@skrr-ai/cli 0.1.92 → 0.1.93

package/dist/lib/task-batch.js

@@ -0,0 +1,227 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.describeApiFailure = describeApiFailure;
+exports.isBatchRouteMissing = isBatchRouteMissing;
+exports.chunkItems = chunkItems;
+exports.batchIdempotencyKey = batchIdempotencyKey;
+exports.createNodesViaBatch = createNodesViaBatch;
+exports.patchTasksViaBatch = patchTasksViaBatch;
+/**
+ * Domain lib for `POST|PATCH /api/tasks/batch` (docs/architecture/task-batch-api-2026-10-08.md).
+ *
+ * `tasks create-tree` and `tasks bulk-update` reach the batch routes through
+ * `dataService.createTasksBatch|updateTasksBatch` and nothing else. This file owns
+ * the parts a command should not restate: chunking at the server cap, a
+ * deterministic idempotency key per chunk, tempId translation, and the "this
+ * server has no batch route" signal that sends a command back to its serial path.
+ */
+const node_crypto_1 = require("node:crypto");
+const data_provider_1 = require("@skrr-ai/data-provider");
+/** Normalize a thrown API error (or a per-item batch error) into one shape. */
+function describeApiFailure(err) {
+    const e = err;
+    let code = e.code;
+    let message = e.message ?? String(err);
+    if (e.body) {
+        try {
+            const parsed = JSON.parse(e.body);
+            code = parsed.code ?? code;
+            message = parsed.message ?? parsed.error ?? message;
+        }
+        catch {
+            /* non-JSON body */
+        }
+    }
+    const status = e.status;
+    return {
+        message,
+        ...(status ? { status } : {}),
+        ...(code ? { code } : {}),
+        retryable: status === 408 || status === 425 || status === 429 || (status ?? 0) >= 500,
+    };
+}
+/**
+ * A server that predates the batch routes answers 404 (no such POST route) or
+ * 405. A processed batch is ALWAYS a 200 (or 400/413/429 with a code), so a
+ * bare 404/405 on the batch call itself means "route missing", never "task
+ * not found".
+ */
+function isBatchRouteMissing(err) {
+    const status = err?.status;
+    return status === 404 || status === 405;
+}
+function chunkItems(items, size = data_provider_1.TASK_BATCH_MAX_ITEMS ?? 100) {
+    const out = [];
+    for (let i = 0; i < items.length; i += size)
+        out.push(items.slice(i, i + size));
+    return out;
+}
+/**
+ * Same chunk, same key: a retry of an interrupted command replays the stored
+ * result instead of creating twice. The key is a fingerprint of the items, so a
+ * DIFFERENT chunk can never collide with it (the server answers 422 on a key
+ * reused with a different body).
+ */
+function batchIdempotencyKey(kind, items) {
+    const digest = (0, node_crypto_1.createHash)('sha256').update((0, data_provider_1.stableJson)(items)).digest('hex').slice(0, 40);
+    return `cli-${kind}-batch:${digest}`;
+}
+/**
+ * Create `nodes` (parents before children) in chunks. `mapping` holds key -> id
+ * for nodes that already exist and is extended in place. Stops after the first
+ * chunk that reports a failure, as the serial path stopped at its first failure.
+ */
+async function createNodesViaBatch(nodes, mapping) {
+    const rows = [];
+    const failures = [];
+    for (const [chunkIndex, chunk] of chunkItems(nodes).entries()) {
+        const inChunk = new Map(chunk.map((node, i) => [node.key, `n${i}`]));
+        const items = [];
+        const sent = [];
+        for (const [i, node] of chunk.entries()) {
+            const { parentId: _ignored, ...payload } = node.payload;
+            const item = { ...payload, tempId: `n${i}` };
+            if (node.parentKey) {
+                const sameChunk = inChunk.get(node.parentKey);
+                if (sameChunk)
+                    item.parentTempId = sameChunk;
+                else if (mapping[node.parentKey])
+                    item.parentId = mapping[node.parentKey];
+                else {
+                    failures.push({
+                        key: node.key,
+                        skipped: true,
+                        error: {
+                            message: `Parent "${node.parentKey}" was not created, so "${node.key}" was not attempted`,
+                            code: 'BATCH_PARENT_NOT_CREATED',
+                            retryable: false,
+                        },
+                    });
+                    continue;
+                }
+            }
+            else if (node.payload.parentId) {
+                item.parentId = node.payload.parentId;
+            }
+            items.push(item);
+            sent.push(node);
+        }
+        if (items.length === 0)
+            break;
+        let response;
+        try {
+            response = await data_provider_1.dataService.createTasksBatch(items, {
+                idempotencyKey: batchIdempotencyKey('create', items),
+            });
+        }
+        catch (err) {
+            if (chunkIndex === 0 && isBatchRouteMissing(err))
+                return { supported: false };
+            failures.push({ key: sent[0].key, skipped: false, error: describeApiFailure(err) });
+            for (const node of sent.slice(1)) {
+                failures.push({
+                    key: node.key,
+                    skipped: true,
+                    error: {
+                        message: `Not attempted: the batch request containing "${sent[0].key}" failed`,
+                        code: 'BATCH_NOT_ATTEMPTED',
+                        retryable: true,
+                    },
+                });
+            }
+            break;
+        }
+        let failed = false;
+        for (const [i, result] of response.results.entries()) {
+            const node = sent[i];
+            if (!node)
+                continue;
+            if (result.ok && result.id) {
+                mapping[node.key] = result.id;
+                rows.push({
+                    key: node.key,
+                    id: result.id,
+                    ...(result.identifier ? { identifier: result.identifier } : {}),
+                    status: result.status === 'exists' ? 'exists' : 'created',
+                    ...(result.externalKey ? { externalKey: result.externalKey } : {}),
+                });
+            }
+            else {
+                failed = true;
+                failures.push({
+                    key: node.key,
+                    skipped: result.status === 'skipped',
+                    error: result.error
+                        ? {
+                            message: result.error.message,
+                            status: result.error.status,
+                            code: result.error.code,
+                            retryable: result.error.retryable,
+                        }
+                        : { message: 'Task was not created', retryable: false },
+                });
+            }
+        }
+        if (failed)
+            break;
+    }
+    return { supported: true, rows, failures };
+}
+/**
+ * Apply `updates` in chunks; `results[i]` answers `updates[i]`. A chunk the
+ * server never processed is reported `skipped` for every row rather than lost.
+ */
+async function patchTasksViaBatch(updates) {
+    const results = [];
+    let aborted = null;
+    let offset = 0;
+    for (const [chunkIndex, chunk] of chunkItems(updates).entries()) {
+        if (aborted) {
+            for (const [i, update] of chunk.entries()) {
+                results.push({
+                    index: offset + i,
+                    id: update.id,
+                    ok: false,
+                    status: 'skipped',
+                    error: {
+                        status: aborted.status ?? 0,
+                        code: 'BATCH_NOT_ATTEMPTED',
+                        message: 'Not attempted: an earlier batch request failed',
+                        retryable: true,
+                    },
+                });
+            }
+            offset += chunk.length;
+            continue;
+        }
+        try {
+            const response = await data_provider_1.dataService.updateTasksBatch(chunk, {
+                idempotencyKey: batchIdempotencyKey('patch', chunk),
+            });
+            for (const [i, result] of response.results.entries()) {
+                results.push({ ...result, index: offset + i });
+            }
+        }
+        catch (err) {
+            if (chunkIndex === 0 && isBatchRouteMissing(err))
+                return { supported: false };
+            aborted = describeApiFailure(err);
+            for (const [i, update] of chunk.entries()) {
+                results.push({
+                    index: offset + i,
+                    id: update.id,
+                    ok: false,
+                    status: 'failed',
+                    error: {
+                        status: aborted.status ?? 0,
+                        code: aborted.code ?? 'BATCH_REQUEST_FAILED',
+                        message: aborted.message,
+                        retryable: aborted.retryable,
+                    },
+                });
+            }
+        }
+        offset += chunk.length;
+    }
+    return { supported: true, results };
+}

package/dist/lib/terminal-qr.d.ts

@@ -0,0 +1,55 @@
+/**
+ * A QR code a phone can scan off a terminal.
+ *
+ * The ENCODER is `qrcode-terminal`'s vendored QR model (the same zero-dependency
+ * package the daemon already ships for its login QR, pinned in the lockfile).
+ * Its own renderer is not used, because it is the part that decides whether a
+ * phone can read the result, and it gets two things wrong for that:
+ *
+ *  - a ONE-module border. The QR spec asks for a four-module quiet zone, and a
+ *    scanner looking at a terminal full of other text needs it most;
+ *  - it paints light modules as `█` in the terminal's FOREGROUND colour, so on
+ *    a light-themed terminal the code comes out inverted, which many scanners
+ *    refuse.
+ *
+ * This renderer draws half-blocks (two modules per character row, so the code
+ * is square in a ~1:2 character cell) in EXPLICIT colours — black on bright
+ * white — so it scans the same on dark and light themes, with a full quiet zone.
+ *
+ * The QR is always a convenience printed beside the URL, never instead of it:
+ * `qrRenderDecision` says no for a pipe, `NO_COLOR`, `OVERSKY_NO_QR` / `SKRR_NO_QR`
+ * or a terminal too narrow to hold it, and the caller prints the URL alone.
+ */
+/** The spec's quiet zone, in modules. */
+export declare const QR_QUIET_ZONE = 4;
+/**
+ * The module matrix for `text`, quiet zone included. Level M: a share URL is
+ * well under 100 bytes, so the extra damage tolerance costs nothing in size.
+ */
+export declare function qrMatrix(text: string, level?: 'L' | 'M' | 'Q' | 'H'): boolean[][];
+/**
+ * Render with half blocks: the upper half of each character is the top
+ * module (foreground, black), the lower half the bottom module (background,
+ * white). Returns the lines, each `matrix width` characters wide.
+ */
+export declare function renderQr(text: string): string[];
+/** The QR's width in terminal columns (one column per module). */
+export declare function qrWidth(text: string): number;
+export type QrRenderDecision = {
+    render: true;
+} | {
+    render: false;
+    reason: string;
+};
+/**
+ * Whether a QR for `text` can be drawn on `stream`. Default-deny when the
+ * stream does not say it is a TTY, so captured output never carries block
+ * glyphs or escape codes.
+ */
+export declare function qrRenderDecision(text: string, { env, stream, }?: {
+    env?: NodeJS.ProcessEnv;
+    stream?: {
+        isTTY?: boolean;
+        columns?: number;
+    };
+}): QrRenderDecision;

package/dist/lib/terminal-qr.js

@@ -0,0 +1,119 @@
+"use strict";
+/**
+ * A QR code a phone can scan off a terminal.
+ *
+ * The ENCODER is `qrcode-terminal`'s vendored QR model (the same zero-dependency
+ * package the daemon already ships for its login QR, pinned in the lockfile).
+ * Its own renderer is not used, because it is the part that decides whether a
+ * phone can read the result, and it gets two things wrong for that:
+ *
+ *  - a ONE-module border. The QR spec asks for a four-module quiet zone, and a
+ *    scanner looking at a terminal full of other text needs it most;
+ *  - it paints light modules as `█` in the terminal's FOREGROUND colour, so on
+ *    a light-themed terminal the code comes out inverted, which many scanners
+ *    refuse.
+ *
+ * This renderer draws half-blocks (two modules per character row, so the code
+ * is square in a ~1:2 character cell) in EXPLICIT colours — black on bright
+ * white — so it scans the same on dark and light themes, with a full quiet zone.
+ *
+ * The QR is always a convenience printed beside the URL, never instead of it:
+ * `qrRenderDecision` says no for a pipe, `NO_COLOR`, `OVERSKY_NO_QR` / `SKRR_NO_QR`
+ * or a terminal too narrow to hold it, and the caller prints the URL alone.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.QR_QUIET_ZONE = void 0;
+exports.qrMatrix = qrMatrix;
+exports.renderQr = renderQr;
+exports.qrWidth = qrWidth;
+exports.qrRenderDecision = qrRenderDecision;
+// The vendored model has no published types; this is its whole surface here.
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const QRCodeModel = require('qrcode-terminal/vendor/QRCode');
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const QRErrorCorrectLevel = require('qrcode-terminal/vendor/QRCode/QRErrorCorrectLevel');
+/** The spec's quiet zone, in modules. */
+exports.QR_QUIET_ZONE = 4;
+/**
+ * The module matrix for `text`, quiet zone included. Level M: a share URL is
+ * well under 100 bytes, so the extra damage tolerance costs nothing in size.
+ */
+function qrMatrix(text, level = 'M') {
+    const qr = new QRCodeModel(-1, QRErrorCorrectLevel[level]);
+    qr.addData(text);
+    qr.make();
+    const count = qr.getModuleCount();
+    const size = count + exports.QR_QUIET_ZONE * 2;
+    const matrix = [];
+    for (let row = 0; row < size; row += 1) {
+        const line = [];
+        for (let col = 0; col < size; col += 1) {
+            const r = row - exports.QR_QUIET_ZONE;
+            const c = col - exports.QR_QUIET_ZONE;
+            line.push(r >= 0 && c >= 0 && r < count && c < count ? qr.isDark(r, c) : false);
+        }
+        matrix.push(line);
+    }
+    return matrix;
+}
+/** Indexed by (top dark ? 2 : 0) + (bottom dark ? 1 : 0). */
+const HALF_BLOCK = [' ', '▄', '▀', '█'];
+const DARK_ON_LIGHT = '\x1b[30;107m';
+const RESET = '\x1b[0m';
+/**
+ * Render with half blocks: the upper half of each character is the top
+ * module (foreground, black), the lower half the bottom module (background,
+ * white). Returns the lines, each `matrix width` characters wide.
+ */
+function renderQr(text) {
+    const matrix = qrMatrix(text);
+    const size = matrix.length;
+    const lines = [];
+    for (let row = 0; row < size; row += 2) {
+        let line = '';
+        for (let col = 0; col < size; col += 1) {
+            const top = matrix[row][col];
+            const bottom = row + 1 < size ? matrix[row + 1][col] : false;
+            line += HALF_BLOCK[(top ? 2 : 0) + (bottom ? 1 : 0)];
+        }
+        lines.push(`${DARK_ON_LIGHT}${line}${RESET}`);
+    }
+    return lines;
+}
+/** The QR's width in terminal columns (one column per module). */
+function qrWidth(text) {
+    return qrMatrix(text).length;
+}
+function truthy(value) {
+    if (typeof value !== 'string')
+        return false;
+    const v = value.trim().toLowerCase();
+    return v !== '' && v !== '0' && v !== 'false' && v !== 'no';
+}
+/**
+ * Whether a QR for `text` can be drawn on `stream`. Default-deny when the
+ * stream does not say it is a TTY, so captured output never carries block
+ * glyphs or escape codes.
+ */
+function qrRenderDecision(text, { env = process.env, stream = process.stdout, } = {}) {
+    // https://no-color.org: present and non-empty disables colour. The QR IS
+    // colour (it is drawn in explicit black and white), so it goes too.
+    if (typeof env.NO_COLOR === 'string' && env.NO_COLOR !== '') {
+        return { render: false, reason: 'NO_COLOR is set' };
+    }
+    if (truthy(env.SKRR_NO_QR) || truthy(env.OVERSKY_NO_QR)) {
+        return { render: false, reason: 'QR codes are turned off (SKRR_NO_QR)' };
+    }
+    if (stream.isTTY !== true) {
+        return { render: false, reason: 'output is not a terminal' };
+    }
+    const columns = typeof stream.columns === 'number' ? stream.columns : 0;
+    const width = qrWidth(text);
+    if (columns > 0 && columns < width) {
+        return {
+            render: false,
+            reason: `the terminal is ${columns} columns wide and the code needs ${width}`,
+        };
+    }
+    return { render: true };
+}

package/dist/lib/web-url.d.ts

@@ -45,6 +45,9 @@ export type WebUrlRef = {
 } | {
     kind: 'agent';
     agentId: string;
+} | {
+    kind: 'storeListing';
+    agentId: string;
 } | {
     kind: 'compass';
     agentId: string;
@@ -96,6 +99,14 @@ export type WebUrlRef = {
 export declare function webPath(ref: WebUrlRef): string | null;
 /** Absolute web URL (`<webOrigin><path>`), or `null` when the ref lacks its id. */
 export declare function webUrl(baseURL: string, ref: WebUrlRef): string | null;
+/** The origin that serves the SPA for a configured baseURL (see `toWebOrigin`). */
+export declare function webOrigin(baseURL: string): string;
+/**
+ * Every origin that serves the skrr web app: the configured deployment's, each
+ * environment's from the one domain contract, and prod's retained previous
+ * origin. A URL on any other host is not a skrr page.
+ */
+export declare function firstPartyWebOrigins(baseURL: string): string[];
 /** A persisted personalized Task View always opens as a focused modal on /tasks. */
 export declare function taskViewUrl(baseURL: string, viewId: string): string;
 type EntityRecord = Record<string, unknown>;

package/dist/lib/web-url.js

@@ -19,6 +19,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.webPath = webPath;
 exports.webUrl = webUrl;
+exports.webOrigin = webOrigin;
+exports.firstPartyWebOrigins = firstPartyWebOrigins;
 exports.taskViewUrl = taskViewUrl;
 exports.taskUrlFrom = taskUrlFrom;
 exports.spaceUrlFrom = spaceUrlFrom;
@@ -42,6 +44,7 @@ exports.withNorthstarUrl = withNorthstarUrl;
 exports.withAgentUrl = withAgentUrl;
 exports.withDataUrls = withDataUrls;
 exports.workflowUrlFrom = workflowUrlFrom;
+const data_provider_1 = require("@skrr-ai/data-provider");
 const publicEndpoints_generated_1 = require("./publicEndpoints.generated");
 /**
  * Site-relative canonical path for an entity, or `null` when the required id is
@@ -93,6 +96,10 @@ function webPath(ref) {
             const agentId = encodeId(ref.agentId);
             return agentId ? `/agent/${agentId}` : null;
         }
+        case 'storeListing': {
+            // The path comes from data-provider's one builder, never spelled here.
+            return ref.agentId ? (0, data_provider_1.publicAgentListingPath)(ref.agentId) : null;
+        }
         case 'compass': {
             const agentId = encodeId(ref.agentId);
             const compassId = encodeId(ref.compassId);
@@ -178,6 +185,23 @@ const WEB_ORIGIN_FROM_API = {
     // deliberately kept (LEGACY_PROD_BASE_URL), so its api. host must map too.
     'https://api.oversky.ai': 'https://oversky.ai',
 };
+/** The origin that serves the SPA for a configured baseURL (see `toWebOrigin`). */
+function webOrigin(baseURL) {
+    return toWebOrigin(baseURL);
+}
+/**
+ * Every origin that serves the skrr web app: the configured deployment's, each
+ * environment's from the one domain contract, and prod's retained previous
+ * origin. A URL on any other host is not a skrr page.
+ */
+function firstPartyWebOrigins(baseURL) {
+    const origins = new Set([
+        toWebOrigin(baseURL).toLowerCase(),
+        ...Object.values(publicEndpoints_generated_1.OVERSKY_ENVIRONMENT_ENDPOINTS).map((e) => e.appUrl.toLowerCase()),
+        ...Object.values(WEB_ORIGIN_FROM_API).map((origin) => origin.toLowerCase()),
+    ]);
+    return [...origins].filter(Boolean);
+}
 function toWebOrigin(baseURL) {
     const trimmed = trimTrailingSlash(baseURL);
     return WEB_ORIGIN_FROM_API[trimmed.toLowerCase()] ?? trimmed;

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/computerWire.d.ts

@@ -151,6 +151,14 @@ export declare const DAEMON_COMPUTER_EVENTS: {
      * `computer_declared_services_v1`.
      */
     readonly services: "daemon:computer:services";
+    /**
+     * Read the tail of the daemon's OWN process log (a bounded, redacted copy of
+     * what its logger wrote since it started), for the owner who asks why their
+     * machine reconnected. Carries a `requestId` and the principal the API
+     * authorized (`observe`); the daemon checks the principal against the grant
+     * set it holds. Needs `computer_daemon_log_v1`.
+     */
+    readonly daemonLog: "daemon:computer:log";
     /** The answer to any request that carried a `requestId`. */
     readonly ack: "daemon:computer:ack";
     readonly manifest: "daemon:computer:manifest";
@@ -295,6 +303,15 @@ export declare const COMPUTER_CAPABILITIES: {
      * browser; nothing is proxied to it. Announced by the relay that serves it.
      */
     readonly declaredServices: "computer_declared_services_v1";
+    /**
+     * The daemon serves the tail of its own process log
+     * (`daemon:computer:log`): an in-memory ring of lines its logger
+     * wrote, redacted before they enter the ring, read at the `watch` tier. It
+     * is NOT syslog or the journal and never reads either. Announced by the relay
+     * that serves it; a personal machine's daemon announces it too and refuses
+     * the read `consent_missing` until `skrr computer allow`.
+     */
+    readonly daemonLog: "computer_daemon_log_v1";
     /**
      * The page follows the controlling window (§6.2 "a stable viewport", §7.1,
      * OSK-13808): a browser `viewport` input, sent only by the attachment that
@@ -1080,3 +1097,54 @@ export declare function computerPowerPhaseForLeaseState(state: unknown): Compute
 export declare function computerShowsDesktop(phase: ComputerPowerPhase): boolean;
 /** Power actions are offered for a Dedicated Runtime only; a personal machine has none (§18). */
 export declare function computerOffersPowerActions(machineKind: ComputerMachineKind): boolean;
+/**
+ * Why the daemon's log is a wire feature at all: the tenant uid on a Dedicated
+ * Runtime guest cannot read syslog or the journal, so an owner could not see
+ * why their machine's daemon reconnected or failed. The daemon keeps the last
+ * lines its OWN logger wrote in memory and serves them; it opens no file and no
+ * system log for this.
+ */
+export declare const COMPUTER_DAEMON_LOG_LEVELS: readonly ["trace", "debug", "info", "warn", "error"];
+export type ComputerDaemonLogLevel = (typeof COMPUTER_DAEMON_LOG_LEVELS)[number];
+/** Every bound is the daemon's to enforce and the API's to validate against. */
+export declare const COMPUTER_DAEMON_LOG_LIMITS: {
+    /** Lines the daemon keeps in memory; older ones fall off the front. */
+    readonly ringLines: 2000;
+    /** A line longer than this is cut and marked, never kept whole. */
+    readonly lineChars: 1000;
+    /** Lines returned when the caller names none. */
+    readonly defaultLines: 100;
+    /** The most lines one answer carries. */
+    readonly maxLines: 500;
+    /** The most bytes (UTF-8) one answer's text carries; far under the 1 MiB SSE frame. */
+    readonly maxBytes: number;
+    /** The longest look-back a `sinceMs` may ask for (24 h; the ring is shorter anyway). */
+    readonly maxSinceMs: number;
+    /** Requests the daemon answers per `rateWindowMs`; one more is `rate_limited`. */
+    readonly rateMax: 30;
+    readonly rateWindowMs: number;
+};
+/** One line of the daemon's log as it leaves the daemon: redacted, time and level split out. */
+export interface ComputerDaemonLogLine {
+    /** Epoch milliseconds the daemon wrote it. */
+    at: number;
+    level: ComputerDaemonLogLevel;
+    text: string;
+}
+/**
+ * The answer to `daemon:computer:log`. `lines` are oldest first, at most
+ * the asked number of the NEWEST that match. `truncated` is true when more
+ * matched than were returned (by count or bytes); `ringFull` is true when the
+ * ring has already dropped older lines, so "no line before this" does not mean
+ * "the daemon logged nothing earlier". `startedAt` is the daemon process start:
+ * a reconnect that restarted the daemon is visible as a new one.
+ */
+export interface ComputerDaemonLogResult {
+    lines: ComputerDaemonLogLine[];
+    startedAt: number;
+    now: number;
+    truncated: boolean;
+    ringFull: boolean;
+    /** Lines the redaction rewrote anywhere in the ring (a count, never content). */
+    redactedLines: number;
+}

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/computerWire.js

@@ -27,7 +27,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.COMPUTER_BROWSER_DIALOG_KINDS = exports.COMPUTER_INPUT_TEXT_MAX_LENGTH = exports.COMPUTER_BROWSER_INPUT_PLATFORMS = exports.COMPUTER_BROWSER_VIEWPORT_LIMITS = exports.COMPUTER_BROWSER_INPUT_TYPES = exports.COMPUTER_TERMINAL_CAVEATS = exports.COMPUTER_TERMINAL_HISTORY_CAUSES = exports.COMPUTER_TERMINAL_LIFETIMES = exports.COMPUTER_TERMINAL_INPUT_TYPES = exports.COMPUTER_TERMINAL_SIGNALS = exports.COMPUTER_DIAGNOSTICS_MAX_STREAMS = exports.COMPUTER_DIAGNOSTICS_INTERVAL_MS = exports.COMPUTER_DIAGNOSTIC_COUNTERS = exports.COMPUTER_FRAME_ACK_TIMEOUT_MS = exports.COMPUTER_FRAME_MAX_BYTES = exports.COMPUTER_BROWSER_VIEWPORT = exports.COMPUTER_SURFACE_END_REASONS = exports.COMPUTER_SURFACE_STATES = exports.COMPUTER_SURFACE_KINDS = exports.COMPUTER_CONTROL_ACTIVITY_CHANGES = exports.COMPUTER_CONTROL_CHANGE_REASONS = exports.COMPUTER_SURFACE_UNPIN_REASONS = exports.COMPUTER_SURFACE_PIN_ACTIONS = exports.COMPUTER_SHARE_MODES = exports.COMPUTER_SHARE_ACTIONS = exports.COMPUTER_CONTROL_ACTIONS = exports.COMPUTER_AGENT_WRITE_WAIT_MS = exports.COMPUTER_RECONNECT_GRACE_MS = exports.COMPUTER_RECLAIM_WARNING_MS = exports.COMPUTER_CONTROL_IDLE_MS = exports.COMPUTER_HANDBACK_NOTE_MAX_LENGTH = exports.COMPUTER_GRANT_TIERS = exports.COMPUTER_OPERATIONS = exports.COMPUTER_ACCESS_LEVELS = exports.COMPUTER_ACTOR_ENGINE_MAX_LENGTH = exports.COMPUTER_PLATFORM_ROUTE_SESSION_PREFIXES = exports.COMPUTER_ACTIVITY_ACTOR_KINDS = exports.COMPUTER_ACTOR_KINDS = exports.COMPUTER_REFUSAL_CODES = exports.COMPUTER_CAPABILITY_VALUES = exports.COMPUTER_CAPABILITIES = exports.COMPUTER_MANIFEST_REORDER_WAIT_MS = exports.COMPUTER_RESYNC_TIMEOUT_MS = exports.COMPUTER_API_ANSWERED_EVENT_KEYS = exports.COMPUTER_SERVER_EVENT_KEYS = exports.DAEMON_COMPUTER_REPORT_EVENT_KEYS = exports.DAEMON_COMPUTER_EVENT_NAMES = exports.COMPUTER_EVENT_NAMES = exports.DAEMON_COMPUTER_EVENTS = exports.COMPUTER_EVENTS = void 0;
 exports.COMPUTER_DECLARED_SERVICES_MAX = exports.COMPUTER_DECLARED_SERVICE_PROTOCOLS = exports.COMPUTER_SERVICES_TOOL_ERROR_PREFIX = exports.COMPUTER_SERVICES_TOOL_NAME = exports.COMPUTER_DECLARED_SERVICE_ACTIONS = exports.COMPUTER_COMMAND_OUTPUT_STREAMS = exports.COMPUTER_COMMAND_START_REFUSALS = exports.COMPUTER_COMMAND_UNKNOWN_END_SIGNAL = exports.COMPUTER_COMMAND_NOT_STARTED_SIGNAL = exports.COMPUTER_COMMAND_OUTCOMES = exports.COMPUTER_LIFECYCLE_EVENTS = exports.COMPUTER_COMMAND_PHASES = exports.COMPUTER_ACTIVITY_WITHHELD_PLACEHOLDER = exports.COMPUTER_ACTIVITY_OUTPUT_MAX_LENGTH = exports.COMPUTER_ACTIVITY_SUMMARY_MAX_LENGTH = exports.COMPUTER_ACTIVITY_KINDS = exports.COMPUTER_FILE_CONTENTS_TAG_PATTERN = exports.COMPUTER_FILE_CONTENTS_TAG_MAX_ENTRIES = exports.COMPUTER_FILE_CHANGES = exports.COMPUTER_FILES_CHANGED_MAX_CHANGES = exports.COMPUTER_FILES_WATCH_DEGRADED_REASONS = exports.COMPUTER_FILE_WITHHELD_REASONS = exports.COMPUTER_FILE_TYPES = exports.COMPUTER_FILE_GIT_STATUS_BUDGET_MS = exports.COMPUTER_FILE_SEARCH_MAX_QUERY_LENGTH = exports.COMPUTER_FILE_SEARCH_MAX_BUDGET_MS = exports.COMPUTER_FILE_SEARCH_DEFAULT_BUDGET_MS = exports.COMPUTER_FILE_SEARCH_MAX_LIMIT = exports.COMPUTER_FILE_SEARCH_DEFAULT_LIMIT = exports.COMPUTER_FILE_GIT_MARKS = exports.COMPUTER_FILE_SEARCH_STATES = exports.COMPUTER_FILE_SEARCH_OPERATIONS = exports.COMPUTER_FILE_OPERATIONS = exports.COMPUTER_BROWSER_URL_MAX_LENGTH = exports.COMPUTER_BROWSER_TAB_ACTIONS = exports.COMPUTER_BROWSER_HISTORY_ACTIONS = exports.COMPUTER_BROWSER_COPY_MAX_LENGTH = exports.COMPUTER_TERMINAL_CWD_MAX_LENGTH = exports.COMPUTER_BROWSER_FILE_CHOOSER_PATH_MAX_LENGTH = exports.COMPUTER_BROWSER_FILE_CHOOSER_ACCEPT_MAX_LENGTH = exports.COMPUTER_BROWSER_FILE_CHOOSER_MAX_FILES = exports.COMPUTER_BROWSER_FILE_CHOOSER_OUTCOMES = exports.COMPUTER_BROWSER_FILE_CHOOSER_MODES = exports.COMPUTER_BROWSER_DOWNLOADS_MAX = exports.COMPUTER_BROWSER_DOWNLOAD_STATES = exports.COMPUTER_BROWSER_DIALOG_CREDENTIAL_MAX_LENGTH = exports.COMPUTER_BROWSER_DIALOG_PROMPT_MAX_LENGTH = exports.COMPUTER_BROWSER_DIALOG_MESSAGE_MAX_LENGTH = exports.COMPUTER_BROWSER_DIALOG_ANSWERERS = exports.COMPUTER_BROWSER_DIALOG_OUTCOMES = void 0;
-exports.COMPUTER_LEASE_STATE_POWER_PHASE = exports.COMPUTER_START_REFUSALS = exports.COMPUTER_PERSONAL_SIGN_IN_REASONS = exports.COMPUTER_PERSONAL_POWER_PHASES = exports.COMPUTER_POWER_PHASES = exports.COMPUTER_MACHINE_KINDS = exports.COMPUTER_DECLARED_SERVICE_PROBLEMS = exports.COMPUTER_DECLARED_SERVICE_NAME_PATTERN = exports.COMPUTER_DECLARED_SERVICE_HOST = exports.COMPUTER_DECLARED_SERVICE_PATH_MAX_LENGTH = exports.COMPUTER_DECLARED_SERVICE_NAME_MAX_LENGTH = void 0;
+exports.COMPUTER_DAEMON_LOG_LIMITS = exports.COMPUTER_DAEMON_LOG_LEVELS = exports.COMPUTER_LEASE_STATE_POWER_PHASE = exports.COMPUTER_START_REFUSALS = exports.COMPUTER_PERSONAL_SIGN_IN_REASONS = exports.COMPUTER_PERSONAL_POWER_PHASES = exports.COMPUTER_POWER_PHASES = exports.COMPUTER_MACHINE_KINDS = exports.COMPUTER_DECLARED_SERVICE_PROBLEMS = exports.COMPUTER_DECLARED_SERVICE_NAME_PATTERN = exports.COMPUTER_DECLARED_SERVICE_HOST = exports.COMPUTER_DECLARED_SERVICE_PATH_MAX_LENGTH = exports.COMPUTER_DECLARED_SERVICE_NAME_MAX_LENGTH = void 0;
 exports.normalizeComputerRefusalCode = normalizeComputerRefusalCode;
 exports.isComputerPlatformRouteSession = isComputerPlatformRouteSession;
 exports.computerTierOperations = computerTierOperations;
@@ -176,6 +176,14 @@ exports.DAEMON_COMPUTER_EVENTS = {
      * `computer_declared_services_v1`.
      */
     services: 'daemon:computer:services',
+    /**
+     * Read the tail of the daemon's OWN process log (a bounded, redacted copy of
+     * what its logger wrote since it started), for the owner who asks why their
+     * machine reconnected. Carries a `requestId` and the principal the API
+     * authorized (`observe`); the daemon checks the principal against the grant
+     * set it holds. Needs `computer_daemon_log_v1`.
+     */
+    daemonLog: 'daemon:computer:log',
     // daemon → API
     /** The answer to any request that carried a `requestId`. */
     ack: 'daemon:computer:ack',
@@ -336,6 +344,15 @@ exports.COMPUTER_CAPABILITIES = {
      * browser; nothing is proxied to it. Announced by the relay that serves it.
      */
     declaredServices: 'computer_declared_services_v1',
+    /**
+     * The daemon serves the tail of its own process log
+     * (`daemon:computer:log`): an in-memory ring of lines its logger
+     * wrote, redacted before they enter the ring, read at the `watch` tier. It
+     * is NOT syslog or the journal and never reads either. Announced by the relay
+     * that serves it; a personal machine's daemon announces it too and refuses
+     * the read `consent_missing` until `skrr computer allow`.
+     */
+    daemonLog: 'computer_daemon_log_v1',
     /**
      * The page follows the controlling window (§6.2 "a stable viewport", §7.1,
      * OSK-13808): a browser `viewport` input, sent only by the attachment that
@@ -1218,3 +1235,32 @@ function computerShowsDesktop(phase) {
 function computerOffersPowerActions(machineKind) {
     return machineKind === 'dedicated';
 }
+// ---------------------------------------------------------------------------
+// The daemon's own log (`computer_daemon_log_v1`)
+// ---------------------------------------------------------------------------
+/**
+ * Why the daemon's log is a wire feature at all: the tenant uid on a Dedicated
+ * Runtime guest cannot read syslog or the journal, so an owner could not see
+ * why their machine's daemon reconnected or failed. The daemon keeps the last
+ * lines its OWN logger wrote in memory and serves them; it opens no file and no
+ * system log for this.
+ */
+exports.COMPUTER_DAEMON_LOG_LEVELS = ['trace', 'debug', 'info', 'warn', 'error'];
+/** Every bound is the daemon's to enforce and the API's to validate against. */
+exports.COMPUTER_DAEMON_LOG_LIMITS = {
+    /** Lines the daemon keeps in memory; older ones fall off the front. */
+    ringLines: 2000,
+    /** A line longer than this is cut and marked, never kept whole. */
+    lineChars: 1000,
+    /** Lines returned when the caller names none. */
+    defaultLines: 100,
+    /** The most lines one answer carries. */
+    maxLines: 500,
+    /** The most bytes (UTF-8) one answer's text carries; far under the 1 MiB SSE frame. */
+    maxBytes: 192 * 1024,
+    /** The longest look-back a `sinceMs` may ask for (24 h; the ring is shorter anyway). */
+    maxSinceMs: 24 * 60 * 60 * 1000,
+    /** Requests the daemon answers per `rateWindowMs`; one more is `rate_limited`. */
+    rateMax: 30,
+    rateWindowMs: 60 * 1000,
+};