.keepAwakeUntil)
+        lines.push(`Keep awake until: ${(0, format_1.formatWhen)(power.keepAwakeUntil, when)}`);
+    if (power.budgetHoursPerMonth !== null)
+        lines.push(`Budget:   ${power.budgetHoursPerMonth} hours per month`);
+    if (summary.decision) {
+        const d = describePowerDecisionLines(summary.decision);
+        lines.push(`Decision: ${d.headline}`);
+        if (d.detail)
+            lines.push(`          ${d.detail}`);
+    }
+    else {
+        const none = (0, data_provider_1.describeNoPowerDecision)(summary);
+        if (none) {
+            lines.push(`Decision: ${none.headline}`);
+            lines.push(`          ${none.detail}`);
+        }
+        else {
+            lines.push('Decision: nothing to explain for this state');
+        }
+    }
+    lines.push(...describeLastAutoStopLines(summary.lastAutoStop, summary.decision?.detail, when).lines);
+    lines.push(...describeLastWakeDecisionLines(summary.lastWakeDecision, when));
+    if (summary.holders === null) {
+        lines.push('Holders:  not checked (the machine is not running)');
+    }
+    else if (summary.holders.length === 0) {
+        lines.push('Holders:  none — idle');
+    }
+    else {
+        lines.push('Holders:');
+        for (const h of summary.holders)
+            lines.push(`  - ${formatHolder(h, when)}`);
+    }
+    lines.push(`This month: ${formatUsage(summary.usage)}`);
+    lines.push(`Next expected wake: ${(summary.nextExpectedWake ? (0, format_1.formatWhen)(summary.nextExpectedWake, when) : null) ??
+        (summary.nextExpectedWakeUnavailable ? 'unavailable' : 'none scheduled')}`);
+    lines.push(`Last wake: ${summary.lastWake
+        ? `${summary.lastWake.at ? (0, format_1.formatWhen)(summary.lastWake.at, when) : 'unknown time'}${summary.lastWake.source ? ` (${summary.lastWake.source})` : ''}`
+        : 'none'}`);
+    return lines;
+}
+/** The lines of `power explain`; the fix is always last. */
+function describePowerExplanation(summary, when = {}) {
+    const lines = [];
+    if (!summary.decision) {
+        const none = (0, data_provider_1.describeNoPowerDecision)(summary);
+        lines.push(none ? `${none.headline}. ${none.detail}` : `Nothing to explain for ${summary.leaseId}.`);
+        lines.push(...describeLastWakeDecisionLines(summary.lastWakeDecision, when));
+        return lines;
+    }
+    const d = summary.decision;
+    const text = describePowerDecisionLines(d);
+    const wakeLines = describeLastWakeDecisionLines(summary.lastWakeDecision, when);
+    lines.push(`Question: ${d.question}`);
+    lines.push(`Gate:     ${d.gate}`);
+    lines.push(`Reason:   ${d.reason}`);
+    if (d.at)
+        lines.push(`At:       ${(0, format_1.formatWhen)(d.at, when)}`);
+    if (text.detail)
+        lines.push(`Detail:   ${text.detail}`);
+    const stop = describeLastAutoStopLines(summary.lastAutoStop, d.detail, when);
+    lines.push(...stop.lines);
+    lines.push(...wakeLines);
+    // A false stop's fix replaces nothing: the decision's own fix is still last-but-one.
+    if (text.fix && text.fix !== stop.fix)
+        lines.push(`Fix: ${text.fix}`);
+    if (stop.fix)
+        lines.push(`Fix: ${stop.fix}`);
+    return lines;
+}
+function describeBudget(power) {
+    return power.budgetHoursPerMonth == null
+        ? 'Monthly compute-hour budget: none.'
+        : `Monthly compute-hour budget: ${power.budgetHoursPerMonth} hours. At the budget, automatic starts are refused; a running machine is never stopped by it and you can still start it yourself.`;
+}

package/dist/lib/format.d.ts

@@ -98,3 +98,16 @@ export declare function localTime(value: unknown): string;
  * rather than print an empty parenthesis.
  */
 export declare function localZone(at?: Date): string;
+export type WhenOptions = {
+    /** The reference instant; injectable so output is deterministic in tests. */
+    now?: Date;
+    /** IANA zone to render in; defaults to the reader's own. */
+    timeZone?: string;
+};
+/**
+ * A timestamp for a person: local time plus how far away it is, `07:38 (2h ago)`
+ * or `09:39 (in 1h 59m)`. The date is added only when it is not today in the
+ * rendered zone (`2026-10-07 22:10 (11h ago)`). Machine output (`--json`) keeps
+ * the raw ISO string; this is for text only. Unparseable input is returned as is.
+ */
+export declare function formatWhen(value: unknown, options?: WhenOptions): string;

package/dist/lib/format.js

@@ -9,6 +9,7 @@ exports.renderTable = renderTable;
 exports.localStamp = localStamp;
 exports.localTime = localTime;
 exports.localZone = localZone;
+exports.formatWhen = formatWhen;
 /**
  * Code points that occupy TWO terminal columns (Unicode East Asian Wide and
  * Fullwidth), plus the emoji blocks terminals render double-width.
@@ -259,3 +260,53 @@ function localZone(at = new Date()) {
     const abs = Math.abs(offset);
     return `UTC${sign}${`${Math.floor(abs / 60)}`.padStart(2, '0')}:${`${abs % 60}`.padStart(2, '0')}`;
 }
+function zonedParts(date, timeZone) {
+    const parts = new Intl.DateTimeFormat('en-CA', {
+        timeZone,
+        year: 'numeric',
+        month: '2-digit',
+        day: '2-digit',
+        hour: '2-digit',
+        minute: '2-digit',
+        hourCycle: 'h23',
+    }).formatToParts(date);
+    const out = {};
+    for (const p of parts)
+        out[p.type] = p.value;
+    return out;
+}
+function relativeSpan(ms) {
+    const minutes = Math.floor(ms / 60_000);
+    if (minutes < 1)
+        return 'under a minute';
+    if (minutes < 60)
+        return `${minutes}m`;
+    const hours = Math.floor(minutes / 60);
+    if (hours < 24)
+        return minutes % 60 ? `${hours}h ${minutes % 60}m` : `${hours}h`;
+    const days = Math.floor(hours / 24);
+    return hours % 24 ? `${days}d ${hours % 24}h` : `${days}d`;
+}
+/**
+ * A timestamp for a person: local time plus how far away it is, `07:38 (2h ago)`
+ * or `09:39 (in 1h 59m)`. The date is added only when it is not today in the
+ * rendered zone (`2026-10-07 22:10 (11h ago)`). Machine output (`--json`) keeps
+ * the raw ISO string; this is for text only. Unparseable input is returned as is.
+ */
+function formatWhen(value, options = {}) {
+    if (value === null || value === undefined || value === '')
+        return '-';
+    const date = value instanceof Date ? value : new Date(typeof value === 'number' ? value : String(value));
+    if (Number.isNaN(date.getTime()))
+        return String(value);
+    const now = options.now ?? new Date();
+    const at = zonedParts(date, options.timeZone);
+    const ref = zonedParts(now, options.timeZone);
+    const sameDay = at.year === ref.year && at.month === ref.month && at.day === ref.day;
+    const clock = `${at.hour}:${at.minute}`;
+    const stamp = sameDay ? clock : `${at.year}-${at.month}-${at.day} ${clock}`;
+    const delta = date.getTime() - now.getTime();
+    const span = relativeSpan(Math.abs(delta));
+    const relative = span === 'under a minute' ? 'just now' : delta >= 0 ? `in ${span}` : `${span} ago`;
+    return `${stamp} (${relative})`;
+}

package/dist/lib/keychain.js

@@ -150,6 +150,9 @@ function setActiveProfile(profile) {
     _profileResolved = true;
     if (profile && profile.length > 0)
         _activeProfile = profile;
+    // The machineUuid the CLI sends (first-party harness broker) is per profile,
+    // exactly as the daemon's is (OSK-13845); both read the same persisted choice.
+    (0, auth_core_1.setMachineUuidProfile)(_activeProfile);
 }
 /**
  * Whether the profile has been chosen for this process.

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/computerWire.d.ts

@@ -309,6 +309,28 @@ export declare const COMPUTER_CAPABILITIES: {
      * before, and never sends the input.
      */
     readonly browserViewport: "computer_browser_viewport_v1";
+    /**
+     * A browser surface whose browser is still starting says so (OSK-13824): its
+     * descriptor carries `starting: { since }` from the moment its Chromium
+     * begins to launch until that launch ends (running, or failed), and the
+     * window shows "Starting the browser…" instead of subscribing into a
+     * refusal. A cold start on a fresh guest takes 25–30 s. A daemon announcing
+     * this states the ABSENCE of `starting` too: a browser surface without it
+     * is not starting. Without the announcement a client cannot tell, and falls
+     * back to reading a surface it saw open moments ago as starting.
+     */
+    readonly browserStarting: "computer_browser_starting_v1";
+    /**
+     * An agent actor on the machine's activity and control leases (OSK-13827)
+     * names the REAL agent: `agentId` is the agent's own id for tool-call and
+     * browser sessions too (v1 daemons put the SESSION id there for tool calls,
+     * so no reader could ever name them), and may carry `engine`, the harness
+     * the session runs on, so one agent's sessions on different engines can be
+     * told apart. A daemon announcing this states what it sends; the server
+     * withholds `engine` from every other daemon's actors, and a reader treats
+     * an actor without it as it always did.
+     */
+    readonly activityActorV2: "computer_activity_actor_v2";
 };
 export type ComputerCapabilityKey = keyof typeof COMPUTER_CAPABILITIES;
 export type ComputerCapability = (typeof COMPUTER_CAPABILITIES)[ComputerCapabilityKey];
@@ -355,7 +377,17 @@ export interface ComputerWireAgentActor {
     agentId: string;
     sessionId: string;
     label: string;
+    /**
+     * The engine the session runs on (`claude-code`, `codex`, …), as the daemon
+     * names its backend. Present only from a daemon that announced
+     * `computer_activity_actor_v2` (`COMPUTER_CAPABILITIES.activityActorV2`).
+     * A display distinction between one agent's sessions, never an identity:
+     * `sameComputerActor` still compares the agent id and the session id.
+     */
+    engine?: string;
 }
+/** The longest `engine` the wire carries; a longer one is not an engine name. */
+export declare const COMPUTER_ACTOR_ENGINE_MAX_LENGTH = 64;
 export interface ComputerWireHumanActor {
     kind: 'human';
     userId: string;

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/computerWire.js

@@ -25,9 +25,9 @@
  * dropped every command event for a release (OSK-13605).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.COMPUTER_BROWSER_DIALOG_OUTCOMES = exports.COMPUTER_BROWSER_DIALOG_KINDS = exports.COMPUTER_INPUT_TEXT_MAX_LENGTH = exports.COMPUTER_BROWSER_INPUT_PLATFORMS = exports.COMPUTER_BROWSER_VIEWPORT_LIMITS = exports.COMPUTER_BROWSER_INPUT_TYPES = exports.COMPUTER_TERMINAL_CAVEATS = exports.COMPUTER_TERMINAL_HISTORY_CAUSES = exports.COMPUTER_TERMINAL_LIFETIMES = exports.COMPUTER_TERMINAL_INPUT_TYPES = exports.COMPUTER_TERMINAL_SIGNALS = exports.COMPUTER_DIAGNOSTICS_MAX_STREAMS = exports.COMPUTER_DIAGNOSTICS_INTERVAL_MS = exports.COMPUTER_DIAGNOSTIC_COUNTERS = exports.COMPUTER_FRAME_ACK_TIMEOUT_MS = exports.COMPUTER_FRAME_MAX_BYTES = exports.COMPUTER_BROWSER_VIEWPORT = exports.COMPUTER_SURFACE_END_REASONS = exports.COMPUTER_SURFACE_STATES = exports.COMPUTER_SURFACE_KINDS = exports.COMPUTER_CONTROL_ACTIVITY_CHANGES = exports.COMPUTER_CONTROL_CHANGE_REASONS = exports.COMPUTER_SURFACE_UNPIN_REASONS = exports.COMPUTER_SURFACE_PIN_ACTIONS = exports.COMPUTER_SHARE_MODES = exports.COMPUTER_SHARE_ACTIONS = exports.COMPUTER_CONTROL_ACTIONS = exports.COMPUTER_AGENT_WRITE_WAIT_MS = exports.COMPUTER_RECONNECT_GRACE_MS = exports.COMPUTER_RECLAIM_WARNING_MS = exports.COMPUTER_CONTROL_IDLE_MS = exports.COMPUTER_HANDBACK_NOTE_MAX_LENGTH = exports.COMPUTER_GRANT_TIERS = exports.COMPUTER_OPERATIONS = exports.COMPUTER_ACCESS_LEVELS = exports.COMPUTER_PLATFORM_ROUTE_SESSION_PREFIXES = exports.COMPUTER_ACTIVITY_ACTOR_KINDS = exports.COMPUTER_ACTOR_KINDS = exports.COMPUTER_REFUSAL_CODES = exports.COMPUTER_CAPABILITY_VALUES = exports.COMPUTER_CAPABILITIES = exports.COMPUTER_MANIFEST_REORDER_WAIT_MS = exports.COMPUTER_RESYNC_TIMEOUT_MS = exports.COMPUTER_API_ANSWERED_EVENT_KEYS = exports.COMPUTER_SERVER_EVENT_KEYS = exports.DAEMON_COMPUTER_REPORT_EVENT_KEYS = exports.DAEMON_COMPUTER_EVENT_NAMES = exports.COMPUTER_EVENT_NAMES = exports.DAEMON_COMPUTER_EVENTS = exports.COMPUTER_EVENTS = void 0;
-exports.COMPUTER_DECLARED_SERVICE_NAME_MAX_LENGTH = exports.COMPUTER_DECLARED_SERVICES_MAX = exports.COMPUTER_DECLARED_SERVICE_PROTOCOLS = exports.COMPUTER_SERVICES_TOOL_ERROR_PREFIX = exports.COMPUTER_SERVICES_TOOL_NAME = exports.COMPUTER_DECLARED_SERVICE_ACTIONS = exports.COMPUTER_COMMAND_OUTPUT_STREAMS = exports.COMPUTER_COMMAND_START_REFUSALS = exports.COMPUTER_COMMAND_UNKNOWN_END_SIGNAL = exports.COMPUTER_COMMAND_NOT_STARTED_SIGNAL = exports.COMPUTER_COMMAND_OUTCOMES = exports.COMPUTER_LIFECYCLE_EVENTS = exports.COMPUTER_COMMAND_PHASES = exports.COMPUTER_ACTIVITY_WITHHELD_PLACEHOLDER = exports.COMPUTER_ACTIVITY_OUTPUT_MAX_LENGTH = exports.COMPUTER_ACTIVITY_SUMMARY_MAX_LENGTH = exports.COMPUTER_ACTIVITY_KINDS = exports.COMPUTER_FILE_CONTENTS_TAG_PATTERN = exports.COMPUTER_FILE_CONTENTS_TAG_MAX_ENTRIES = exports.COMPUTER_FILE_CHANGES = exports.COMPUTER_FILES_CHANGED_MAX_CHANGES = exports.COMPUTER_FILES_WATCH_DEGRADED_REASONS = exports.COMPUTER_FILE_WITHHELD_REASONS = exports.COMPUTER_FILE_TYPES = exports.COMPUTER_FILE_GIT_STATUS_BUDGET_MS = exports.COMPUTER_FILE_SEARCH_MAX_QUERY_LENGTH = exports.COMPUTER_FILE_SEARCH_MAX_BUDGET_MS = exports.COMPUTER_FILE_SEARCH_DEFAULT_BUDGET_MS = exports.COMPUTER_FILE_SEARCH_MAX_LIMIT = exports.COMPUTER_FILE_SEARCH_DEFAULT_LIMIT = exports.COMPUTER_FILE_GIT_MARKS = exports.COMPUTER_FILE_SEARCH_STATES = exports.COMPUTER_FILE_SEARCH_OPERATIONS = exports.COMPUTER_FILE_OPERATIONS = exports.COMPUTER_BROWSER_URL_MAX_LENGTH = exports.COMPUTER_BROWSER_TAB_ACTIONS = exports.COMPUTER_BROWSER_HISTORY_ACTIONS = exports.COMPUTER_BROWSER_COPY_MAX_LENGTH = exports.COMPUTER_TERMINAL_CWD_MAX_LENGTH = exports.COMPUTER_BROWSER_FILE_CHOOSER_PATH_MAX_LENGTH = exports.COMPUTER_BROWSER_FILE_CHOOSER_ACCEPT_MAX_LENGTH = exports.COMPUTER_BROWSER_FILE_CHOOSER_MAX_FILES = exports.COMPUTER_BROWSER_FILE_CHOOSER_OUTCOMES = exports.COMPUTER_BROWSER_FILE_CHOOSER_MODES = exports.COMPUTER_BROWSER_DOWNLOADS_MAX = exports.COMPUTER_BROWSER_DOWNLOAD_STATES = exports.COMPUTER_BROWSER_DIALOG_CREDENTIAL_MAX_LENGTH = exports.COMPUTER_BROWSER_DIALOG_PROMPT_MAX_LENGTH = exports.COMPUTER_BROWSER_DIALOG_MESSAGE_MAX_LENGTH = exports.COMPUTER_BROWSER_DIALOG_ANSWERERS = void 0;
-exports.COMPUTER_LEASE_STATE_POWER_PHASE = exports.COMPUTER_START_REFUSALS = exports.COMPUTER_PERSONAL_SIGN_IN_REASONS = exports.COMPUTER_PERSONAL_POWER_PHASES = exports.COMPUTER_POWER_PHASES = exports.COMPUTER_MACHINE_KINDS = exports.COMPUTER_DECLARED_SERVICE_PROBLEMS = exports.COMPUTER_DECLARED_SERVICE_NAME_PATTERN = exports.COMPUTER_DECLARED_SERVICE_HOST = exports.COMPUTER_DECLARED_SERVICE_PATH_MAX_LENGTH = void 0;
+exports.COMPUTER_BROWSER_DIALOG_KINDS = exports.COMPUTER_INPUT_TEXT_MAX_LENGTH = exports.COMPUTER_BROWSER_INPUT_PLATFORMS = exports.COMPUTER_BROWSER_VIEWPORT_LIMITS = exports.COMPUTER_BROWSER_INPUT_TYPES = exports.COMPUTER_TERMINAL_CAVEATS = exports.COMPUTER_TERMINAL_HISTORY_CAUSES = exports.COMPUTER_TERMINAL_LIFETIMES = exports.COMPUTER_TERMINAL_INPUT_TYPES = exports.COMPUTER_TERMINAL_SIGNALS = exports.COMPUTER_DIAGNOSTICS_MAX_STREAMS = exports.COMPUTER_DIAGNOSTICS_INTERVAL_MS = exports.COMPUTER_DIAGNOSTIC_COUNTERS = exports.COMPUTER_FRAME_ACK_TIMEOUT_MS = exports.COMPUTER_FRAME_MAX_BYTES = exports.COMPUTER_BROWSER_VIEWPORT = exports.COMPUTER_SURFACE_END_REASONS = exports.COMPUTER_SURFACE_STATES = exports.COMPUTER_SURFACE_KINDS = exports.COMPUTER_CONTROL_ACTIVITY_CHANGES = exports.COMPUTER_CONTROL_CHANGE_REASONS = exports.COMPUTER_SURFACE_UNPIN_REASONS = exports.COMPUTER_SURFACE_PIN_ACTIONS = exports.COMPUTER_SHARE_MODES = exports.COMPUTER_SHARE_ACTIONS = exports.COMPUTER_CONTROL_ACTIONS = exports.COMPUTER_AGENT_WRITE_WAIT_MS = exports.COMPUTER_RECONNECT_GRACE_MS = exports.COMPUTER_RECLAIM_WARNING_MS = exports.COMPUTER_CONTROL_IDLE_MS = exports.COMPUTER_HANDBACK_NOTE_MAX_LENGTH = exports.COMPUTER_GRANT_TIERS = exports.COMPUTER_OPERATIONS = exports.COMPUTER_ACCESS_LEVELS = exports.COMPUTER_ACTOR_ENGINE_MAX_LENGTH = exports.COMPUTER_PLATFORM_ROUTE_SESSION_PREFIXES = exports.COMPUTER_ACTIVITY_ACTOR_KINDS = exports.COMPUTER_ACTOR_KINDS = exports.COMPUTER_REFUSAL_CODES = exports.COMPUTER_CAPABILITY_VALUES = exports.COMPUTER_CAPABILITIES = exports.COMPUTER_MANIFEST_REORDER_WAIT_MS = exports.COMPUTER_RESYNC_TIMEOUT_MS = exports.COMPUTER_API_ANSWERED_EVENT_KEYS = exports.COMPUTER_SERVER_EVENT_KEYS = exports.DAEMON_COMPUTER_REPORT_EVENT_KEYS = exports.DAEMON_COMPUTER_EVENT_NAMES = exports.COMPUTER_EVENT_NAMES = exports.DAEMON_COMPUTER_EVENTS = exports.COMPUTER_EVENTS = void 0;
+exports.COMPUTER_DECLARED_SERVICES_MAX = exports.COMPUTER_DECLARED_SERVICE_PROTOCOLS = exports.COMPUTER_SERVICES_TOOL_ERROR_PREFIX = exports.COMPUTER_SERVICES_TOOL_NAME = exports.COMPUTER_DECLARED_SERVICE_ACTIONS = exports.COMPUTER_COMMAND_OUTPUT_STREAMS = exports.COMPUTER_COMMAND_START_REFUSALS = exports.COMPUTER_COMMAND_UNKNOWN_END_SIGNAL = exports.COMPUTER_COMMAND_NOT_STARTED_SIGNAL = exports.COMPUTER_COMMAND_OUTCOMES = exports.COMPUTER_LIFECYCLE_EVENTS = exports.COMPUTER_COMMAND_PHASES = exports.COMPUTER_ACTIVITY_WITHHELD_PLACEHOLDER = exports.COMPUTER_ACTIVITY_OUTPUT_MAX_LENGTH = exports.COMPUTER_ACTIVITY_SUMMARY_MAX_LENGTH = exports.COMPUTER_ACTIVITY_KINDS = exports.COMPUTER_FILE_CONTENTS_TAG_PATTERN = exports.COMPUTER_FILE_CONTENTS_TAG_MAX_ENTRIES = exports.COMPUTER_FILE_CHANGES = exports.COMPUTER_FILES_CHANGED_MAX_CHANGES = exports.COMPUTER_FILES_WATCH_DEGRADED_REASONS = exports.COMPUTER_FILE_WITHHELD_REASONS = exports.COMPUTER_FILE_TYPES = exports.COMPUTER_FILE_GIT_STATUS_BUDGET_MS = exports.COMPUTER_FILE_SEARCH_MAX_QUERY_LENGTH = exports.COMPUTER_FILE_SEARCH_MAX_BUDGET_MS = exports.COMPUTER_FILE_SEARCH_DEFAULT_BUDGET_MS = exports.COMPUTER_FILE_SEARCH_MAX_LIMIT = exports.COMPUTER_FILE_SEARCH_DEFAULT_LIMIT = exports.COMPUTER_FILE_GIT_MARKS = exports.COMPUTER_FILE_SEARCH_STATES = exports.COMPUTER_FILE_SEARCH_OPERATIONS = exports.COMPUTER_FILE_OPERATIONS = exports.COMPUTER_BROWSER_URL_MAX_LENGTH = exports.COMPUTER_BROWSER_TAB_ACTIONS = exports.COMPUTER_BROWSER_HISTORY_ACTIONS = exports.COMPUTER_BROWSER_COPY_MAX_LENGTH = exports.COMPUTER_TERMINAL_CWD_MAX_LENGTH = exports.COMPUTER_BROWSER_FILE_CHOOSER_PATH_MAX_LENGTH = exports.COMPUTER_BROWSER_FILE_CHOOSER_ACCEPT_MAX_LENGTH = exports.COMPUTER_BROWSER_FILE_CHOOSER_MAX_FILES = exports.COMPUTER_BROWSER_FILE_CHOOSER_OUTCOMES = exports.COMPUTER_BROWSER_FILE_CHOOSER_MODES = exports.COMPUTER_BROWSER_DOWNLOADS_MAX = exports.COMPUTER_BROWSER_DOWNLOAD_STATES = exports.COMPUTER_BROWSER_DIALOG_CREDENTIAL_MAX_LENGTH = exports.COMPUTER_BROWSER_DIALOG_PROMPT_MAX_LENGTH = exports.COMPUTER_BROWSER_DIALOG_MESSAGE_MAX_LENGTH = exports.COMPUTER_BROWSER_DIALOG_ANSWERERS = exports.COMPUTER_BROWSER_DIALOG_OUTCOMES = void 0;
+exports.COMPUTER_LEASE_STATE_POWER_PHASE = exports.COMPUTER_START_REFUSALS = exports.COMPUTER_PERSONAL_SIGN_IN_REASONS = exports.COMPUTER_PERSONAL_POWER_PHASES = exports.COMPUTER_POWER_PHASES = exports.COMPUTER_MACHINE_KINDS = exports.COMPUTER_DECLARED_SERVICE_PROBLEMS = exports.COMPUTER_DECLARED_SERVICE_NAME_PATTERN = exports.COMPUTER_DECLARED_SERVICE_HOST = exports.COMPUTER_DECLARED_SERVICE_PATH_MAX_LENGTH = exports.COMPUTER_DECLARED_SERVICE_NAME_MAX_LENGTH = void 0;
 exports.normalizeComputerRefusalCode = normalizeComputerRefusalCode;
 exports.isComputerPlatformRouteSession = isComputerPlatformRouteSession;
 exports.computerTierOperations = computerTierOperations;
@@ -350,6 +350,28 @@ exports.COMPUTER_CAPABILITIES = {
      * before, and never sends the input.
      */
     browserViewport: 'computer_browser_viewport_v1',
+    /**
+     * A browser surface whose browser is still starting says so (OSK-13824): its
+     * descriptor carries `starting: { since }` from the moment its Chromium
+     * begins to launch until that launch ends (running, or failed), and the
+     * window shows "Starting the browser…" instead of subscribing into a
+     * refusal. A cold start on a fresh guest takes 25–30 s. A daemon announcing
+     * this states the ABSENCE of `starting` too: a browser surface without it
+     * is not starting. Without the announcement a client cannot tell, and falls
+     * back to reading a surface it saw open moments ago as starting.
+     */
+    browserStarting: 'computer_browser_starting_v1',
+    /**
+     * An agent actor on the machine's activity and control leases (OSK-13827)
+     * names the REAL agent: `agentId` is the agent's own id for tool-call and
+     * browser sessions too (v1 daemons put the SESSION id there for tool calls,
+     * so no reader could ever name them), and may carry `engine`, the harness
+     * the session runs on, so one agent's sessions on different engines can be
+     * told apart. A daemon announcing this states what it sends; the server
+     * withholds `engine` from every other daemon's actors, and a reader treats
+     * an actor without it as it always did.
+     */
+    activityActorV2: 'computer_activity_actor_v2',
 };
 exports.COMPUTER_CAPABILITY_VALUES = Object.values(exports.COMPUTER_CAPABILITIES);
 // ---------------------------------------------------------------------------
@@ -453,6 +475,8 @@ function isComputerPlatformRouteSession(sessionId) {
     return (typeof sessionId === 'string' &&
         exports.COMPUTER_PLATFORM_ROUTE_SESSION_PREFIXES.some((prefix) => sessionId.startsWith(prefix)));
 }
+/** The longest `engine` the wire carries; a longer one is not an engine name. */
+exports.COMPUTER_ACTOR_ENGINE_MAX_LENGTH = 64;
 /**
  * How a person present on the machine reached it: as its owner, or through a
  * grant at one of the two tiers. Agents carry no access level — an agent

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/dedicatedRuntimeBusyWire.d.ts

@@ -0,0 +1,107 @@
+/**
+ * The Dedicated Runtime busy-report wire contract (power-control task K2,
+ * `dedicated-runtime-power-and-demand-wake-2026-10-07.md` §7.3 / §13.5).
+ *
+ * Declared ONCE, here. The daemon is published and cannot import the API, so
+ * the capability name, the payload shape and its bounds live in this package,
+ * which every end can import (`@skrr-ai/auth-core/dedicated-runtime-busy-wire`).
+ * `dedicatedRuntimeBusyWire.test.ts` fails on a second spelling of the
+ * capability anywhere else in the repo.
+ *
+ * WHAT THE REPORT SAYS
+ * ---------------------------------------------------------------------------
+ * "Does anything run in the tenant workload slice?" — read by the guest daemon
+ * from cgroup v2 `skrr-workload.slice`, recursively (the slice root is empty by
+ * contract; processes live in leaves), with the root-owned sshd listener left
+ * out. It is a LOCAL read summarised into counts; no per-process list ever
+ * crosses the wire.
+ *
+ * FAIL CLOSED. `busy` is `true | false | 'unknown'`. Any failure to read — a
+ * missing slice, an unreadable file, a tree too large to walk, a quiesce in
+ * progress, an sshd that is not where the image promises — is `'unknown'`, and
+ * a reader MUST treat `'unknown'` as busy. `false` is only ever the daemon
+ * having positively read an empty slice.
+ *
+ * THE POLICY KNOB (OPEN PRODUCT QUESTION — not decided here)
+ * ---------------------------------------------------------------------------
+ * An idle tmux server or a shell prompt keeps a leaf populated forever. The
+ * owner decision is that tmux/SSH shells ARE protected, but whether an IDLE
+ * shell should pin the machine is undecided. So the report carries both
+ * readings and the server chooses:
+ *
+ *   - `busy`                    the STRICT reading (`policy: 'strict'`): every
+ *                                process in the slice counts. This is the
+ *                                default and the only one a server should act
+ *                                on until the product question is answered.
+ *   - `busyIgnoringIdleShells`  the same read with the `idleShell` bucket
+ *                                removed. Classification is by process name
+ *                                (a shell or tmux with nothing else running),
+ *                                a HEURISTIC: it cannot see a shell loop, so
+ *                                it must never be the default.
+ *
+ * The `breakdown` says which bucket made it busy, for the "why" text.
+ */
+export declare const DEDICATED_RUNTIME_BUSY_REPORT_CAPABILITY = "dedicated_runtime_busy_report_v1";
+/** The heartbeat key the report rides under. Sent only by a daemon that announced the capability. */
+export declare const DEDICATED_RUNTIME_BUSY_HEARTBEAT_KEY = "dedicatedRuntimeBusy";
+export declare const DEDICATED_RUNTIME_BUSY_REPORT_VERSION = 1;
+/**
+ * `strict`: every process in the slice (less the root sshd listener) counts.
+ * The only value v1 sends; the field exists so a later relaxation is a new
+ * value rather than a silent change of meaning.
+ */
+export declare const DEDICATED_RUNTIME_BUSY_POLICIES: readonly ["strict"];
+export type DedicatedRuntimeBusyPolicy = (typeof DEDICATED_RUNTIME_BUSY_POLICIES)[number];
+/**
+ * Why the daemon could not give a definite answer, or `ok`. Anything but `ok`
+ * pairs with `busy: 'unknown'`.
+ */
+export declare const DEDICATED_RUNTIME_BUSY_SLICE_HEALTH: readonly ["ok", "not_a_guest", "slice_missing", "slice_unreadable", "ssh_not_in_slice", "tree_too_large", "quiesced", "read_error"];
+export type DedicatedRuntimeBusySliceHealth = (typeof DEDICATED_RUNTIME_BUSY_SLICE_HEALTH)[number];
+export declare const DEDICATED_RUNTIME_BUSY_LIMITS: {
+    /** Service leaf names carried for the "busy because of service X" text. */
+    readonly maxServiceNames: 8;
+    readonly maxServiceNameLength: 48;
+    /** Cgroup leaves the daemon will visit; more is `tree_too_large` -> unknown. */
+    readonly maxLeaves: 64;
+    readonly maxDepth: 4;
+    /** Processes the daemon classifies per read; the rest count as workload. */
+    readonly maxClassifiedPids: 256;
+    /** Hard ceiling on the serialized report. */
+    readonly maxSerializedBytes: 1024;
+};
+export interface DedicatedRuntimeBusyBreakdown {
+    /** Processes in non-service, non-ssh leaves (the `default` leaf, the slice root) that are not idle-shell class. */
+    workload: number;
+    /** Processes in `skrr-svc-*.scope` leaves: a declared service running, always-on by design. */
+    service: number;
+    /** SSH connection plumbing in `ssh.service` that is not the root listener (non-root sshd, the session helper) and other non-shell processes there. */
+    ssh: number;
+    /** Shell or tmux processes in `default` / `ssh.service` (heuristic by name; see header). */
+    idleShell: number;
+    /** Root-owned sshd processes left out of every count above. */
+    excludedSshd: number;
+    /** True when more processes existed than were classified; the rest are in `workload`. */
+    truncated: boolean;
+    /** Up to `maxServiceNames` service leaf names that have processes. */
+    services: string[];
+}
+export interface DedicatedRuntimeBusyReport {
+    version: typeof DEDICATED_RUNTIME_BUSY_REPORT_VERSION;
+    policy: DedicatedRuntimeBusyPolicy;
+    /** Strict reading. `'unknown'` MUST be treated as busy. */
+    busy: boolean | 'unknown';
+    /** Same read with the `idleShell` bucket removed; a heuristic, not the default. */
+    busyIgnoringIdleShells: boolean | 'unknown';
+    breakdown: DedicatedRuntimeBusyBreakdown;
+    /** ISO time the daemon read the slice. */
+    readAt: string;
+    sliceHealth: DedicatedRuntimeBusySliceHealth;
+}
+/**
+ * The reader's view of a daemon's heartbeat section. Anything malformed, from
+ * a daemon that did not announce the capability, or oversized is `null`, and
+ * the caller must then treat the machine as busy. Never trusts a field it did
+ * not validate; a value is clamped, not coerced to "idle".
+ */
+export declare function parseDedicatedRuntimeBusyReport(raw: unknown): DedicatedRuntimeBusyReport | null;