instar 1.3.1592 → 1.3.1593

package/dashboard/desktop.css

@@ -20,6 +20,7 @@ body.desktop-live #keyboardBar input{-webkit-touch-callout:default;-webkit-user-
 .desktop-dock button{min-width:2.9rem;min-height:2.9rem;padding:.35rem;background:#111827e8;color:#f8fafc;border:1px solid #64748b;box-shadow:0 2px 12px #0009}
 .desktop-tools{position:absolute;z-index:6;right:4rem;bottom:max(.7rem,env(safe-area-inset-bottom));width:min(19rem,calc(100vw - 5rem));max-height:min(60dvh,32rem);overflow:auto;display:flex;flex-wrap:wrap;gap:.4rem;padding:.55rem;background:#111827f2;border:1px solid #64748b;border-radius:10px;box-shadow:0 4px 18px #0009}
 .desktop-tools[hidden],#keyboardBar[hidden],.desktop-dock button[hidden],.desktop-tools button[hidden]{display:none}
+.display-note{flex:1 0 100%;margin:0;font-size:.8rem;color:#f8fafc}.display-note[hidden]{display:none}#displayMenu button{flex:1 0 100%;text-align:left}
 .desktop-tools button{flex:1 0 auto;padding:.5rem .65rem}.type-label{display:block;margin:0;font-size:.8rem}
 .desktop-tools button[aria-pressed="true"]{background:#fbbf24;color:#422006}
 #keyboardBar{position:absolute;z-index:7;left:max(.5rem,env(safe-area-inset-left));right:max(.5rem,env(safe-area-inset-right));bottom:max(.5rem,env(safe-area-inset-bottom));display:flex;align-items:center;gap:.4rem;padding:.4rem;background:#111827f2;border:1px solid #64748b;border-radius:10px}

package/dashboard/desktop.html

@@ -36,11 +36,18 @@
     </div>
     <div class="desktop-dock" aria-label="Remote desktop controls">
       <button id="toolsButton" type="button" aria-label="More controls" aria-expanded="false" aria-controls="desktopTools">☰</button>
+      <button id="displaysButton" type="button" aria-label="Screens" aria-expanded="false" aria-controls="displayMenu" hidden>⧉</button>
       <button id="keyboardButton" type="button" aria-label="Show keyboard" aria-expanded="false" aria-controls="keyboardBar">⌨</button>
       <button id="zoomResetButton" type="button" aria-label="Fit screen" hidden>Fit</button>
       <button id="fullscreenButton" type="button" aria-label="Full screen">⛶</button>
     </div>
+    <div class="desktop-tools" id="displayMenu" aria-label="Screens" hidden></div>
     <div class="desktop-tools" id="desktopTools" hidden>
+      <p id="displayNote" class="display-note" hidden></p>
+      <button data-shortcut="overview" type="button" hidden></button>
+      <button data-shortcut="appWindows" type="button" hidden></button>
+      <button data-shortcut="previousSpace" type="button" hidden></button>
+      <button data-shortcut="nextSpace" type="button" hidden></button>
       <button id="modeButton" type="button" aria-pressed="true" hidden>Trackpad · swipe to move</button>
       <button id="dragButton" type="button" aria-pressed="false">Drag</button>
       <button id="rightButton" type="button">Right click</button>

package/dashboard/desktop.js

@@ -89,8 +89,38 @@ const LONG_PRESS_MS = 550;
 const DOUBLE_TAP_MS = 300;
 let mousePress = null;
 let lastTap = null;
+// A lone tap's click waits this long. A click followed at once by a press reads on
+// the host as a double-click, which maximizes a window being dragged by its title.
+let pendingTapClick = 0;
 let dragPointerId = null;
 let multiTap = null;
+// What the connected machine says about its screens. Until it answers
+// supported, selectDisplay is never sent: an older host ends the session on a
+// command it does not know.
+let displayInfo = null;
+let overviewOpen = null;
+let threeFinger = null;
+const THREE_FINGER_TRAVEL = 60;
+// While a switch settles the picture still shows the old screen, and a tap would
+// land on the new one at the wrong place. Hold pointer presses until a new frame.
+let screenSwitch = null;
+const SCREEN_SWITCH_SETTLE_MS = 400;
+const SCREEN_SWITCH_LIMIT_MS = 3_000;
+// Standard shortcuts, sent as ordinary keys. Spaces follow the fingers as on a
+// Mac trackpad: swiping left brings in the Space on the right.
+const DESKTOP_SHORTCUTS = {
+  macos: {
+    overview: { label: 'Mission Control', hint: 'Control+Up', modifiers: ['Control'], key: 'ArrowUp' },
+    appWindows: { label: 'App windows', hint: 'Control+Down', modifiers: ['Control'], key: 'ArrowDown' },
+    nextSpace: { label: 'Next Space', hint: 'Control+Right', modifiers: ['Control'], key: 'ArrowRight' },
+    previousSpace: { label: 'Previous Space', hint: 'Control+Left', modifiers: ['Control'], key: 'ArrowLeft' },
+  },
+  windows: {
+    overview: { label: 'Task View', hint: 'Win+Tab', modifiers: ['Meta'], key: 'Tab' },
+    nextSpace: { label: 'Next desktop', hint: 'Ctrl+Win+Right', modifiers: ['Control', 'Meta'], key: 'ArrowRight' },
+    previousSpace: { label: 'Previous desktop', hint: 'Ctrl+Win+Left', modifiers: ['Control', 'Meta'], key: 'ArrowLeft' },
+  },
+};
 
 // Watching counts as using the session: while the viewer is visible a light
 // ping keeps the two-minute idle limit from ending it.
@@ -134,6 +164,7 @@ function releaseButton() {
 }
 function beginHold(button) {
   if (heldButton) return;
+  overviewOpen = null; // This press may close it.
   flushPendingMove();
   buttonReleaseRequested = false;
   const epoch = streamEpoch;
@@ -393,6 +424,7 @@ async function receiveFrame(recordBuffer, epoch) {
     additionalData: recordAad('frame') }, aesKey, record.subarray(8));
   if (!inputEnabled || epoch !== streamEpoch) return;
   frameSequence = sequence;
+  if (screenSwitch && Date.now() - screenSwitch.at >= SCREEN_SWITCH_SETTLE_MS) screenSwitch = null;
   const bytes = new Uint8Array(frame);
   if (bytes[0] !== 0xff || bytes[1] !== 0xd8) {
     try { receiveH264(bytes, epoch); }
@@ -428,6 +460,11 @@ function leave(message) {
   pendingWheel = null;
   stopEdgePan();
   pointers.clear();
+  displayInfo = null;
+  overviewOpen = null;
+  threeFinger = null;
+  screenSwitch = null;
+  renderDisplays();
   setHeldButton(null);
   for (const key of heldKeys.keys()) { heldKeys.delete(key); keyOperationIds.delete(key); updateKeyButton(key); }
   keyReleaseRequested.clear();
@@ -868,10 +905,12 @@ async function openStream(result, resume = null) {
     updateCursor();
     $('machineName').textContent = ticket.label;
     status('Remote desktop is live.');
+    void refreshDisplays(epoch);
     if (resume !== null) resumeAttempt = null;
     resumeTransportFailures = 0;
     heartbeat = setInterval(() => {
       sendCommand({ type: 'ping' });
+      void refreshDisplays(epoch); // Picks up a screen plugged in, unplugged, or a read that failed.
     }, 30_000);
     resolve();
   });
@@ -893,6 +932,8 @@ async function openStream(result, resume = null) {
 
 function send(action) {
   if (!inputEnabled) return Promise.resolve(false);
+  if (screenSwitch && Date.now() - screenSwitch.at >= SCREEN_SWITCH_LIMIT_MS) screenSwitch = null;
+  if (screenSwitch && ['click', 'buttonDown', 'move'].includes(action.kind)) return Promise.resolve(false);
   return sendCommand({ type: 'input', action });
 }
 function imageArea() {
@@ -981,9 +1022,127 @@ function edgePanTick() {
   }
 }
 function clickCursor(button = 'left', count = 1) {
+  overviewOpen = null; // A click may have closed it.
   if (!heldButton) send(count > 1 ? { kind: 'click', ...cursor, button, count } : { kind: 'click', ...cursor, button });
 }
 function heldModifiers() { return modifierKeys.filter(key => heldKeys.has(key)); }
+/** Resolves to the new list, or null when this read told us nothing new. */
+async function refreshDisplays(epoch = streamEpoch) {
+  let info;
+  try { info = await api(`/desktop/requests/${encodeURIComponent(requestId)}/displays`); }
+  catch { info = { supported: false, platform: null, displays: [], currentDisplayId: null, canShowAll: false }; }
+  if (epoch !== streamEpoch) return null;
+  // One failed read must not take working controls away; the next one retries.
+  if (displayInfo?.supported && !info.supported) return null;
+  displayInfo = info;
+  renderDisplays();
+  return info;
+}
+function displayChoices() {
+  const info = displayInfo;
+  if (!info?.supported) return [];
+  const rows = info.displays.map(display => ({ id: display.id,
+    label: `${display.name} · ${display.width}×${display.height}${display.main ? ' · Main' : ''}` }));
+  return info.canShowAll ? [{ id: null, label: 'All screens' }, ...rows] : rows;
+}
+function renderDisplays() {
+  const menu = $('displayMenu');
+  const button = $('displaysButton');
+  if (!menu || !button) return;
+  const info = displayInfo;
+  const choices = displayChoices();
+  button.hidden = !info?.supported || info.displays.length < 2;
+  if (button.hidden) { menu.hidden = true; button.setAttribute('aria-expanded', 'false'); }
+  menu.replaceChildren(...choices.map(choice => {
+    const item = document.createElement('button');
+    item.type = 'button';
+    item.textContent = choice.label; // Host text: never markup.
+    item.setAttribute('aria-pressed', String(choice.id === info.currentDisplayId));
+    item.addEventListener('click', () => { void chooseDisplay(choice.id); });
+    return item;
+  }));
+  const shortcuts = DESKTOP_SHORTCUTS[info?.platform] ?? null;
+  for (const node of document.querySelectorAll('[data-shortcut]')) {
+    const action = shortcuts?.[node.dataset.shortcut];
+    node.hidden = !action;
+    if (action) node.textContent = action.label;
+  }
+  const note = $('displayNote');
+  if (note) {
+    note.hidden = !info || info.supported;
+    if (!note.hidden) note.textContent = 'This machine needs an update before you can switch screens.';
+  }
+}
+async function chooseDisplay(displayId) {
+  if (!displayInfo?.supported || !inputEnabled) return;
+  const epoch = streamEpoch;
+  const chosen = displayChoices().find(choice => choice.id === displayId);
+  $('displayMenu').hidden = true;
+  $('displaysButton').setAttribute('aria-expanded', 'false');
+  overviewOpen = null;
+  flushPendingMove();
+  resetZoom();
+  releaseButton();
+  if (!await send({ kind: 'selectDisplay', displayId })) return;
+  // macOS applies Spaces to the screen under the pointer, so the gestures
+  // follow the picture only if the pointer does.
+  cursor = { x: 0.5, y: 0.5 };
+  void send({ kind: 'move', ...cursor });
+  screenSwitch = { at: Date.now() };
+  updateCursor();
+  status(`Showing ${chosen?.label.split(' · ')[0] ?? 'the chosen screen'}.`);
+  await new Promise(resolve => setTimeout(resolve, 1_200));
+  const info = await refreshDisplays(epoch);
+  if (info?.supported && info.currentDisplayId !== displayId) {
+    status('That screen is not available any more.');
+  }
+}
+async function sendChord(modifiers, key) {
+  const epoch = streamEpoch;
+  const pressed = [];
+  let allDown = true;
+  for (const modifier of modifiers) {
+    if (heldKeys.has(modifier)) continue; // A key the operator latched stays latched.
+    if (!await beginKey(modifier)) { allDown = false; break; }
+    pressed.push(modifier);
+  }
+  if (allDown && epoch === streamEpoch) await tapKey(key);
+  for (const modifier of pressed.reverse()) if (epoch === streamEpoch) await releaseKey(modifier);
+}
+function runShortcut(name) {
+  const shortcuts = DESKTOP_SHORTCUTS[displayInfo?.platform];
+  const action = shortcuts?.[name];
+  if (!action || !inputEnabled) return;
+  // Named beside the action: this Mac may have the shortcut turned off, and
+  // the viewer cannot see that.
+  status(`${action.label} (${action.hint})`);
+  overviewOpen = name === 'overview' || name === 'appWindows' ? name : null;
+  void sendChord(action.modifiers, action.key);
+}
+function closeOverview() {
+  overviewOpen = null;
+  status('Back');
+  void tapKey('Escape');
+}
+function swipeThreeFingers(direction) {
+  if (direction === 'left') runShortcut('nextSpace');
+  else if (direction === 'right') runShortcut('previousSpace');
+  else if (direction === 'up') {
+    if (overviewOpen === 'appWindows') closeOverview();
+    else if (!overviewOpen) runShortcut('overview');
+  } else if (overviewOpen) closeOverview();
+  else runShortcut('appWindows');
+}
+function moveThreeFingers() {
+  if (!threeFinger || threeFinger.fired || pointers.size < 3 || heldButton) return;
+  const fingers = [...pointers.values()];
+  const dx = fingers.reduce((sum, state) => sum + state.x - state.startX, 0) / fingers.length;
+  const dy = fingers.reduce((sum, state) => sum + state.y - state.startY, 0) / fingers.length;
+  const major = Math.max(Math.abs(dx), Math.abs(dy));
+  if (major < THREE_FINGER_TRAVEL || major < 1.5 * Math.min(Math.abs(dx), Math.abs(dy))) return;
+  threeFinger.fired = true; // One swipe, one action.
+  swipeThreeFingers(Math.abs(dx) > Math.abs(dy) ? (dx < 0 ? 'left' : 'right') : (dy < 0 ? 'up' : 'down'));
+}
 function syncTouchModeButton() {
   $('modeButton').hidden = !touchCapable;
   $('modeButton').textContent = trackpad ? 'Trackpad · swipe to move' : 'Direct · touch position';
@@ -1076,6 +1235,18 @@ $('keyboardButton').addEventListener('click', () => {
   syncVisualViewport();
 });
 $('hideKeyboardButton').addEventListener('click', closeKeyboard);
+$('displaysButton')?.addEventListener('click', () => {
+  const open = $('displayMenu').hidden;
+  $('displayMenu').hidden = !open;
+  $('displaysButton').setAttribute('aria-expanded', String(open));
+  if (open) void refreshDisplays(); // A screen may have been plugged in since.
+});
+for (const button of document.querySelectorAll('[data-shortcut]')) {
+  button.addEventListener('click', () => {
+    if (overviewOpen && button.dataset.shortcut === overviewOpen) closeOverview();
+    else runShortcut(button.dataset.shortcut);
+  });
+}
 $('zoomResetButton').addEventListener('click', resetZoom);
 $('fullscreenButton').hidden = !document.fullscreenEnabled || !$('control').requestFullscreen;
 $('fullscreenButton').addEventListener('click', () => {
@@ -1159,8 +1330,10 @@ $('surface').addEventListener('pointerdown', event => {
     multiTap = null;
     const state = pointers.get(event.pointerId);
     const now = Date.now();
-    state.secondTap = !!lastTap && now - lastTap.at < DOUBLE_TAP_MS
+    state.secondTap = !!pendingTapClick && !!lastTap && now - lastTap.at < DOUBLE_TAP_MS
       && Math.hypot(event.clientX - lastTap.x, event.clientY - lastTap.y) < 40;
+    if (state.secondTap) { clearTimeout(pendingTapClick); pendingTapClick = 0; }
+    else flushTapClick();
     // Hold still to right-click, as on AnyDesk and most phone remote desktops.
     state.longPress = setTimeout(() => {
       if (pointers.get(event.pointerId) !== state || state.maxDistance >= 10 || state.multi || state.secondTap) return;
@@ -1175,6 +1348,12 @@ $('surface').addEventListener('pointerdown', event => {
     const pair = pairMetrics();
     twoFinger = { ...pair, zoom, panX, panY, lastX: pair.x, lastY: pair.y, mode: 'pending' };
   }
+  if (pointers.size === 3 && event.pointerType !== 'mouse') {
+    stopEdgePan();
+    twoFinger = null;
+    for (const state of pointers.values()) { state.startX = state.x; state.startY = state.y; }
+    threeFinger = { fired: false };
+  }
   if (!trackpad || event.pointerType === 'mouse') {
     const at = position(event);
     if (at) { cursor = at; updateCursor(); queueMove(at); }
@@ -1211,7 +1390,9 @@ $('surface').addEventListener('pointermove', event => {
   state.x = event.clientX; state.y = event.clientY;
   state.maxDistance = Math.max(state.maxDistance,
     Math.hypot(event.clientX - state.startX, event.clientY - state.startY));
-  if (pointers.size > 1 && event.pointerType !== 'mouse') {
+  if (threeFinger && event.pointerType !== 'mouse') {
+    moveThreeFingers();
+  } else if (pointers.size > 1 && event.pointerType !== 'mouse') {
     moveTwoFingers();
   } else if (state.multi && event.pointerType !== 'mouse') {
     // Do not turn the trailing finger of a scroll gesture into pointer motion.
@@ -1233,6 +1414,7 @@ $('surface').addEventListener('pointerup', event => {
   clearTimeout(state.longPress);
   pointers.delete(event.pointerId);
   if (pointers.size < 2) twoFinger = null;
+  if (pointers.size === 0) threeFinger = null;
   if (event.pointerType === 'mouse' && mousePress?.pointerId === event.pointerId) {
     const press = mousePress; mousePress = null;
     const at = position(event);
@@ -1268,17 +1450,34 @@ $('surface').addEventListener('pointerup', event => {
   }
   const distance = Math.max(state.maxDistance,
     Math.hypot(event.clientX - state.startX, event.clientY - state.startY));
-  if (!state.multi && distance < 10 && Date.now() - state.at < 500) {
+  if (!state.multi && distance < 10 && state.secondTap) {
+    // The first tap's click is still unsent: a real double tap goes out as one
+    // double-click, and a second press held without moving as one click.
+    if (!trackpad) { const at = position(event); if (at) cursor = at; }
+    flushPendingMove();
+    clickCursor('left', Date.now() - state.at < 500 ? 2 : 1);
+    lastTap = null;
+  } else if (!state.multi && distance < 10 && Date.now() - state.at < 500) {
     if (!trackpad || event.pointerType === 'mouse') { const at = position(event); if (at) cursor = at; }
-    clickCursor(event.button === 2 ? 'right' : 'left');
-    lastTap = event.pointerType === 'mouse' ? null : { at: Date.now(), x: event.clientX, y: event.clientY };
+    if (event.pointerType === 'mouse') { clickCursor(event.button === 2 ? 'right' : 'left'); lastTap = null; }
+    else {
+      lastTap = { at: Date.now(), x: event.clientX, y: event.clientY };
+      pendingTapClick = setTimeout(flushTapClick, DOUBLE_TAP_MS);
+    }
   }
 });
 function twoFingerUsed(tap) { return tap.zoomed === true; }
+function flushTapClick() {
+  if (!pendingTapClick) return;
+  clearTimeout(pendingTapClick);
+  pendingTapClick = 0;
+  clickCursor('left');
+}
 function cancelGestures() {
   stopEdgePan();
+  clearTimeout(pendingTapClick); pendingTapClick = 0;
   for (const state of pointers.values()) clearTimeout(state.longPress);
-  pointers.clear(); twoFinger = null; multiTap = null; mousePress = null; dragPointerId = null; lastTap = null;
+  pointers.clear(); twoFinger = null; threeFinger = null; multiTap = null; mousePress = null; dragPointerId = null; lastTap = null;
   releaseControls();
 }
 $('surface').addEventListener('pointercancel', cancelGestures);

package/dist/core/AutonomousStartAdmission.d.ts

@@ -12,14 +12,18 @@
  *
  * THE FIX:
  *  1. `decideAutonomousStartStatus` — 'preparing' only while a W32 window
- *     lifecycle is genuinely open AND its single liveness slot can take this
- *     run. Every other run starts 'active', so the reconciler revives it if its
+ *     lifecycle is genuinely open AND this topic's liveness binding can take
+ *     this run. Every other run starts 'active', so the reconciler revives it if its
  *     session dies.
  *  2. `PreparingRunWatchdog` — any open run still 'preparing' past a few
  *     minutes gets ONE plain notice in its own topic. A run that cannot start
  *     is never silent. At most PREPARING_NOTICE_MAX_ATTEMPTS sends per run,
  *     counted on the durable run record, so a dead delivery path cannot loop.
  *
+ * Liveness holds one binding PER TOPIC (2026-11-01, topic 10000001256): it
+ * used to hold one binding for the whole agent, so a run in one topic left a
+ * run in another 'preparing' with nothing able to promote it.
+ *
  * @self-action-controller: preparing-run-watchdog
  */
 import type { AutonomousRunRecord, AutonomousRunStore } from './AutonomousRunStore.js';
@@ -34,7 +38,7 @@ export declare function telegramTopicNotifier(send: (topic: number, text: string
 export interface StartAdmissionInput {
     projectName: string;
     topicId: string;
-    /** WindowRunLivenessAuthority.status(), or null/undefined when the authority is dark. */
+    /** WindowRunLivenessAuthority.status(topicId) for THIS run's topic, or null/undefined when the authority is dark. */
     liveness: {
         enabled: boolean;
         dryRun: boolean;
@@ -71,7 +75,7 @@ export interface BoundRun {
 /** Open runs that have sat in 'preparing' too long and have not been reported yet. */
 export declare function findStuckPreparingRuns(runs: readonly AutonomousRunRecord[], opts: {
     nowMs: number;
-    boundRun?: BoundRun | null;
+    boundRun?: BoundRun | readonly BoundRun[] | null;
     afterMs?: number;
     afterBoundMs?: number;
 }): AutonomousRunRecord[];
@@ -82,6 +86,8 @@ export interface PreparingRunWatchdogDeps {
     notify: (topicId: string, text: string) => Promise<boolean>;
     /** The run the liveness authority currently evaluates (non-terminal), if any. */
     boundRun?: () => BoundRun | null;
+    /** Every run the liveness authority currently evaluates (one per topic). Wins over `boundRun`. */
+    boundRuns?: () => readonly BoundRun[];
     now?: () => number;
 }
 export declare class PreparingRunWatchdog {

package/dist/core/AutonomousStartAdmission.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AutonomousStartAdmission.d.ts","sourceRoot":"","sources":["../../src/core/AutonomousStartAdmission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAEvF,0EAA0E;AAC1E,eAAO,MAAM,4BAA4B,EAAE,SAAS,MAAM,EAEzD,CAAC;AAGF;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GACtD,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAOrD;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,yFAAyF;IACzF,QAAQ,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,GAAG,SAAS,CAAC;IACxI,sEAAsE;IACtE,YAAY,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,GAAG,SAAS,CAAC;IAC5H,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,WAAW,GAAG,QAAQ,CAAC;IACtC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,mBAAmB,GAAG,sBAAsB,CAuB9F;AAED,eAAO,MAAM,yBAAyB,QAAa,CAAC;AACpD,iGAAiG;AACjG,eAAO,MAAM,+BAA+B,QAAc,CAAC;AAC3D,yFAAyF;AACzF,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAE/C,MAAM,WAAW,QAAQ;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAE7E,sFAAsF;AACtF,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,SAAS,mBAAmB,EAAE,EACpC,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3F,mBAAmB,EAAE,CAcvB;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAOrF;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,UAAU,GAAG,QAAQ,CAAC,CAAC;IACvD,iFAAiF;IACjF,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,QAAQ,GAAG,IAAI,CAAC;IACjC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,qBAAa,oBAAoB;IAEnB,OAAO,CAAC,QAAQ,CAAC,IAAI;IADjC,OAAO,CAAC,OAAO,CAAS;IACxB,YAA6B,IAAI,EAAE,wBAAwB,EAAI;IAE/D,wDAAwD;IAClD,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAmD9B;CACF"}
+{"version":3,"file":"AutonomousStartAdmission.d.ts","sourceRoot":"","sources":["../../src/core/AutonomousStartAdmission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAEvF,0EAA0E;AAC1E,eAAO,MAAM,4BAA4B,EAAE,SAAS,MAAM,EAEzD,CAAC;AAGF;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GACtD,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAOrD;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,qHAAqH;IACrH,QAAQ,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,GAAG,SAAS,CAAC;IACxI,sEAAsE;IACtE,YAAY,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,GAAG,SAAS,CAAC;IAC5H,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,WAAW,GAAG,QAAQ,CAAC;IACtC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,mBAAmB,GAAG,sBAAsB,CAuB9F;AAED,eAAO,MAAM,yBAAyB,QAAa,CAAC;AACpD,iGAAiG;AACjG,eAAO,MAAM,+BAA+B,QAAc,CAAC;AAC3D,yFAAyF;AACzF,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAE/C,MAAM,WAAW,QAAQ;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAE7E,sFAAsF;AACtF,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,SAAS,mBAAmB,EAAE,EACpC,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,SAAS,QAAQ,EAAE,GAAG,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GACjH,mBAAmB,EAAE,CAevB;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAOrF;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,UAAU,GAAG,QAAQ,CAAC,CAAC;IACvD,iFAAiF;IACjF,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,QAAQ,GAAG,IAAI,CAAC;IACjC,kGAAkG;IAClG,SAAS,CAAC,EAAE,MAAM,SAAS,QAAQ,EAAE,CAAC;IACtC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,qBAAa,oBAAoB;IAEnB,OAAO,CAAC,QAAQ,CAAC,IAAI;IADjC,OAAO,CAAC,OAAO,CAAS;IACxB,YAA6B,IAAI,EAAE,wBAAwB,EAAI;IAE/D,wDAAwD;IAClD,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAmD9B;CACF"}

package/dist/core/AutonomousStartAdmission.js

@@ -12,14 +12,18 @@
  *
  * THE FIX:
  *  1. `decideAutonomousStartStatus` — 'preparing' only while a W32 window
- *     lifecycle is genuinely open AND its single liveness slot can take this
- *     run. Every other run starts 'active', so the reconciler revives it if its
+ *     lifecycle is genuinely open AND this topic's liveness binding can take
+ *     this run. Every other run starts 'active', so the reconciler revives it if its
  *     session dies.
  *  2. `PreparingRunWatchdog` — any open run still 'preparing' past a few
  *     minutes gets ONE plain notice in its own topic. A run that cannot start
  *     is never silent. At most PREPARING_NOTICE_MAX_ATTEMPTS sends per run,
  *     counted on the durable run record, so a dead delivery path cannot loop.
  *
+ * Liveness holds one binding PER TOPIC (2026-11-01, topic 10000001256): it
+ * used to hold one binding for the whole agent, so a run in one topic left a
+ * run in another 'preparing' with nothing able to promote it.
+ *
  * @self-action-controller: preparing-run-watchdog
  */
 /** Lifecycle states in which a W32 window is admitting / running work. */
@@ -53,10 +57,10 @@ export function decideAutonomousStartStatus(input) {
         && (!Number.isFinite(ceilingMs) || input.nowMs < ceilingMs);
     if (!windowOpen)
         return { initialStatus: 'active', reason: 'no-open-window' };
-    // The authority holds ONE binding, and only a NEW run can bind it: a live
-    // binding (even this topic's, which belongs to an earlier run) refuses it, and
-    // a finished binding for this same window closes the window to rebinding. A
-    // run that cannot take the slot could never be promoted, so it must not wait.
+    // The authority holds one binding per topic, and only a NEW run can bind it: a
+    // live binding in this topic (an earlier run's) refuses it, and a finished
+    // binding for this same window closes the window to rebinding. A run that
+    // cannot take its topic's binding could never be promoted, so it must not wait.
     const bound = liveness.state;
     if (bound && !TERMINAL_LIVENESS_STATES.includes(bound.status)) {
         return { initialStatus: 'active', reason: 'liveness-slot-held' };
@@ -75,6 +79,7 @@ export const PREPARING_NOTICE_MAX_ATTEMPTS = 3;
 export function findStuckPreparingRuns(runs, opts) {
     const afterMs = opts.afterMs ?? PREPARING_NOTICE_AFTER_MS;
     const afterBoundMs = opts.afterBoundMs ?? PREPARING_NOTICE_AFTER_BOUND_MS;
+    const bounds = !opts.boundRun ? [] : Array.isArray(opts.boundRun) ? opts.boundRun : [opts.boundRun];
     return runs.filter((run) => {
         if (run.status !== 'preparing' || run.preparingNoticeAt)
             return false;
@@ -83,11 +88,11 @@ export function findStuckPreparingRuns(runs, opts) {
         const registeredMs = Date.parse(run.registeredAt);
         if (!Number.isFinite(registeredMs))
             return true;
-        const bound = opts.boundRun?.topicId === run.topicId && opts.boundRun.runId === run.runId;
+        const bound = bounds.find(entry => entry.topicId === run.topicId && entry.runId === run.runId);
         if (!bound)
             return opts.nowMs - registeredMs >= afterMs;
         // The allowance for a first work receipt runs from when the authority took the run.
-        const boundMs = Date.parse(opts.boundRun.boundAt);
+        const boundMs = Date.parse(bound.boundAt);
         return opts.nowMs - Math.max(registeredMs, Number.isFinite(boundMs) ? boundMs : registeredMs) >= afterBoundMs;
     });
 }
@@ -112,7 +117,7 @@ export class PreparingRunWatchdog {
         this.running = true;
         try {
             const nowMs = this.deps.now?.() ?? Date.now();
-            const stuck = findStuckPreparingRuns(this.deps.store.listOpen(nowMs), { nowMs, boundRun: this.deps.boundRun?.() ?? null });
+            const stuck = findStuckPreparingRuns(this.deps.store.listOpen(nowMs), { nowMs, boundRun: this.deps.boundRuns?.() ?? this.deps.boundRun?.() ?? null });
             const reported = [];
             for (const run of stuck) {
                 // Claim under the run lock, re-checking the live record: a run promoted

package/dist/core/AutonomousStartAdmission.js.map

@@ -1 +1 @@
-{"version":3,"file":"AutonomousStartAdmission.js","sourceRoot":"","sources":["../../src/core/AutonomousStartAdmission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,4BAA4B,GAAsB;IAC7D,gBAAgB,EAAE,eAAe,EAAE,cAAc,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,sBAAsB;CAClH,CAAC;AACF,MAAM,wBAAwB,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAEjE;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAuD;IAEvD,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC;AAiBD,MAAM,UAAU,2BAA2B,CAAC,KAA0B;IACpE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;IACzC,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,IAAI,QAAQ,EAAE,OAAO,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5F,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACvE,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,eAAe,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,CAAC,CAAC,YAAY;WAC5B,4BAA4B,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC;WACzD,CAAC,YAAY,CAAC,kBAAkB;WAChC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC9E,0EAA0E;IAC1E,+EAA+E;IAC/E,4EAA4E;IAC5E,8EAA8E;IAC9E,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,IAAI,KAAK,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,YAAa,CAAC,QAAQ,EAAE,CAAC;QACvD,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,MAAM,CAAC;AACpD,iGAAiG;AACjG,MAAM,CAAC,MAAM,+BAA+B,GAAG,EAAE,GAAG,MAAM,CAAC;AAC3D,yFAAyF;AACzF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAI/C,sFAAsF;AACtF,MAAM,UAAU,sBAAsB,CACpC,IAAoC,EACpC,IAA4F;IAE5F,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,yBAAyB,CAAC;IAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,+BAA+B,CAAC;IAC1E,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QACzB,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,IAAI,GAAG,CAAC,iBAAiB;YAAE,OAAO,KAAK,CAAC;QACtE,IAAI,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,CAAC,IAAI,6BAA6B;YAAE,OAAO,KAAK,CAAC;QACtF,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,OAAO,IAAI,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,KAAK,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,CAAC;QAC1F,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,GAAG,YAAY,IAAI,OAAO,CAAC;QACxD,oFAAoF;QACpF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAS,CAAC,OAAO,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC;IAChH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAwB,EAAE,KAAa;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,UAAU,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACrG,OAAO;QACL,sEAAsE,MAAM,uHAAuH;QACnM,8DAA8D,GAAG,CAAC,KAAK,IAAI;KAC5E,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACjB,CAAC;AAWD,MAAM,OAAO,oBAAoB;IAEF,IAAI;IADzB,OAAO,GAAG,KAAK,CAAC;IACxB,YAA6B,IAA8B;oBAA9B,IAAI;IAA6B,CAAC;IAE/D,wDAAwD;IACxD,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YAC3H,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;gBACxB,wEAAwE;gBACxE,oEAAoE;gBACpE,qEAAqE;gBACrE,wDAAwD;gBACxD,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;gBACzC,IAAI,OAAO,GAAG,KAAK,CAAC;gBACpB,IAAI,CAAC;oBACH,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;wBACrD,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,IAAI,GAAG,CAAC,iBAAiB,IAAI,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,CAAC,IAAI,6BAA6B;4BAAE,OAAO;wBACvI,GAAG,CAAC,uBAAuB,GAAG,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;wBACrE,GAAG,CAAC,iBAAiB,GAAG,EAAE,CAAC;wBAC3B,OAAO,GAAG,IAAI,CAAC;oBACjB,CAAC,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,0EAA0E;oBAC1E,OAAO,CAAC,IAAI,CAAC,gDAAgD,GAAG,CAAC,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC;gBACpF,CAAC;gBACD,IAAI,CAAC,OAAO;oBAAE,SAAS;gBACvB,IAAI,IAAI,GAAG,KAAK,CAAC;gBACjB,IAAI,CAAC;oBACH,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;gBAChF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,iGAAiG;oBACjG,OAAO,CAAC,IAAI,CAAC,6CAA6C,GAAG,CAAC,OAAO,UAAU,EAAE,KAAK,CAAC,CAAC;gBAC1F,CAAC;gBACD,IAAI,IAAI,EAAE,CAAC;oBACT,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBACzB,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC;oBACH,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,GAAG,CAAC,iBAAiB,KAAK,EAAE;wBAAE,OAAO,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/H,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,8FAA8F;oBAC9F,OAAO,CAAC,IAAI,CAAC,kDAAkD,GAAG,CAAC,KAAK,aAAa,EAAE,KAAK,CAAC,CAAC;gBAChG,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,6BAA6B,EAAE,CAAC;oBAC5E,OAAO,CAAC,IAAI,CAAC,kDAAkD,GAAG,CAAC,OAAO,aAAa,GAAG,CAAC,KAAK,mBAAmB,6BAA6B,gBAAgB,CAAC,CAAC;gBACpK,CAAC;YACH,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"AutonomousStartAdmission.js","sourceRoot":"","sources":["../../src/core/AutonomousStartAdmission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAIH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,4BAA4B,GAAsB;IAC7D,gBAAgB,EAAE,eAAe,EAAE,cAAc,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,sBAAsB;CAClH,CAAC;AACF,MAAM,wBAAwB,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAEjE;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAuD;IAEvD,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC;AAiBD,MAAM,UAAU,2BAA2B,CAAC,KAA0B;IACpE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;IACzC,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,IAAI,QAAQ,EAAE,OAAO,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5F,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACvE,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,eAAe,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,CAAC,CAAC,YAAY;WAC5B,4BAA4B,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC;WACzD,CAAC,YAAY,CAAC,kBAAkB;WAChC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC9E,+EAA+E;IAC/E,2EAA2E;IAC3E,0EAA0E;IAC1E,gFAAgF;IAChF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,IAAI,KAAK,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,YAAa,CAAC,QAAQ,EAAE,CAAC;QACvD,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,MAAM,CAAC;AACpD,iGAAiG;AACjG,MAAM,CAAC,MAAM,+BAA+B,GAAG,EAAE,GAAG,MAAM,CAAC;AAC3D,yFAAyF;AACzF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAI/C,sFAAsF;AACtF,MAAM,UAAU,sBAAsB,CACpC,IAAoC,EACpC,IAAkH;IAElH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,yBAAyB,CAAC;IAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,+BAA+B,CAAC;IAC1E,MAAM,MAAM,GAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAoB,CAAC,CAAC;IACrI,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QACzB,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,IAAI,GAAG,CAAC,iBAAiB;YAAE,OAAO,KAAK,CAAC;QACtE,IAAI,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,CAAC,IAAI,6BAA6B;YAAE,OAAO,KAAK,CAAC;QACtF,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,OAAO,IAAI,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/F,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,GAAG,YAAY,IAAI,OAAO,CAAC;QACxD,oFAAoF;QACpF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC;IAChH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAwB,EAAE,KAAa;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,UAAU,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACrG,OAAO;QACL,sEAAsE,MAAM,uHAAuH;QACnM,8DAA8D,GAAG,CAAC,KAAK,IAAI;KAC5E,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACjB,CAAC;AAaD,MAAM,OAAO,oBAAoB;IAEF,IAAI;IADzB,OAAO,GAAG,KAAK,CAAC;IACxB,YAA6B,IAA8B;oBAA9B,IAAI;IAA6B,CAAC;IAE/D,wDAAwD;IACxD,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YACtJ,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;gBACxB,wEAAwE;gBACxE,oEAAoE;gBACpE,qEAAqE;gBACrE,wDAAwD;gBACxD,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;gBACzC,IAAI,OAAO,GAAG,KAAK,CAAC;gBACpB,IAAI,CAAC;oBACH,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;wBACrD,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,IAAI,GAAG,CAAC,iBAAiB,IAAI,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,CAAC,IAAI,6BAA6B;4BAAE,OAAO;wBACvI,GAAG,CAAC,uBAAuB,GAAG,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;wBACrE,GAAG,CAAC,iBAAiB,GAAG,EAAE,CAAC;wBAC3B,OAAO,GAAG,IAAI,CAAC;oBACjB,CAAC,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,0EAA0E;oBAC1E,OAAO,CAAC,IAAI,CAAC,gDAAgD,GAAG,CAAC,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC;gBACpF,CAAC;gBACD,IAAI,CAAC,OAAO;oBAAE,SAAS;gBACvB,IAAI,IAAI,GAAG,KAAK,CAAC;gBACjB,IAAI,CAAC;oBACH,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;gBAChF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,iGAAiG;oBACjG,OAAO,CAAC,IAAI,CAAC,6CAA6C,GAAG,CAAC,OAAO,UAAU,EAAE,KAAK,CAAC,CAAC;gBAC1F,CAAC;gBACD,IAAI,IAAI,EAAE,CAAC;oBACT,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBACzB,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC;oBACH,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,GAAG,CAAC,iBAAiB,KAAK,EAAE;wBAAE,OAAO,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/H,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,8FAA8F;oBAC9F,OAAO,CAAC,IAAI,CAAC,kDAAkD,GAAG,CAAC,KAAK,aAAa,EAAE,KAAK,CAAC,CAAC;gBAChG,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,6BAA6B,EAAE,CAAC;oBAC5E,OAAO,CAAC,IAAI,CAAC,kDAAkD,GAAG,CAAC,OAAO,aAAa,GAAG,CAAC,KAAK,mBAAmB,6BAA6B,gBAAgB,CAAC,CAAC;gBACpK,CAAC;YACH,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;CACF"}

package/dist/core/DesktopHost.d.ts

@@ -28,6 +28,11 @@ export type DesktopInput = {
 } | {
     kind: 'keyDown' | 'keyUp';
     key: DesktopKey;
+}
+/** Handled by the grant authority, never by host.input. null = host default. */
+ | {
+    kind: 'selectDisplay';
+    displayId: string | null;
 };
 /** Every key a viewer may hold or tap. Shared by the browser viewer, the
  * native app and both host helpers, which each map the same names. */
@@ -52,7 +57,32 @@ export interface DesktopProbe {
     screenGrant?: 'own' | 'inherited' | 'none';
     inputGrant?: 'own' | 'inherited' | 'none';
 }
+export type DesktopPlatform = 'macos' | 'windows';
+export interface DesktopDisplay {
+    /** Opaque to viewers; the host resolves it. */
+    id: string;
+    name: string;
+    /** Real pixels. */
+    width: number;
+    height: number;
+    main: boolean;
+}
+export interface DesktopDisplayList {
+    displays: DesktopDisplay[];
+    /** null only where canShowAll is true: every screen in one picture. */
+    currentDisplayId: string | null;
+    canShowAll: boolean;
+}
+export declare function validDisplayId(value: unknown): value is string;
+/** Host helpers report untrusted text. Bound it before any viewer sees it. */
+export declare function parseDesktopDisplays(raw: unknown): DesktopDisplay[];
 export interface DesktopHost {
+    /** Absent on a host that cannot tell a viewer which shortcuts apply. */
+    readonly platform?: DesktopPlatform;
+    /** Absent, or rejecting, means this host cannot switch screens. */
+    listDisplays?(): Promise<DesktopDisplayList>;
+    /** False when the display is not on this machine; the current one stays. */
+    selectDisplay?(displayId: string | null): Promise<boolean>;
     probe(): Promise<DesktopProbe>;
     requestPermission?(): Promise<{
         screenPermission: boolean;

package/dist/core/DesktopHost.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DesktopHost.d.ts","sourceRoot":"","sources":["../../src/core/DesktopHost.ts"],"names":[],"mappings":"AAAA;oFACoF;AACpF,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;AAExD,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE;AACxC,iEAAiE;GAC/D;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,aAAa,CAAC;IAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;CAAE,GACjF;IAAE,IAAI,EAAE,YAAY,GAAG,UAAU,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,GAChF;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC;IAAC,GAAG,EAAE,UAAU,CAAA;CAAE,CAAC;AAMnD;sEACsE;AACtE,eAAO,MAAM,YAAY,EAAE,SAAS,MAAM,EAIC,CAAC;AAG5C,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAEhC,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,UAAU,CAE5D;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,IAAI,aAAa,CAExE;AAED,0DAA0D;AAC1D,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAkB/D;AAED,MAAM,WAAW,YAAY;IAC3B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,oEAAoE;IACpE,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;iFAC6E;IAC7E,WAAW,CAAC,EAAE,KAAK,GAAG,WAAW,GAAG,MAAM,CAAC;IAC3C,UAAU,CAAC,EAAE,KAAK,GAAG,WAAW,GAAG,MAAM,CAAC;CAC3C;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/B,iBAAiB,CAAC,IAAI,OAAO,CAAC;QAAE,gBAAgB,EAAE,OAAO,CAAC;QAAC,eAAe,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACvF,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3B,WAAW,CAAC,CAAC,aAAa,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,mBAAmB,EAAE,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACnG,MAAM,CAAC,IAAI,OAAO,CAAC;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7C,KAAK,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,WAAW,IAAI,IAAI,CAAC;IACpB,sBAAsB,CAAC,CAAC,OAAO,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC;IACnD,cAAc,CAAC,gBAAgB,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,aAAa,IAAI,IAAI,CAAC;CACvB"}
+{"version":3,"file":"DesktopHost.d.ts","sourceRoot":"","sources":["../../src/core/DesktopHost.ts"],"names":[],"mappings":"AAAA;oFACoF;AACpF,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;AAExD,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE;AACxC,iEAAiE;GAC/D;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,aAAa,CAAC;IAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;CAAE,GACjF;IAAE,IAAI,EAAE,YAAY,GAAG,UAAU,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,GAChF;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC;IAAC,GAAG,EAAE,UAAU,CAAA;CAAE;AAChD,gFAAgF;GAC9E;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAMxD;sEACsE;AACtE,eAAO,MAAM,YAAY,EAAE,SAAS,MAAM,EAIC,CAAC;AAG5C,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAEhC,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,UAAU,CAE5D;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,IAAI,aAAa,CAExE;AAED,0DAA0D;AAC1D,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAkB/D;AAED,MAAM,WAAW,YAAY;IAC3B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,oEAAoE;IACpE,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;iFAC6E;IAC7E,WAAW,CAAC,EAAE,KAAK,GAAG,WAAW,GAAG,MAAM,CAAC;IAC3C,UAAU,CAAC,EAAE,KAAK,GAAG,WAAW,GAAG,MAAM,CAAC;CAC3C;AAED,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,SAAS,CAAC;AAElD,MAAM,WAAW,cAAc;IAC7B,+CAA+C;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,uEAAuE;IACvE,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,OAAO,CAAC;CACrB;AAKD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE9D;AAED,8EAA8E;AAC9E,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,cAAc,EAAE,CAgBnE;AAED,MAAM,WAAW,WAAW;IAC1B,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC;IACpC,mEAAmE;IACnE,YAAY,CAAC,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC7C,4EAA4E;IAC5E,aAAa,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/B,iBAAiB,CAAC,IAAI,OAAO,CAAC;QAAE,gBAAgB,EAAE,OAAO,CAAC;QAAC,eAAe,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACvF,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3B,WAAW,CAAC,CAAC,aAAa,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,mBAAmB,EAAE,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACnG,MAAM,CAAC,IAAI,OAAO,CAAC;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7C,KAAK,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,WAAW,IAAI,IAAI,CAAC;IACpB,sBAAsB,CAAC,CAAC,OAAO,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC;IACnD,cAAc,CAAC,gBAAgB,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,aAAa,IAAI,IAAI,CAAC;CACvB"}

package/dist/core/DesktopHost.js

@@ -41,4 +41,28 @@ export function validDesktopInput(action) {
     return action.kind === 'type' && typeof action.text === 'string'
         && action.text.length > 0 && action.text.length <= 1_024 && !action.text.includes('\0');
 }
+const DISPLAY_ID = /^[A-Za-z0-9_-]{1,32}$/;
+const MAX_DISPLAYS = 16;
+export function validDisplayId(value) {
+    return typeof value === 'string' && DISPLAY_ID.test(value);
+}
+/** Host helpers report untrusted text. Bound it before any viewer sees it. */
+export function parseDesktopDisplays(raw) {
+    const rows = raw?.displays;
+    if (!Array.isArray(rows) || rows.length > MAX_DISPLAYS)
+        throw new Error('desktop-displays-invalid');
+    const seen = new Set();
+    return rows.map((row, index) => {
+        const { id, name, width, height, main } = (row ?? {});
+        if (!validDisplayId(id) || seen.has(id) || !Number.isSafeInteger(width) || !Number.isSafeInteger(height)
+            || width < 1 || width > 65_535
+            || height < 1 || height > 65_535 || typeof main !== 'boolean') {
+            throw new Error('desktop-displays-invalid');
+        }
+        seen.add(id);
+        const label = typeof name === 'string'
+            ? [...name].map(c => (c.charCodeAt(0) < 32 || c.charCodeAt(0) === 127 ? ' ' : c)).join('').trim().slice(0, 64) : '';
+        return { id, name: label || `Display ${index + 1}`, width: width, height: height, main };
+    });
+}
 //# sourceMappingURL=DesktopHost.js.map

package/dist/core/DesktopHost.js.map

@@ -1 +1 @@
-{"version":3,"file":"DesktopHost.js","sourceRoot":"","sources":["../../src/core/DesktopHost.ts"],"names":[],"mappings":"AAaA,MAAM,OAAO,GAAG,4BAA4B,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACvD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACtC,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAExE;sEACsE;AACtE,MAAM,CAAC,MAAM,YAAY,GAAsB,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO;IAC7F,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO;IACxD,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW;IACjD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ;IAC7C,GAAG,aAAa,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;AAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;AAItC,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAe;IAC7C,OAAO,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,QAAQ,CAAC;AACxE,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,iBAAiB,CAAC,MAAoB;IACpD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACpH,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;eACvD,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAChF,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACxC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAClD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;eACpD,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;eAC1D,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1F,OAAO,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;WAC3D,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC5F,CAAC"}
+{"version":3,"file":"DesktopHost.js","sourceRoot":"","sources":["../../src/core/DesktopHost.ts"],"names":[],"mappings":"AAeA,MAAM,OAAO,GAAG,4BAA4B,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACvD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACtC,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAExE;sEACsE;AACtE,MAAM,CAAC,MAAM,YAAY,GAAsB,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO;IAC7F,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO;IACxD,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW;IACjD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ;IAC7C,GAAG,aAAa,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;AAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;AAItC,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAe;IAC7C,OAAO,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,QAAQ,CAAC;AACxE,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,iBAAiB,CAAC,MAAoB;IACpD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACpH,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;eACvD,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAChF,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACxC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAClD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;eACpD,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;eAC1D,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1F,OAAO,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;WAC3D,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC5F,CAAC;AAqCD,MAAM,UAAU,GAAG,uBAAuB,CAAC;AAC3C,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,MAAM,IAAI,GAAI,GAAqC,EAAE,QAAQ,CAAC;IAC9D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACpG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QAC7B,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE,CAA4B,CAAC;QACjF,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;eAClG,KAAgB,GAAG,CAAC,IAAK,KAAgB,GAAG,MAAM;eAClD,MAAiB,GAAG,CAAC,IAAK,MAAiB,GAAG,MAAM,IAAI,OAAO,IAAI,KAAK,SAAS,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ;YACpC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,IAAI,WAAW,KAAK,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,KAAe,EAAE,MAAM,EAAE,MAAgB,EAAE,IAAI,EAAE,CAAC;IAC/G,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/DirectDesktopAccess.d.ts

@@ -1,5 +1,5 @@
 import type { IncomingMessage } from 'node:http';
-import type { DesktopHost, DesktopProbe } from './DesktopHost.js';
+import { type DesktopDisplay, type DesktopHost, type DesktopPlatform, type DesktopProbe } from './DesktopHost.js';
 import type { RemoteStepUpLockoutPort } from './RemoteStepUpLockouts.js';
 import type { DesktopStreamSession } from '../server/DesktopStreamManager.js';
 import type { DesktopAccessAudit } from './DesktopAccessAudit.js';
@@ -15,6 +15,15 @@ export interface DirectDesktopRequestInput {
     previousVideoCodec?: 'jpeg' | 'h264';
     scopeConfirmed: boolean;
 }
+export interface DesktopDisplaysReply {
+    /** false: this host cannot switch screens, and selectDisplay must not be sent. */
+    supported: boolean;
+    /** Which shortcuts apply. null: unknown, so the viewer sends none. */
+    platform: DesktopPlatform | null;
+    displays: DesktopDisplay[];
+    currentDisplayId: string | null;
+    canShowAll: boolean;
+}
 export interface DesktopTargetIdentity {
     /** DER SPKI Ed25519 public key pinned to this physical machine. */
     publicKey: Buffer;
@@ -88,6 +97,7 @@ export declare class DirectDesktopAccess {
         x: number;
         y: number;
     }>;
+    displays(requestId: string, operatorSessionToken: string): Promise<DesktopDisplaysReply>;
     ticket(requestId: string, operatorSessionToken: string, nonce: string, signature: string): string;
     admit(request: IncomingMessage): Promise<DesktopStreamSession>;
     revoke(requestId: string, operatorSessionToken: string): void;