livedesk 0.1.697 → 0.1.701

package/README.md

@@ -44,7 +44,25 @@ npx -y --prefer-online vuvodesk@latest --force-role hub
 npx -y --prefer-online vuvodesk@latest --force-role client
 ```
 
-## Hub
+## Linux desktop diagnosis
+
+The source launcher provides a read-only preparation diagnostic:
+
+```sh
+node packages/vuvodesk/bin/livedesk.js diagnose linux-desktop
+node packages/vuvodesk/bin/livedesk.js diagnose linux-desktop --pid <native-agent-pid>
+```
+
+Run from a graphical terminal, or specify the existing same-user
+`livedesk-client-fast` PID when using SSH. It reports Xorg/Wayland session
+evidence and the system's ScreenCast/RemoteDesktop portal properties. It does
+not start capture, send input, show permission prompts, restart the runtime or
+change OS settings. Portal presence does not mean VuvoDesk Wayland support is
+implemented. The current capture/input path is X11; Wayland integration remains
+in preparation. This command must be included in a future published launcher
+before it is available through `vuvodesk@latest`.
+
+## Hub
 
 ```powershell
 npx -y --prefer-online vuvodesk@latest hub
@@ -154,8 +172,8 @@ device, Hub URL, timeout, and report-path options.
 
 ## Plans
 
-- Free: 5 personal devices with a standard wall banner ad.
-- Plus LTD launch: 15 personal devices, no ads, USD 79 one-time.
+- Free: 3 personal devices with a standard wall banner ad.
+- Plus LTD launch: 20 devices for personal and commercial use, no ads, USD 79 one-time.
 - Pro LTD launch: 50 devices for schools, academies, and commercial use, USD 199 one-time.
 - Team: unlimited devices, up to 5 people, and commercial use.
 

package/bin/livedesk.js

@@ -347,7 +347,8 @@ Usage:
   npx -y --prefer-online vuvodesk@latest --force-role hub
   npx -y --prefer-online vuvodesk@latest --force-role client
   npx -y --prefer-online vuvodesk@latest diagnose mac-physical --confirm-active-motion
-  npx -y --prefer-online vuvodesk@latest diagnose transport-physical
+  npx -y --prefer-online vuvodesk@latest diagnose transport-physical
+  npx -y --prefer-online vuvodesk@latest diagnose linux-desktop
 
 Commands:
   No command     Resolve the signed-in device role and start the matching runtime.
@@ -355,8 +356,10 @@ Commands:
   client         Legacy alias for --force-role client.
   diagnose mac-physical
                  Run the isolated two-display macOS capture/control physical gate.
-  diagnose transport-physical
-                 Prove Direct, UDP P2P, encrypted relay, and Direct recovery on a current stream.
+  diagnose transport-physical
+                 Prove Direct, UDP P2P, encrypted relay, and Direct recovery on a current stream.
+  diagnose linux-desktop
+                 Inspect Linux session and Wayland portal availability without starting capture.
 
 Hub options:
   --no-open      Do not open the browser automatically.
@@ -419,7 +422,7 @@ async function runDiagnosticCommand(args) {
     printHelp();
     return;
   }
-  if (name === 'transport-physical') {
+  if (name === 'transport-physical') {
     const diagnosticEntry = resolve(
       packageRoot,
       'diagnostics',
@@ -430,10 +433,15 @@ async function runDiagnosticCommand(args) {
     }
     const diagnostic = await import(pathToFileURL(diagnosticEntry).href);
     await diagnostic.runTransportPhysicalDiagnosticCli(args.slice(1));
-    return;
-  }
-  if (name !== 'mac-physical') {
-    throw new Error(`Unknown VuvoDesk diagnostic: ${name}. Supported diagnostics: mac-physical, transport-physical.`);
+    return;
+  }
+  if (name === 'linux-desktop') {
+    const diagnostic = await import('../diagnostics/vuvodesk-linux-desktop.mjs');
+    await diagnostic.runLinuxDesktopDiagnosticCli(args.slice(1));
+    return;
+  }
+  if (name !== 'mac-physical') {
+    throw new Error(`Unknown VuvoDesk diagnostic: ${name}. Supported diagnostics: mac-physical, transport-physical, linux-desktop.`);
   }
   if (args.slice(1).some(argument => ['--help', '-h', 'help'].includes(String(argument).toLowerCase()))) {
     printMacPhysicalDiagnosticHelp();

package/client/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@livedesk/client",
-  "version": "0.1.276",
+  "version": "0.1.277",
   "description": "VuvoDesk local remote client",
   "type": "module",
   "bin": {
@@ -42,10 +42,10 @@
     "ws": "^8.18.3"
   },
   "optionalDependencies": {
-    "@livedesk/fast-linux-x64": "0.1.471",
-    "@livedesk/fast-osx-arm64": "0.1.471",
-    "@livedesk/fast-osx-x64": "0.1.471",
-    "@livedesk/fast-win-x64": "0.1.471"
+    "@livedesk/fast-linux-x64": "0.1.472",
+    "@livedesk/fast-osx-arm64": "0.1.472",
+    "@livedesk/fast-osx-x64": "0.1.472",
+    "@livedesk/fast-win-x64": "0.1.472"
   },
   "publishConfig": {
     "access": "public"

package/diagnostics/vuvodesk-linux-desktop.mjs

@@ -0,0 +1,188 @@
+#!/usr/bin/env node
+import { execFile } from 'node:child_process';
+import { open, readlink, stat } from 'node:fs/promises';
+import { basename } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { promisify } from 'node:util';
+
+const exec = promisify(execFile);
+const ENV_KEYS = ['DISPLAY', 'WAYLAND_DISPLAY', 'XDG_SESSION_TYPE', 'XDG_CURRENT_DESKTOP',
+  'XDG_SESSION_DESKTOP', 'XDG_RUNTIME_DIR', 'DBUS_SESSION_BUS_ADDRESS'];
+const PORTAL_LIMIT = 16384;
+
+function sessionEnvironment(env) {
+  return Object.fromEntries(ENV_KEYS.filter(key => typeof env[key] === 'string'
+    && env[key].length <= 4096).map(key => [key, env[key]]));
+}
+
+async function readBoundedText(path, limit = 8192) {
+  const file = await open(path, 'r');
+  try {
+    const data = Buffer.alloc(limit + 1);
+    const { bytesRead } = await file.read(data, 0, data.length, 0);
+    if (bytesRead > limit) throw new Error('linux-desktop-file-limit');
+    return data.toString('utf8', 0, bytesRead);
+  } finally { await file.close(); }
+}
+
+export function classifyLinuxDesktopSession(env = {}) {
+  const explicit = String(env.XDG_SESSION_TYPE || '').trim().toLowerCase();
+  const type = explicit === 'x11' || explicit === 'wayland' ? explicit
+    : env.WAYLAND_DISPLAY ? 'wayland'
+      : env.DISPLAY ? 'x11' : explicit === 'tty' ? 'headless' : 'unknown';
+  const source = explicit === 'x11' || explicit === 'wayland' ? 'xdg-session-type'
+    : env.WAYLAND_DISPLAY ? 'wayland-display'
+      : env.DISPLAY ? 'display-only' : 'no-graphical-evidence';
+  const rawDesktop = String(env.XDG_CURRENT_DESKTOP || env.XDG_SESSION_DESKTOP || '').toLowerCase();
+  const desktop = ['gnome', 'kde', 'lxqt', 'xfce', 'cinnamon', 'sway', 'hyprland']
+    .find(name => rawDesktop.split(/[:;\s]+/).includes(name)) || 'unknown';
+  return { type, source, desktop, xDisplayPresent: Boolean(env.DISPLAY),
+    waylandDisplayPresent: Boolean(env.WAYLAND_DISPLAY) };
+}
+
+function processStartTime(text) {
+  const fields = text.slice(text.lastIndexOf(')') + 2).trim().split(/\s+/);
+  if (!/^\d+$/.test(fields[19] || '')) throw new Error('linux-desktop-invalid-process-stat');
+  return fields[19];
+}
+
+export async function readNativeAgentContext(pid, {
+  uid = process.getuid?.(), readText = readBoundedText, readLink = readlink, statPath = stat
+} = {}) {
+  if (!Number.isSafeInteger(pid) || pid < 2) throw new Error('linux-desktop-invalid-pid');
+  const root = `/proc/${pid}`;
+  const first = processStartTime(await readText(`${root}/stat`, 4096));
+  if ((await statPath(root)).uid !== uid) throw new Error('linux-desktop-requires-same-user-agent');
+  const executable = await readLink(`${root}/exe`);
+  if (basename(executable) !== 'livedesk-client-fast') throw new Error('linux-desktop-requires-native-agent');
+  const raw = await readText(`${root}/environ`, 131072);
+  const all = Object.fromEntries(raw.split('\0').filter(x => x.includes('=')).map(x => {
+    const equals = x.indexOf('=');
+    return [x.slice(0, equals), x.slice(equals + 1)];
+  }));
+  const env = sessionEnvironment(all);
+  const assertCurrent = async () => {
+    if (processStartTime(await readText(`${root}/stat`, 4096)) !== first
+      || await readLink(`${root}/exe`) !== executable) throw new Error('linux-desktop-agent-changed');
+  };
+  await assertCurrent();
+  return { env, binding: { pid, startTime: first }, assertCurrent };
+}
+
+export function parsePortalProperties(text, kind) {
+  if (typeof text !== 'string' || text.length > PORTAL_LIMIT) throw new Error('portal-properties-invalid');
+  const integer = key => {
+    const match = text.match(new RegExp(`['"]${key}['"]\\s*:\\s*<uint32\\s+(\\d+)>`));
+    if (!match) return null;
+    const value = Number(match[1]);
+    return Number.isSafeInteger(value) && value >= 0 && value <= 0xffffffff ? value : null;
+  };
+  const version = integer('version');
+  const sourceTypes = kind === 'ScreenCast' ? integer('AvailableSourceTypes') : null;
+  const deviceTypes = kind === 'RemoteDesktop' ? integer('AvailableDeviceTypes') : null;
+  if (!version || (kind === 'ScreenCast' ? sourceTypes === null : deviceTypes === null)) {
+    throw new Error('portal-properties-invalid');
+  }
+  return { state: 'available', version, sourceTypes, deviceTypes,
+    cursorModes: kind === 'ScreenCast' ? integer('AvailableCursorModes') : null };
+}
+
+function missingPortal(state) {
+  return { state, version: null, sourceTypes: null, deviceTypes: null, cursorModes: null };
+}
+
+async function inspectPortal(kind, env, run) {
+  if (!env.DBUS_SESSION_BUS_ADDRESS || !env.DBUS_SESSION_BUS_ADDRESS.startsWith('unix:')) {
+    return missingPortal('session-bus-unavailable');
+  }
+  try {
+    const result = await run('/usr/bin/gdbus', ['call', '--session', '--dest',
+      'org.freedesktop.portal.Desktop', '--object-path', '/org/freedesktop/portal/desktop',
+      '--method', 'org.freedesktop.DBus.Properties.GetAll', `org.freedesktop.portal.${kind}`], {
+      env: { ...sessionEnvironment(env), PATH: '/usr/bin:/bin', LANG: 'C.UTF-8' },
+      encoding: 'utf8', timeout: 1500, maxBuffer: PORTAL_LIMIT,
+      killSignal: 'SIGKILL', shell: false, windowsHide: true
+    });
+    return parsePortalProperties(result.stdout, kind);
+  } catch (error) {
+    const state = error?.code === 'ENOENT' ? 'probe-tool-unavailable'
+      : error?.killed || error?.code === 'ETIMEDOUT' ? 'timeout'
+        : error?.message === 'portal-properties-invalid' ? 'properties-unavailable'
+          : 'query-failed';
+    return missingPortal(state);
+  }
+}
+
+function distribution(text) {
+  const field = key => {
+    const value = String(text).match(new RegExp(`^${key}=(.*)$`, 'm'))?.[1]?.trim().replace(/^"|"$/g, '');
+    return value && /^[a-zA-Z0-9._ -]{1,80}$/.test(value) ? value : null;
+  };
+  return { id: field('ID'), versionId: field('VERSION_ID') };
+}
+
+export async function inspectLinuxDesktop({ platform = process.platform, env = process.env,
+  readText = readBoundedText, run = exec, assertCurrent = async () => {}, binding = null
+} = {}) {
+  if (platform !== 'linux') return { schemaVersion: 1, state: 'not-linux' };
+  // Snapshot only session fields. Never emit addresses, paths, environment dumps,
+  // portal request/restore tokens or raw command errors.
+  const context = sessionEnvironment(env);
+  const session = classifyLinuxDesktopSession(context);
+  let os = { id: null, versionId: null };
+  try { os = distribution(await readText('/etc/os-release', 8192)); } catch { /* unknown */ }
+  await assertCurrent();
+  const screenCast = await inspectPortal('ScreenCast', context, run);
+  await assertCurrent();
+  const remoteDesktop = await inspectPortal('RemoteDesktop', context, run);
+  await assertCurrent();
+  return {
+    schemaVersion: 1, state: 'inspected', distribution: os, session, binding,
+    portals: { screenCast, remoteDesktop,
+      monitorAdvertised: screenCast.sourceTypes === null ? null : (screenCast.sourceTypes & 1) !== 0,
+      keyboardPointerAdvertised: remoteDesktop.deviceTypes === null ? null : (remoteDesktop.deviceTypes & 3) === 3 },
+    vuvodesk: {
+      requiredBackend: session.type === 'wayland' ? 'wayland-portal' : session.type === 'x11' ? 'x11' : 'unknown',
+      waylandBackendImplemented: false, permissionGranted: null, captureTested: false, inputTested: false,
+      note: session.type === 'wayland'
+        ? 'Wayland capture and input are not implemented yet. Portal availability is not permission or working video.'
+        : 'Read-only environment inspection. Capture, input and performance are not tested.'
+    }
+  };
+}
+
+export function parseLinuxDesktopArgs(args) {
+  let pid = null;
+  let help = false;
+  for (let index = 0; index < args.length; index += 1) {
+    const arg = args[index];
+    if (arg === '--help' || arg === '-h') help = true;
+    else if (arg === '--pid' && pid === null && /^[1-9]\d*$/.test(args[index + 1] || '')) {
+      pid = Number(args[++index]);
+      if (!Number.isSafeInteger(pid) || pid < 2) throw new Error('linux-desktop-invalid-pid');
+    } else throw new Error('linux-desktop-invalid-arguments');
+  }
+  return { pid, help };
+}
+
+export async function runLinuxDesktopDiagnosticCli(args = []) {
+  const { pid, help } = parseLinuxDesktopArgs(args);
+  if (help) {
+    console.log(`VuvoDesk Linux desktop / Wayland preparation diagnostic
+Usage: vuvodesk diagnose linux-desktop [--pid <native-agent-pid>]
+Run from the graphical terminal, or use --pid over SSH for an existing same-user
+livedesk-client-fast process. Reads only session and portal properties as JSON.
+No capture, input, approval prompt, OS setting change, runtime restart or files.
+Portal availability does not establish working Wayland support or permission.`);
+    return;
+  }
+  const context = pid && process.platform === 'linux' ? await readNativeAgentContext(pid) : {};
+  console.log(JSON.stringify(await inspectLinuxDesktop(context), null, 2));
+}
+
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
+  runLinuxDesktopDiagnosticCli(process.argv.slice(2)).catch(() => {
+    console.error('Linux desktop diagnosis failed. Check arguments and the current same-user native Agent PID.');
+    process.exitCode = 1;
+  });
+}

package/electron/entitlements.mac.plist

@@ -1,12 +1,12 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-  <key>com.apple.security.cs.allow-jit</key>
-  <true/>
-  <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
-  <true/>
-  <key>com.apple.security.device.audio-input</key>
-  <true/>
-</dict>
-</plist>
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>com.apple.security.cs.allow-jit</key>
+  <true/>
+  <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+  <true/>
+  <key>com.apple.security.device.audio-input</key>
+  <true/>
+</dict>
+</plist>

package/electron/recurring-update-owner.mjs

@@ -103,12 +103,12 @@ export function createRecurringProductUpdateOwner(options = {}) {
     if (running) return running;
 
     const operation = (async () => {
-      const checked = await manager.check();
+      const checked = await manager.check({ automatic: true });
       if (!stopped
         && ownerGeneration === generation
         && canRun()
         && checked?.downloaded === true) {
-        return manager.install();
+        return manager.install({ automatic: true });
       }
       return checked;
     })();

package/electron/update-manager.mjs

@@ -130,6 +130,8 @@ export function createProductUpdateManager({
   let activeOwner = null;
   let availableDownload = null;
   let installRuntimePrepared = false;
+  let installTargetVersion = '';
+  let automaticInstallFailure = null;
   let installRecoveryPromise = null;
   const checkDeadline = normalizeDeadline(checkDeadlineMs, DEFAULT_CHECK_DEADLINE_MS);
   const downloadStallTimeout = normalizeDeadline(downloadStallTimeoutMs, DEFAULT_DOWNLOAD_STALL_TIMEOUT_MS);
@@ -154,6 +156,27 @@ export function createProductUpdateManager({
     onStatus({ ...status });
   };
   const snapshot = () => ({ ...status, packaged: Boolean(app.isPackaged) });
+  const rememberInstallerFailure = error => {
+    const message = String(error?.message || error);
+    const failure = {
+      state: 'error',
+      error: message,
+      errorCode: platform === 'linux' && /Command pkexec exited with code 127\b/.test(message)
+        ? 'desktop-update-authorization-required'
+        : 'desktop-update-installer-launch-failed'
+    };
+    if (installTargetVersion) {
+      automaticInstallFailure = { version: installTargetVersion, failure };
+      updater.autoInstallOnAppQuit = false;
+    }
+    return failure;
+  };
+  const blockedAutomaticInstall = () => {
+    if (!automaticInstallFailure
+      || automaticInstallFailure.version !== status.availableVersion) return null;
+    publish(automaticInstallFailure.failure);
+    return snapshot();
+  };
   const releaseAvailableDownload = record => {
     const owned = record || availableDownload;
     if (!owned) return;
@@ -417,7 +440,7 @@ export function createProductUpdateManager({
   const connectUpdater = candidate => {
     if (!candidate || connectedUpdaters.has(candidate)) return;
     candidate.autoDownload = false;
-    candidate.autoInstallOnAppQuit = true;
+    candidate.autoInstallOnAppQuit = !automaticInstallFailure;
     if (feed.url) {
       // Enable multipart reads only for the exact supported electron-updater
       // implementation patched with VuvoDesk's 48-range/32 MiB batch owner.
@@ -521,11 +544,7 @@ export function createProductUpdateManager({
     const owner = activeOwner?.acceptsEvents === true ? activeOwner : null;
     if (!owner) {
       if (!installRuntimePrepared) return;
-      publish({
-        state: 'error',
-        error: String(error?.message || error),
-        errorCode: 'desktop-update-installer-launch-failed'
-      });
+      publish(rememberInstallerFailure(error));
       void recoverRuntime();
       return;
     }
@@ -634,6 +653,7 @@ export function createProductUpdateManager({
           });
         }
         if (owner.outcome === 'available') {
+          updater.autoInstallOnAppQuit = automaticInstallFailure?.version !== owner.expectedVersion;
           availableDownload = {
             generation: owner.generation,
             version: String(owner.expectedVersion || result?.updateInfo?.version || status.availableVersion || ''),
@@ -791,10 +811,17 @@ export function createProductUpdateManager({
     }
   };
 
-  const checkAndDownload = async () => {
+  const checkAndDownload = async ({ automatic = false } = {}) => {
     if (cyclePromise) return cyclePromise;
     const operation = (async () => {
-      const checked = await checkForUpdates();
+      const checked = await checkForUpdates();
+      // Continue discovering newer versions, but a failed installer must not
+      // repeatedly stop a healthy Client or ask for authorization on each poll.
+      if (automatic && !checked.reopenRequired
+        && (checked.state === 'available' || checked.state === 'downloaded')) {
+        const blocked = blockedAutomaticInstall();
+        if (blocked) return blocked;
+      }
       if (checked.state === 'available') return downloadUpdate();
       return checked;
     })();
@@ -810,15 +837,15 @@ export function createProductUpdateManager({
     getStatus() {
       return snapshot();
     },
-    async check() {
-      return checkAndDownload();
+    async check(options) {
+      return checkAndDownload(options);
     },
     async checkAtStartup() {
       if (startupPromise) return startupPromise;
       const operation = (async () => {
         if (!app.isPackaged || !feed.url) return checkForUpdates();
         publish({ startupCheck: 'checking' });
-        const background = checkAndDownload().finally(() => {
+        const background = checkAndDownload({ automatic: true }).finally(() => {
           publish({ startupCheck: 'complete' });
         });
         let timeoutId;
@@ -841,7 +868,7 @@ export function createProductUpdateManager({
         if (startupPromise === operation) startupPromise = null;
       }
     },
-    async install() {
+    async install({ automatic = false } = {}) {
       if (!app.isPackaged) return { ...snapshot(), state: 'development', error: 'desktop-updates-require-packaged-app' };
       if (!feed.url) return unavailableStatus();
       if (status.reopenRequired) return snapshot();
@@ -850,6 +877,10 @@ export function createProductUpdateManager({
         return snapshot();
       }
       if (installPromise) return installPromise;
+      if (automatic) {
+        const blocked = blockedAutomaticInstall();
+        if (blocked) return blocked;
+      }
       installOperationPending = true;
       const operation = (async () => {
         try {
@@ -867,9 +898,20 @@ export function createProductUpdateManager({
           if (!status.downloaded) {
             const downloadResult = availableDownload
               ? await downloadUpdate()
-              : await checkAndDownload();
-            if (!downloadResult.downloaded) return downloadResult;
-          }
+              : await checkAndDownload({ automatic });
+            if (!downloadResult.downloaded) return downloadResult;
+          }
+          if (automatic) {
+            const blocked = blockedAutomaticInstall();
+            if (blocked) return blocked;
+          }
+          installTargetVersion = status.downloadedVersion;
+          // Only an explicit Install action retries this failed version. A
+          // manual Check/download alone never grants another automatic drain.
+          if (!automatic) {
+            automaticInstallFailure = null;
+            updater.autoInstallOnAppQuit = true;
+          }
           // The updater may launch its installer synchronously from
           // quitAndInstall. Prove the exact runtime descendant tree is already
           // zero before allowing that replacement process to exist.
@@ -885,6 +927,7 @@ export function createProductUpdateManager({
           if (installRecoveryPromise) await installRecoveryPromise;
           return snapshot();
         } catch (error) {
+          const failure = rememberInstallerFailure(error);
           await recoverPreparedRuntime(error);
           if (!status.reopenRequired) {
             const message = String(error?.message || error);
@@ -894,7 +937,7 @@ export function createProductUpdateManager({
               error: message,
               errorCode: preinstallRecoveryFailed
                 ? 'desktop-update-runtime-recovery-failed'
-                : 'desktop-update-installer-launch-failed',
+                : failure.errorCode,
               reopenRequired: preinstallRecoveryFailed
             });
           }

package/hub/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@livedesk/hub",
-  "version": "0.1.76",
+  "version": "0.1.77",
   "description": "VuvoDesk local Hub API and browser frame bridge",
   "type": "module",
   "main": "src/server.js",

package/hub/src/plan-device-access.test.mjs

@@ -15,15 +15,15 @@ const clients = [6, 3, 1, 5, 2, 4].map(slotNumber => ({
 }));
 
 test('Hub and browser choose the same stable Free, Plus, Pro, and Team device owners', () => {
-  for (const limit of [5, 20, 50, Number.POSITIVE_INFINITY]) {
+  for (const limit of [3, 20, 50, Number.POSITIVE_INFINITY]) {
     assert.deepEqual(
       stableHubPlanAllowedDeviceIds(clients, limit),
       stableBrowserPlanAllowedDeviceIds(clients, limit)
     );
   }
   assert.deepEqual(
-    stableHubPlanAllowedDeviceIds(clients, 5),
-    ['client-1', 'client-2', 'client-3', 'client-4', 'client-5']
+    stableHubPlanAllowedDeviceIds(clients, 3),
+    ['client-1', 'client-2', 'client-3']
   );
 });
 
@@ -66,10 +66,10 @@ test('finite plans reject the exact excess Client instead of counting request wi
 
 test('a Team to Free downgrade changes one bounded snapshot and preserves stable owners', () => {
   const unlimited = createPlanDeviceAccessSnapshot(clients, Number.POSITIVE_INFINITY, 1);
-  const downgraded = createPlanDeviceAccessSnapshot(clients, 5, 2);
+  const downgraded = createPlanDeviceAccessSnapshot(clients, 3, 2);
   assert.equal(planDeviceAccessSnapshotChanged(unlimited, downgraded), true);
-  assert.deepEqual(downgraded.allowedDeviceIds, ['client-1', 'client-2', 'client-3', 'client-4', 'client-5']);
-  assert.deepEqual(downgraded.blockedDeviceIds, ['client-6']);
+  assert.deepEqual(downgraded.allowedDeviceIds, ['client-1', 'client-2', 'client-3']);
+  assert.deepEqual(downgraded.blockedDeviceIds, ['client-6', 'client-5', 'client-4']);
   assert.equal(planDeviceAccessSnapshotChanged(downgraded, {
     ...downgraded,
     generation: 3,
@@ -90,12 +90,12 @@ test('the exact Hub manager stays controllable without consuming a Client slot',
   const snapshot = createPlanDeviceAccessSnapshot([
     ...clients,
     { deviceId: 'hub-manager', slotNumber: 0, connected: true }
-  ], 5, 8, { exemptDeviceIds: ['hub-manager'] });
+  ], 3, 8, { exemptDeviceIds: ['hub-manager'] });
 
   assert.deepEqual(snapshot.connectedDeviceIds, clients.map(client => client.deviceId));
   assert.deepEqual(snapshot.exemptConnectedDeviceIds, ['hub-manager']);
   assert.equal(snapshot.allowedDeviceIdSet.has('hub-manager'), true);
-  assert.deepEqual(snapshot.blockedDeviceIds, ['client-6']);
+  assert.deepEqual(snapshot.blockedDeviceIds, ['client-6', 'client-5', 'client-4']);
   assert.deepEqual(partitionPlanDeviceIds(['hub-manager', 'client-6'], snapshot), {
     allowedDeviceIds: ['hub-manager'],
     blockedDeviceIds: ['client-6']

package/hub/src/remote-hub.js

@@ -11621,9 +11621,18 @@ export function createRemoteHub(options = {}) {
     }
 
     function startLiveStream(deviceId, options = {}) {
-        const device = devices.get(String(deviceId || ''));
-        const denied = policyError(device);
-        if (denied) return { ok: false, error: denied };
+        const device = devices.get(String(deviceId || ''));
+        const denied = policyError(device);
+        if (denied) return { ok: false, error: denied };
+        const expectedSessionId = safeString(options.expectedSessionId, 160);
+        if (expectedSessionId && device?.sessionId && expectedSessionId !== device.sessionId) {
+            // A delayed Wall restoration cannot create capture on a replacement
+            // Client session. This is a retired intent, not a successful start.
+            return {
+                ok: true, skipped: true, staleOwner: true,
+                retainedNewerOwner: true, reason: 'wall-restore-session-replaced'
+            };
+        }
         if (device?.synthetic !== true
             && device?.connected
             && !isDeviceConnectionFresh(device)) {

package/hub/src/server.js

@@ -177,7 +177,7 @@ const atlasPool = new Mode4AtlasPool({
 });
 const inputClients = new Set();
 const audioClients = new Set();
-const FREE_DEVICE_LIMIT = 5;
+const FREE_DEVICE_LIMIT = 3;
 const PLUS_DEVICE_LIMIT = 20;
 const PRO_DEVICE_LIMIT = 50;
 const LICENSE_VERIFY_MAX_AGE_MS = 6 * 60 * 60 * 1000;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "livedesk",
-  "version": "0.1.697",
-  "livedeskClientVersion": "0.1.276",
+  "version": "0.1.701",
+  "livedeskClientVersion": "0.1.277",
   "buildFlavor": "production",
   "description": "VuvoDesk Hub and client launcher",
   "type": "module",
@@ -23,7 +23,7 @@
     "README.md"
   ],
   "scripts": {
-    "check": "node --check bin/livedesk.js && node --check bootstrap/npm-update-cache.mjs && node --check bootstrap/update-host-client.mjs && node --check bootstrap/update-host.mjs && node --check diagnostics/vuvodesk-mode3-capture-smoke.mjs && node --check diagnostics/vuvodesk-mac-physical-gate-core.mjs && node --check diagnostics/vuvodesk-mac-physical-isolation.mjs && node --check diagnostics/vuvodesk-transport-physical-core.mjs && node --check diagnostics/vuvodesk-transport-physical.mjs && node --check scripts/sync-web-dist.js",
+    "check": "node --check bin/livedesk.js && node --check bootstrap/npm-update-cache.mjs && node --check bootstrap/update-host-client.mjs && node --check bootstrap/update-host.mjs && node --check diagnostics/vuvodesk-mode3-capture-smoke.mjs && node --check diagnostics/vuvodesk-mac-physical-gate-core.mjs && node --check diagnostics/vuvodesk-mac-physical-isolation.mjs && node --check diagnostics/vuvodesk-transport-physical-core.mjs && node --check diagnostics/vuvodesk-transport-physical.mjs && node --check diagnostics/vuvodesk-linux-desktop.mjs && node --check scripts/sync-web-dist.js",
     "build": "node scripts/sync-web-dist.js",
     "prepack": "npm --prefix ../.. run build -w @livedesk/web && node scripts/sync-web-dist.js",
     "pack:dry": "npm pack --dry-run",
@@ -54,10 +54,10 @@
     "ws": "^8.18.3"
   },
   "optionalDependencies": {
-    "@livedesk/fast-linux-x64": "0.1.471",
-    "@livedesk/fast-osx-arm64": "0.1.471",
-    "@livedesk/fast-osx-x64": "0.1.471",
-    "@livedesk/fast-win-x64": "0.1.471"
+    "@livedesk/fast-linux-x64": "0.1.472",
+    "@livedesk/fast-osx-arm64": "0.1.472",
+    "@livedesk/fast-osx-x64": "0.1.472",
+    "@livedesk/fast-win-x64": "0.1.472"
   },
   "publishConfig": {
     "access": "public"

package/web/dist/app.html

@@ -52,7 +52,7 @@
       .vuvodesk-static-boot [hidden] { display: none; }
       @keyframes vuvodesk-static-boot-spin { to { transform: rotate(360deg); } }
     </style>
-    <script type="module" crossorigin src="/assets/app-DcrmhmnT.js" data-vuvodesk-entry></script>
+    <script type="module" crossorigin src="/assets/app-CUM2wTSb.js" data-vuvodesk-entry></script>
     <link rel="modulepreload" crossorigin href="/assets/public-site-routing-pddZbLCj.js">
     <link rel="modulepreload" crossorigin href="/assets/pwa-bootstrap-ljOQTt2e.js">
   </head>

package/web/dist/app.webmanifest

@@ -4,7 +4,7 @@
   "short_name": "VuvoDesk",
   "description": "Monitor and control your VuvoDesk computers from your phone.",
   "lang": "en",
-  "start_url": "/app?pwa=0.1.697",
+  "start_url": "/app?pwa=0.1.701",
   "scope": "/",
   "display": "standalone",
   "orientation": "any",