@skrr-ai/cli 0.1.91 → 0.1.93

package/dist/lib/terminal-qr.js

@@ -0,0 +1,119 @@
+"use strict";
+/**
+ * A QR code a phone can scan off a terminal.
+ *
+ * The ENCODER is `qrcode-terminal`'s vendored QR model (the same zero-dependency
+ * package the daemon already ships for its login QR, pinned in the lockfile).
+ * Its own renderer is not used, because it is the part that decides whether a
+ * phone can read the result, and it gets two things wrong for that:
+ *
+ *  - a ONE-module border. The QR spec asks for a four-module quiet zone, and a
+ *    scanner looking at a terminal full of other text needs it most;
+ *  - it paints light modules as `█` in the terminal's FOREGROUND colour, so on
+ *    a light-themed terminal the code comes out inverted, which many scanners
+ *    refuse.
+ *
+ * This renderer draws half-blocks (two modules per character row, so the code
+ * is square in a ~1:2 character cell) in EXPLICIT colours — black on bright
+ * white — so it scans the same on dark and light themes, with a full quiet zone.
+ *
+ * The QR is always a convenience printed beside the URL, never instead of it:
+ * `qrRenderDecision` says no for a pipe, `NO_COLOR`, `OVERSKY_NO_QR` / `SKRR_NO_QR`
+ * or a terminal too narrow to hold it, and the caller prints the URL alone.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.QR_QUIET_ZONE = void 0;
+exports.qrMatrix = qrMatrix;
+exports.renderQr = renderQr;
+exports.qrWidth = qrWidth;
+exports.qrRenderDecision = qrRenderDecision;
+// The vendored model has no published types; this is its whole surface here.
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const QRCodeModel = require('qrcode-terminal/vendor/QRCode');
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const QRErrorCorrectLevel = require('qrcode-terminal/vendor/QRCode/QRErrorCorrectLevel');
+/** The spec's quiet zone, in modules. */
+exports.QR_QUIET_ZONE = 4;
+/**
+ * The module matrix for `text`, quiet zone included. Level M: a share URL is
+ * well under 100 bytes, so the extra damage tolerance costs nothing in size.
+ */
+function qrMatrix(text, level = 'M') {
+    const qr = new QRCodeModel(-1, QRErrorCorrectLevel[level]);
+    qr.addData(text);
+    qr.make();
+    const count = qr.getModuleCount();
+    const size = count + exports.QR_QUIET_ZONE * 2;
+    const matrix = [];
+    for (let row = 0; row < size; row += 1) {
+        const line = [];
+        for (let col = 0; col < size; col += 1) {
+            const r = row - exports.QR_QUIET_ZONE;
+            const c = col - exports.QR_QUIET_ZONE;
+            line.push(r >= 0 && c >= 0 && r < count && c < count ? qr.isDark(r, c) : false);
+        }
+        matrix.push(line);
+    }
+    return matrix;
+}
+/** Indexed by (top dark ? 2 : 0) + (bottom dark ? 1 : 0). */
+const HALF_BLOCK = [' ', '▄', '▀', '█'];
+const DARK_ON_LIGHT = '\x1b[30;107m';
+const RESET = '\x1b[0m';
+/**
+ * Render with half blocks: the upper half of each character is the top
+ * module (foreground, black), the lower half the bottom module (background,
+ * white). Returns the lines, each `matrix width` characters wide.
+ */
+function renderQr(text) {
+    const matrix = qrMatrix(text);
+    const size = matrix.length;
+    const lines = [];
+    for (let row = 0; row < size; row += 2) {
+        let line = '';
+        for (let col = 0; col < size; col += 1) {
+            const top = matrix[row][col];
+            const bottom = row + 1 < size ? matrix[row + 1][col] : false;
+            line += HALF_BLOCK[(top ? 2 : 0) + (bottom ? 1 : 0)];
+        }
+        lines.push(`${DARK_ON_LIGHT}${line}${RESET}`);
+    }
+    return lines;
+}
+/** The QR's width in terminal columns (one column per module). */
+function qrWidth(text) {
+    return qrMatrix(text).length;
+}
+function truthy(value) {
+    if (typeof value !== 'string')
+        return false;
+    const v = value.trim().toLowerCase();
+    return v !== '' && v !== '0' && v !== 'false' && v !== 'no';
+}
+/**
+ * Whether a QR for `text` can be drawn on `stream`. Default-deny when the
+ * stream does not say it is a TTY, so captured output never carries block
+ * glyphs or escape codes.
+ */
+function qrRenderDecision(text, { env = process.env, stream = process.stdout, } = {}) {
+    // https://no-color.org: present and non-empty disables colour. The QR IS
+    // colour (it is drawn in explicit black and white), so it goes too.
+    if (typeof env.NO_COLOR === 'string' && env.NO_COLOR !== '') {
+        return { render: false, reason: 'NO_COLOR is set' };
+    }
+    if (truthy(env.SKRR_NO_QR) || truthy(env.OVERSKY_NO_QR)) {
+        return { render: false, reason: 'QR codes are turned off (SKRR_NO_QR)' };
+    }
+    if (stream.isTTY !== true) {
+        return { render: false, reason: 'output is not a terminal' };
+    }
+    const columns = typeof stream.columns === 'number' ? stream.columns : 0;
+    const width = qrWidth(text);
+    if (columns > 0 && columns < width) {
+        return {
+            render: false,
+            reason: `the terminal is ${columns} columns wide and the code needs ${width}`,
+        };
+    }
+    return { render: true };
+}

package/dist/lib/web-url.d.ts

@@ -45,6 +45,9 @@ export type WebUrlRef = {
 } | {
     kind: 'agent';
     agentId: string;
+} | {
+    kind: 'storeListing';
+    agentId: string;
 } | {
     kind: 'compass';
     agentId: string;
@@ -96,6 +99,14 @@ export type WebUrlRef = {
 export declare function webPath(ref: WebUrlRef): string | null;
 /** Absolute web URL (`<webOrigin><path>`), or `null` when the ref lacks its id. */
 export declare function webUrl(baseURL: string, ref: WebUrlRef): string | null;
+/** The origin that serves the SPA for a configured baseURL (see `toWebOrigin`). */
+export declare function webOrigin(baseURL: string): string;
+/**
+ * Every origin that serves the skrr web app: the configured deployment's, each
+ * environment's from the one domain contract, and prod's retained previous
+ * origin. A URL on any other host is not a skrr page.
+ */
+export declare function firstPartyWebOrigins(baseURL: string): string[];
 /** A persisted personalized Task View always opens as a focused modal on /tasks. */
 export declare function taskViewUrl(baseURL: string, viewId: string): string;
 type EntityRecord = Record<string, unknown>;

package/dist/lib/web-url.js

@@ -19,6 +19,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.webPath = webPath;
 exports.webUrl = webUrl;
+exports.webOrigin = webOrigin;
+exports.firstPartyWebOrigins = firstPartyWebOrigins;
 exports.taskViewUrl = taskViewUrl;
 exports.taskUrlFrom = taskUrlFrom;
 exports.spaceUrlFrom = spaceUrlFrom;
@@ -42,6 +44,7 @@ exports.withNorthstarUrl = withNorthstarUrl;
 exports.withAgentUrl = withAgentUrl;
 exports.withDataUrls = withDataUrls;
 exports.workflowUrlFrom = workflowUrlFrom;
+const data_provider_1 = require("@skrr-ai/data-provider");
 const publicEndpoints_generated_1 = require("./publicEndpoints.generated");
 /**
  * Site-relative canonical path for an entity, or `null` when the required id is
@@ -93,6 +96,10 @@ function webPath(ref) {
             const agentId = encodeId(ref.agentId);
             return agentId ? `/agent/${agentId}` : null;
         }
+        case 'storeListing': {
+            // The path comes from data-provider's one builder, never spelled here.
+            return ref.agentId ? (0, data_provider_1.publicAgentListingPath)(ref.agentId) : null;
+        }
         case 'compass': {
             const agentId = encodeId(ref.agentId);
             const compassId = encodeId(ref.compassId);
@@ -178,6 +185,23 @@ const WEB_ORIGIN_FROM_API = {
     // deliberately kept (LEGACY_PROD_BASE_URL), so its api. host must map too.
     'https://api.oversky.ai': 'https://oversky.ai',
 };
+/** The origin that serves the SPA for a configured baseURL (see `toWebOrigin`). */
+function webOrigin(baseURL) {
+    return toWebOrigin(baseURL);
+}
+/**
+ * Every origin that serves the skrr web app: the configured deployment's, each
+ * environment's from the one domain contract, and prod's retained previous
+ * origin. A URL on any other host is not a skrr page.
+ */
+function firstPartyWebOrigins(baseURL) {
+    const origins = new Set([
+        toWebOrigin(baseURL).toLowerCase(),
+        ...Object.values(publicEndpoints_generated_1.OVERSKY_ENVIRONMENT_ENDPOINTS).map((e) => e.appUrl.toLowerCase()),
+        ...Object.values(WEB_ORIGIN_FROM_API).map((origin) => origin.toLowerCase()),
+    ]);
+    return [...origins].filter(Boolean);
+}
 function toWebOrigin(baseURL) {
     const trimmed = trimTrailingSlash(baseURL);
     return WEB_ORIGIN_FROM_API[trimmed.toLowerCase()] ?? trimmed;

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/computerWire.d.ts

@@ -151,6 +151,14 @@ export declare const DAEMON_COMPUTER_EVENTS: {
      * `computer_declared_services_v1`.
      */
     readonly services: "daemon:computer:services";
+    /**
+     * Read the tail of the daemon's OWN process log (a bounded, redacted copy of
+     * what its logger wrote since it started), for the owner who asks why their
+     * machine reconnected. Carries a `requestId` and the principal the API
+     * authorized (`observe`); the daemon checks the principal against the grant
+     * set it holds. Needs `computer_daemon_log_v1`.
+     */
+    readonly daemonLog: "daemon:computer:log";
     /** The answer to any request that carried a `requestId`. */
     readonly ack: "daemon:computer:ack";
     readonly manifest: "daemon:computer:manifest";
@@ -295,6 +303,15 @@ export declare const COMPUTER_CAPABILITIES: {
      * browser; nothing is proxied to it. Announced by the relay that serves it.
      */
     readonly declaredServices: "computer_declared_services_v1";
+    /**
+     * The daemon serves the tail of its own process log
+     * (`daemon:computer:log`): an in-memory ring of lines its logger
+     * wrote, redacted before they enter the ring, read at the `watch` tier. It
+     * is NOT syslog or the journal and never reads either. Announced by the relay
+     * that serves it; a personal machine's daemon announces it too and refuses
+     * the read `consent_missing` until `skrr computer allow`.
+     */
+    readonly daemonLog: "computer_daemon_log_v1";
     /**
      * The page follows the controlling window (§6.2 "a stable viewport", §7.1,
      * OSK-13808): a browser `viewport` input, sent only by the attachment that
@@ -1080,3 +1097,54 @@ export declare function computerPowerPhaseForLeaseState(state: unknown): Compute
 export declare function computerShowsDesktop(phase: ComputerPowerPhase): boolean;
 /** Power actions are offered for a Dedicated Runtime only; a personal machine has none (§18). */
 export declare function computerOffersPowerActions(machineKind: ComputerMachineKind): boolean;
+/**
+ * Why the daemon's log is a wire feature at all: the tenant uid on a Dedicated
+ * Runtime guest cannot read syslog or the journal, so an owner could not see
+ * why their machine's daemon reconnected or failed. The daemon keeps the last
+ * lines its OWN logger wrote in memory and serves them; it opens no file and no
+ * system log for this.
+ */
+export declare const COMPUTER_DAEMON_LOG_LEVELS: readonly ["trace", "debug", "info", "warn", "error"];
+export type ComputerDaemonLogLevel = (typeof COMPUTER_DAEMON_LOG_LEVELS)[number];
+/** Every bound is the daemon's to enforce and the API's to validate against. */
+export declare const COMPUTER_DAEMON_LOG_LIMITS: {
+    /** Lines the daemon keeps in memory; older ones fall off the front. */
+    readonly ringLines: 2000;
+    /** A line longer than this is cut and marked, never kept whole. */
+    readonly lineChars: 1000;
+    /** Lines returned when the caller names none. */
+    readonly defaultLines: 100;
+    /** The most lines one answer carries. */
+    readonly maxLines: 500;
+    /** The most bytes (UTF-8) one answer's text carries; far under the 1 MiB SSE frame. */
+    readonly maxBytes: number;
+    /** The longest look-back a `sinceMs` may ask for (24 h; the ring is shorter anyway). */
+    readonly maxSinceMs: number;
+    /** Requests the daemon answers per `rateWindowMs`; one more is `rate_limited`. */
+    readonly rateMax: 30;
+    readonly rateWindowMs: number;
+};
+/** One line of the daemon's log as it leaves the daemon: redacted, time and level split out. */
+export interface ComputerDaemonLogLine {
+    /** Epoch milliseconds the daemon wrote it. */
+    at: number;
+    level: ComputerDaemonLogLevel;
+    text: string;
+}
+/**
+ * The answer to `daemon:computer:log`. `lines` are oldest first, at most
+ * the asked number of the NEWEST that match. `truncated` is true when more
+ * matched than were returned (by count or bytes); `ringFull` is true when the
+ * ring has already dropped older lines, so "no line before this" does not mean
+ * "the daemon logged nothing earlier". `startedAt` is the daemon process start:
+ * a reconnect that restarted the daemon is visible as a new one.
+ */
+export interface ComputerDaemonLogResult {
+    lines: ComputerDaemonLogLine[];
+    startedAt: number;
+    now: number;
+    truncated: boolean;
+    ringFull: boolean;
+    /** Lines the redaction rewrote anywhere in the ring (a count, never content). */
+    redactedLines: number;
+}

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/computerWire.js

@@ -27,7 +27,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.COMPUTER_BROWSER_DIALOG_KINDS = exports.COMPUTER_INPUT_TEXT_MAX_LENGTH = exports.COMPUTER_BROWSER_INPUT_PLATFORMS = exports.COMPUTER_BROWSER_VIEWPORT_LIMITS = exports.COMPUTER_BROWSER_INPUT_TYPES = exports.COMPUTER_TERMINAL_CAVEATS = exports.COMPUTER_TERMINAL_HISTORY_CAUSES = exports.COMPUTER_TERMINAL_LIFETIMES = exports.COMPUTER_TERMINAL_INPUT_TYPES = exports.COMPUTER_TERMINAL_SIGNALS = exports.COMPUTER_DIAGNOSTICS_MAX_STREAMS = exports.COMPUTER_DIAGNOSTICS_INTERVAL_MS = exports.COMPUTER_DIAGNOSTIC_COUNTERS = exports.COMPUTER_FRAME_ACK_TIMEOUT_MS = exports.COMPUTER_FRAME_MAX_BYTES = exports.COMPUTER_BROWSER_VIEWPORT = exports.COMPUTER_SURFACE_END_REASONS = exports.COMPUTER_SURFACE_STATES = exports.COMPUTER_SURFACE_KINDS = exports.COMPUTER_CONTROL_ACTIVITY_CHANGES = exports.COMPUTER_CONTROL_CHANGE_REASONS = exports.COMPUTER_SURFACE_UNPIN_REASONS = exports.COMPUTER_SURFACE_PIN_ACTIONS = exports.COMPUTER_SHARE_MODES = exports.COMPUTER_SHARE_ACTIONS = exports.COMPUTER_CONTROL_ACTIONS = exports.COMPUTER_AGENT_WRITE_WAIT_MS = exports.COMPUTER_RECONNECT_GRACE_MS = exports.COMPUTER_RECLAIM_WARNING_MS = exports.COMPUTER_CONTROL_IDLE_MS = exports.COMPUTER_HANDBACK_NOTE_MAX_LENGTH = exports.COMPUTER_GRANT_TIERS = exports.COMPUTER_OPERATIONS = exports.COMPUTER_ACCESS_LEVELS = exports.COMPUTER_ACTOR_ENGINE_MAX_LENGTH = exports.COMPUTER_PLATFORM_ROUTE_SESSION_PREFIXES = exports.COMPUTER_ACTIVITY_ACTOR_KINDS = exports.COMPUTER_ACTOR_KINDS = exports.COMPUTER_REFUSAL_CODES = exports.COMPUTER_CAPABILITY_VALUES = exports.COMPUTER_CAPABILITIES = exports.COMPUTER_MANIFEST_REORDER_WAIT_MS = exports.COMPUTER_RESYNC_TIMEOUT_MS = exports.COMPUTER_API_ANSWERED_EVENT_KEYS = exports.COMPUTER_SERVER_EVENT_KEYS = exports.DAEMON_COMPUTER_REPORT_EVENT_KEYS = exports.DAEMON_COMPUTER_EVENT_NAMES = exports.COMPUTER_EVENT_NAMES = exports.DAEMON_COMPUTER_EVENTS = exports.COMPUTER_EVENTS = void 0;
 exports.COMPUTER_DECLARED_SERVICES_MAX = exports.COMPUTER_DECLARED_SERVICE_PROTOCOLS = exports.COMPUTER_SERVICES_TOOL_ERROR_PREFIX = exports.COMPUTER_SERVICES_TOOL_NAME = exports.COMPUTER_DECLARED_SERVICE_ACTIONS = exports.COMPUTER_COMMAND_OUTPUT_STREAMS = exports.COMPUTER_COMMAND_START_REFUSALS = exports.COMPUTER_COMMAND_UNKNOWN_END_SIGNAL = exports.COMPUTER_COMMAND_NOT_STARTED_SIGNAL = exports.COMPUTER_COMMAND_OUTCOMES = exports.COMPUTER_LIFECYCLE_EVENTS = exports.COMPUTER_COMMAND_PHASES = exports.COMPUTER_ACTIVITY_WITHHELD_PLACEHOLDER = exports.COMPUTER_ACTIVITY_OUTPUT_MAX_LENGTH = exports.COMPUTER_ACTIVITY_SUMMARY_MAX_LENGTH = exports.COMPUTER_ACTIVITY_KINDS = exports.COMPUTER_FILE_CONTENTS_TAG_PATTERN = exports.COMPUTER_FILE_CONTENTS_TAG_MAX_ENTRIES = exports.COMPUTER_FILE_CHANGES = exports.COMPUTER_FILES_CHANGED_MAX_CHANGES = exports.COMPUTER_FILES_WATCH_DEGRADED_REASONS = exports.COMPUTER_FILE_WITHHELD_REASONS = exports.COMPUTER_FILE_TYPES = exports.COMPUTER_FILE_GIT_STATUS_BUDGET_MS = exports.COMPUTER_FILE_SEARCH_MAX_QUERY_LENGTH = exports.COMPUTER_FILE_SEARCH_MAX_BUDGET_MS = exports.COMPUTER_FILE_SEARCH_DEFAULT_BUDGET_MS = exports.COMPUTER_FILE_SEARCH_MAX_LIMIT = exports.COMPUTER_FILE_SEARCH_DEFAULT_LIMIT = exports.COMPUTER_FILE_GIT_MARKS = exports.COMPUTER_FILE_SEARCH_STATES = exports.COMPUTER_FILE_SEARCH_OPERATIONS = exports.COMPUTER_FILE_OPERATIONS = exports.COMPUTER_BROWSER_URL_MAX_LENGTH = exports.COMPUTER_BROWSER_TAB_ACTIONS = exports.COMPUTER_BROWSER_HISTORY_ACTIONS = exports.COMPUTER_BROWSER_COPY_MAX_LENGTH = exports.COMPUTER_TERMINAL_CWD_MAX_LENGTH = exports.COMPUTER_BROWSER_FILE_CHOOSER_PATH_MAX_LENGTH = exports.COMPUTER_BROWSER_FILE_CHOOSER_ACCEPT_MAX_LENGTH = exports.COMPUTER_BROWSER_FILE_CHOOSER_MAX_FILES = exports.COMPUTER_BROWSER_FILE_CHOOSER_OUTCOMES = exports.COMPUTER_BROWSER_FILE_CHOOSER_MODES = exports.COMPUTER_BROWSER_DOWNLOADS_MAX = exports.COMPUTER_BROWSER_DOWNLOAD_STATES = exports.COMPUTER_BROWSER_DIALOG_CREDENTIAL_MAX_LENGTH = exports.COMPUTER_BROWSER_DIALOG_PROMPT_MAX_LENGTH = exports.COMPUTER_BROWSER_DIALOG_MESSAGE_MAX_LENGTH = exports.COMPUTER_BROWSER_DIALOG_ANSWERERS = exports.COMPUTER_BROWSER_DIALOG_OUTCOMES = void 0;
-exports.COMPUTER_LEASE_STATE_POWER_PHASE = exports.COMPUTER_START_REFUSALS = exports.COMPUTER_PERSONAL_SIGN_IN_REASONS = exports.COMPUTER_PERSONAL_POWER_PHASES = exports.COMPUTER_POWER_PHASES = exports.COMPUTER_MACHINE_KINDS = exports.COMPUTER_DECLARED_SERVICE_PROBLEMS = exports.COMPUTER_DECLARED_SERVICE_NAME_PATTERN = exports.COMPUTER_DECLARED_SERVICE_HOST = exports.COMPUTER_DECLARED_SERVICE_PATH_MAX_LENGTH = exports.COMPUTER_DECLARED_SERVICE_NAME_MAX_LENGTH = void 0;
+exports.COMPUTER_DAEMON_LOG_LIMITS = exports.COMPUTER_DAEMON_LOG_LEVELS = exports.COMPUTER_LEASE_STATE_POWER_PHASE = exports.COMPUTER_START_REFUSALS = exports.COMPUTER_PERSONAL_SIGN_IN_REASONS = exports.COMPUTER_PERSONAL_POWER_PHASES = exports.COMPUTER_POWER_PHASES = exports.COMPUTER_MACHINE_KINDS = exports.COMPUTER_DECLARED_SERVICE_PROBLEMS = exports.COMPUTER_DECLARED_SERVICE_NAME_PATTERN = exports.COMPUTER_DECLARED_SERVICE_HOST = exports.COMPUTER_DECLARED_SERVICE_PATH_MAX_LENGTH = exports.COMPUTER_DECLARED_SERVICE_NAME_MAX_LENGTH = void 0;
 exports.normalizeComputerRefusalCode = normalizeComputerRefusalCode;
 exports.isComputerPlatformRouteSession = isComputerPlatformRouteSession;
 exports.computerTierOperations = computerTierOperations;
@@ -176,6 +176,14 @@ exports.DAEMON_COMPUTER_EVENTS = {
      * `computer_declared_services_v1`.
      */
     services: 'daemon:computer:services',
+    /**
+     * Read the tail of the daemon's OWN process log (a bounded, redacted copy of
+     * what its logger wrote since it started), for the owner who asks why their
+     * machine reconnected. Carries a `requestId` and the principal the API
+     * authorized (`observe`); the daemon checks the principal against the grant
+     * set it holds. Needs `computer_daemon_log_v1`.
+     */
+    daemonLog: 'daemon:computer:log',
     // daemon → API
     /** The answer to any request that carried a `requestId`. */
     ack: 'daemon:computer:ack',
@@ -336,6 +344,15 @@ exports.COMPUTER_CAPABILITIES = {
      * browser; nothing is proxied to it. Announced by the relay that serves it.
      */
     declaredServices: 'computer_declared_services_v1',
+    /**
+     * The daemon serves the tail of its own process log
+     * (`daemon:computer:log`): an in-memory ring of lines its logger
+     * wrote, redacted before they enter the ring, read at the `watch` tier. It
+     * is NOT syslog or the journal and never reads either. Announced by the relay
+     * that serves it; a personal machine's daemon announces it too and refuses
+     * the read `consent_missing` until `skrr computer allow`.
+     */
+    daemonLog: 'computer_daemon_log_v1',
     /**
      * The page follows the controlling window (§6.2 "a stable viewport", §7.1,
      * OSK-13808): a browser `viewport` input, sent only by the attachment that
@@ -1218,3 +1235,32 @@ function computerShowsDesktop(phase) {
 function computerOffersPowerActions(machineKind) {
     return machineKind === 'dedicated';
 }
+// ---------------------------------------------------------------------------
+// The daemon's own log (`computer_daemon_log_v1`)
+// ---------------------------------------------------------------------------
+/**
+ * Why the daemon's log is a wire feature at all: the tenant uid on a Dedicated
+ * Runtime guest cannot read syslog or the journal, so an owner could not see
+ * why their machine's daemon reconnected or failed. The daemon keeps the last
+ * lines its OWN logger wrote in memory and serves them; it opens no file and no
+ * system log for this.
+ */
+exports.COMPUTER_DAEMON_LOG_LEVELS = ['trace', 'debug', 'info', 'warn', 'error'];
+/** Every bound is the daemon's to enforce and the API's to validate against. */
+exports.COMPUTER_DAEMON_LOG_LIMITS = {
+    /** Lines the daemon keeps in memory; older ones fall off the front. */
+    ringLines: 2000,
+    /** A line longer than this is cut and marked, never kept whole. */
+    lineChars: 1000,
+    /** Lines returned when the caller names none. */
+    defaultLines: 100,
+    /** The most lines one answer carries. */
+    maxLines: 500,
+    /** The most bytes (UTF-8) one answer's text carries; far under the 1 MiB SSE frame. */
+    maxBytes: 192 * 1024,
+    /** The longest look-back a `sinceMs` may ask for (24 h; the ring is shorter anyway). */
+    maxSinceMs: 24 * 60 * 60 * 1000,
+    /** Requests the daemon answers per `rateWindowMs`; one more is `rate_limited`. */
+    rateMax: 30,
+    rateWindowMs: 60 * 1000,
+};

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/computerWire.d.ts

@@ -151,6 +151,14 @@ export declare const DAEMON_COMPUTER_EVENTS: {
      * `computer_declared_services_v1`.
      */
     readonly services: "daemon:computer:services";
+    /**
+     * Read the tail of the daemon's OWN process log (a bounded, redacted copy of
+     * what its logger wrote since it started), for the owner who asks why their
+     * machine reconnected. Carries a `requestId` and the principal the API
+     * authorized (`observe`); the daemon checks the principal against the grant
+     * set it holds. Needs `computer_daemon_log_v1`.
+     */
+    readonly daemonLog: "daemon:computer:log";
     /** The answer to any request that carried a `requestId`. */
     readonly ack: "daemon:computer:ack";
     readonly manifest: "daemon:computer:manifest";
@@ -295,6 +303,15 @@ export declare const COMPUTER_CAPABILITIES: {
      * browser; nothing is proxied to it. Announced by the relay that serves it.
      */
     readonly declaredServices: "computer_declared_services_v1";
+    /**
+     * The daemon serves the tail of its own process log
+     * (`daemon:computer:log`): an in-memory ring of lines its logger
+     * wrote, redacted before they enter the ring, read at the `watch` tier. It
+     * is NOT syslog or the journal and never reads either. Announced by the relay
+     * that serves it; a personal machine's daemon announces it too and refuses
+     * the read `consent_missing` until `skrr computer allow`.
+     */
+    readonly daemonLog: "computer_daemon_log_v1";
     /**
      * The page follows the controlling window (§6.2 "a stable viewport", §7.1,
      * OSK-13808): a browser `viewport` input, sent only by the attachment that
@@ -1080,3 +1097,54 @@ export declare function computerPowerPhaseForLeaseState(state: unknown): Compute
 export declare function computerShowsDesktop(phase: ComputerPowerPhase): boolean;
 /** Power actions are offered for a Dedicated Runtime only; a personal machine has none (§18). */
 export declare function computerOffersPowerActions(machineKind: ComputerMachineKind): boolean;
+/**
+ * Why the daemon's log is a wire feature at all: the tenant uid on a Dedicated
+ * Runtime guest cannot read syslog or the journal, so an owner could not see
+ * why their machine's daemon reconnected or failed. The daemon keeps the last
+ * lines its OWN logger wrote in memory and serves them; it opens no file and no
+ * system log for this.
+ */
+export declare const COMPUTER_DAEMON_LOG_LEVELS: readonly ["trace", "debug", "info", "warn", "error"];
+export type ComputerDaemonLogLevel = (typeof COMPUTER_DAEMON_LOG_LEVELS)[number];
+/** Every bound is the daemon's to enforce and the API's to validate against. */
+export declare const COMPUTER_DAEMON_LOG_LIMITS: {
+    /** Lines the daemon keeps in memory; older ones fall off the front. */
+    readonly ringLines: 2000;
+    /** A line longer than this is cut and marked, never kept whole. */
+    readonly lineChars: 1000;
+    /** Lines returned when the caller names none. */
+    readonly defaultLines: 100;
+    /** The most lines one answer carries. */
+    readonly maxLines: 500;
+    /** The most bytes (UTF-8) one answer's text carries; far under the 1 MiB SSE frame. */
+    readonly maxBytes: number;
+    /** The longest look-back a `sinceMs` may ask for (24 h; the ring is shorter anyway). */
+    readonly maxSinceMs: number;
+    /** Requests the daemon answers per `rateWindowMs`; one more is `rate_limited`. */
+    readonly rateMax: 30;
+    readonly rateWindowMs: number;
+};
+/** One line of the daemon's log as it leaves the daemon: redacted, time and level split out. */
+export interface ComputerDaemonLogLine {
+    /** Epoch milliseconds the daemon wrote it. */
+    at: number;
+    level: ComputerDaemonLogLevel;
+    text: string;
+}
+/**
+ * The answer to `daemon:computer:log`. `lines` are oldest first, at most
+ * the asked number of the NEWEST that match. `truncated` is true when more
+ * matched than were returned (by count or bytes); `ringFull` is true when the
+ * ring has already dropped older lines, so "no line before this" does not mean
+ * "the daemon logged nothing earlier". `startedAt` is the daemon process start:
+ * a reconnect that restarted the daemon is visible as a new one.
+ */
+export interface ComputerDaemonLogResult {
+    lines: ComputerDaemonLogLine[];
+    startedAt: number;
+    now: number;
+    truncated: boolean;
+    ringFull: boolean;
+    /** Lines the redaction rewrote anywhere in the ring (a count, never content). */
+    redactedLines: number;
+}

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/computerWire.js

@@ -155,6 +155,14 @@ export const DAEMON_COMPUTER_EVENTS = {
      * `computer_declared_services_v1`.
      */
     services: 'daemon:computer:services',
+    /**
+     * Read the tail of the daemon's OWN process log (a bounded, redacted copy of
+     * what its logger wrote since it started), for the owner who asks why their
+     * machine reconnected. Carries a `requestId` and the principal the API
+     * authorized (`observe`); the daemon checks the principal against the grant
+     * set it holds. Needs `computer_daemon_log_v1`.
+     */
+    daemonLog: 'daemon:computer:log',
     // daemon → API
     /** The answer to any request that carried a `requestId`. */
     ack: 'daemon:computer:ack',
@@ -315,6 +323,15 @@ export const COMPUTER_CAPABILITIES = {
      * browser; nothing is proxied to it. Announced by the relay that serves it.
      */
     declaredServices: 'computer_declared_services_v1',
+    /**
+     * The daemon serves the tail of its own process log
+     * (`daemon:computer:log`): an in-memory ring of lines its logger
+     * wrote, redacted before they enter the ring, read at the `watch` tier. It
+     * is NOT syslog or the journal and never reads either. Announced by the relay
+     * that serves it; a personal machine's daemon announces it too and refuses
+     * the read `consent_missing` until `skrr computer allow`.
+     */
+    daemonLog: 'computer_daemon_log_v1',
     /**
      * The page follows the controlling window (§6.2 "a stable viewport", §7.1,
      * OSK-13808): a browser `viewport` input, sent only by the attachment that
@@ -1197,3 +1214,32 @@ export function computerShowsDesktop(phase) {
 export function computerOffersPowerActions(machineKind) {
     return machineKind === 'dedicated';
 }
+// ---------------------------------------------------------------------------
+// The daemon's own log (`computer_daemon_log_v1`)
+// ---------------------------------------------------------------------------
+/**
+ * Why the daemon's log is a wire feature at all: the tenant uid on a Dedicated
+ * Runtime guest cannot read syslog or the journal, so an owner could not see
+ * why their machine's daemon reconnected or failed. The daemon keeps the last
+ * lines its OWN logger wrote in memory and serves them; it opens no file and no
+ * system log for this.
+ */
+export const COMPUTER_DAEMON_LOG_LEVELS = ['trace', 'debug', 'info', 'warn', 'error'];
+/** Every bound is the daemon's to enforce and the API's to validate against. */
+export const COMPUTER_DAEMON_LOG_LIMITS = {
+    /** Lines the daemon keeps in memory; older ones fall off the front. */
+    ringLines: 2000,
+    /** A line longer than this is cut and marked, never kept whole. */
+    lineChars: 1000,
+    /** Lines returned when the caller names none. */
+    defaultLines: 100,
+    /** The most lines one answer carries. */
+    maxLines: 500,
+    /** The most bytes (UTF-8) one answer's text carries; far under the 1 MiB SSE frame. */
+    maxBytes: 192 * 1024,
+    /** The longest look-back a `sinceMs` may ask for (24 h; the ring is shorter anyway). */
+    maxSinceMs: 24 * 60 * 60 * 1000,
+    /** Requests the daemon answers per `rateWindowMs`; one more is `rate_limited`. */
+    rateMax: 30,
+    rateWindowMs: 60 * 1000,
+};

package/dist/node_modules/@skrr-ai/auth-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skrr-ai/auth-core",
-  "version": "0.4.16",
+  "version": "0.4.17",
   "main": "dist/cjs/index.js",
   "types": "dist/esm/index.d.ts",
   "exports": {