rnxsim 0.1.513 → 0.1.515

package/dist-lib/cloud-contract.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.513 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.515 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;
@@ -22,13 +22,25 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/cloud-contract.ts
 var cloud_contract_exports = {};
 __export(cloud_contract_exports, {
+  RNX_CLOUD_ALL_COMMAND_SCOPES: () => RNX_CLOUD_ALL_COMMAND_SCOPES,
+  RNX_CLOUD_COMMAND_SCOPES: () => RNX_CLOUD_COMMAND_SCOPES,
   RNX_CLOUD_COMMAND_TYPES: () => RNX_CLOUD_COMMAND_TYPES,
   RNX_CLOUD_DESIGN_MAX_STORAGE_BYTES: () => RNX_CLOUD_DESIGN_MAX_STORAGE_BYTES,
   RNX_CLOUD_DESIGN_MAX_STORAGE_ENTRIES: () => RNX_CLOUD_DESIGN_MAX_STORAGE_ENTRIES,
+  RNX_CLOUD_LABELS_MAX_COUNT: () => RNX_CLOUD_LABELS_MAX_COUNT,
+  RNX_CLOUD_LABEL_MAX_LENGTH: () => RNX_CLOUD_LABEL_MAX_LENGTH,
   RNX_CLOUD_MAX_ARTIFACT_BYTES: () => RNX_CLOUD_MAX_ARTIFACT_BYTES,
   RNX_CLOUD_TEST_FILES_MAX_BYTES: () => RNX_CLOUD_TEST_FILES_MAX_BYTES,
   RNX_CLOUD_TEST_FILES_MAX_COUNT: () => RNX_CLOUD_TEST_FILES_MAX_COUNT,
-  isRnxCloudCommandType: () => isRnxCloudCommandType
+  RNX_CLOUD_TOKEN_SCOPES: () => RNX_CLOUD_TOKEN_SCOPES,
+  isRnxCloudCommandType: () => isRnxCloudCommandType,
+  isRnxCloudSimStatus: () => isRnxCloudSimStatus,
+  isValidRnxCloudLabel: () => isValidRnxCloudLabel,
+  matchesRnxCloudLabels: () => matchesRnxCloudLabels,
+  parseRnxCloudLabels: () => parseRnxCloudLabels,
+  readRnxCloudLabels: () => readRnxCloudLabels,
+  rnxCloudCommandScope: () => rnxCloudCommandScope,
+  rnxCloudScopesAllowCommand: () => rnxCloudScopesAllowCommand
 });
 module.exports = __toCommonJS(cloud_contract_exports);
 var RNX_CLOUD_MAX_ARTIFACT_BYTES = 20 * 1024 * 1024;
@@ -36,36 +48,119 @@ var RNX_CLOUD_DESIGN_MAX_STORAGE_ENTRIES = 256;
 var RNX_CLOUD_DESIGN_MAX_STORAGE_BYTES = 1024 * 1024;
 var RNX_CLOUD_TEST_FILES_MAX_COUNT = 256;
 var RNX_CLOUD_TEST_FILES_MAX_BYTES = 5e5;
-var RNX_CLOUD_COMMAND_TYPES = Object.freeze([
-  "state",
-  "query",
-  "resolve",
-  "perform",
-  "waitFor",
-  "reset",
-  "screenshot",
-  "capture",
-  "captureRegions",
-  "settle",
-  "setAppearance",
-  "openUrl",
-  "tree",
-  "tap",
-  "longPress",
-  "memory",
-  "diagnostics"
-]);
+var RNX_CLOUD_COMMAND_SCOPES = {
+  state: "read",
+  tree: "read",
+  query: "read",
+  resolve: "read",
+  screenshot: "read",
+  capture: "read",
+  captureRegions: "read",
+  memory: "read",
+  diagnostics: "read",
+  storageSnapshot: "read",
+  perform: "drive",
+  waitFor: "drive",
+  tap: "drive",
+  longPress: "drive",
+  settle: "drive",
+  openUrl: "drive",
+  setAppearance: "drive",
+  keyboard: "drive",
+  focus: "drive",
+  flowStatus: "drive",
+  reset: "reset",
+  camera: "media",
+  // string evaluation and arbitrary bridge calls are maestro's boundary: the
+  // customer sdk never carries this scope, and the service grants it only to
+  // the account api key caller. close rides along, since ending the page ends
+  // the sim and belongs to the sim's owner rather than any driver.
+  evaluate: "debug",
+  call: "debug",
+  close: "debug"
+};
+function scopeTableKeys() {
+  return Object.keys(RNX_CLOUD_COMMAND_SCOPES).filter(
+    (key) => Object.prototype.hasOwnProperty.call(RNX_CLOUD_COMMAND_SCOPES, key)
+  );
+}
+var RNX_CLOUD_COMMAND_TYPES = Object.freeze(scopeTableKeys());
 var RNX_CLOUD_COMMAND_TYPE_SET = new Set(RNX_CLOUD_COMMAND_TYPES);
 function isRnxCloudCommandType(value) {
   return RNX_CLOUD_COMMAND_TYPE_SET.has(value);
 }
+function rnxCloudCommandScope(type) {
+  return RNX_CLOUD_COMMAND_SCOPES[type];
+}
+var RNX_CLOUD_TOKEN_SCOPES = Object.freeze([
+  "read",
+  "drive",
+  "reset",
+  "media"
+]);
+var RNX_CLOUD_ALL_COMMAND_SCOPES = Object.freeze(["read", "drive", "reset", "media", "debug"]);
+function rnxCloudScopesAllowCommand(scopes, type) {
+  return scopes.includes(RNX_CLOUD_COMMAND_SCOPES[type]);
+}
+var RNX_CLOUD_LABELS_MAX_COUNT = 16;
+var RNX_CLOUD_LABEL_MAX_LENGTH = 63;
+var RNX_CLOUD_LABEL_CONTROL = /[\u0000-\u001f\u007f]/;
+function isValidRnxCloudLabel(key, value) {
+  return key.length > 0 && key.length <= RNX_CLOUD_LABEL_MAX_LENGTH && value.length <= RNX_CLOUD_LABEL_MAX_LENGTH && !key.includes(",") && !key.includes("=") && !value.includes(",") && !RNX_CLOUD_LABEL_CONTROL.test(key) && !RNX_CLOUD_LABEL_CONTROL.test(value);
+}
+function parseRnxCloudLabels(value) {
+  if (value === "") return {};
+  const entries = value.split(",");
+  if (entries.length > RNX_CLOUD_LABELS_MAX_COUNT) return null;
+  const labels = {};
+  for (const entry of entries) {
+    const separator = entry.indexOf("=");
+    if (separator < 1) return null;
+    const key = entry.slice(0, separator).trim();
+    const label = entry.slice(separator + 1).trim();
+    if (!isValidRnxCloudLabel(key, label)) return null;
+    if (Object.hasOwn(labels, key)) return null;
+    labels[key] = label;
+  }
+  return labels;
+}
+function readRnxCloudLabels(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return null;
+  const entries = Object.entries(value);
+  if (entries.length > RNX_CLOUD_LABELS_MAX_COUNT) return null;
+  const labels = {};
+  for (const [key, label] of entries) {
+    if (typeof label !== "string") return null;
+    if (!isValidRnxCloudLabel(key, label)) return null;
+    labels[key] = label;
+  }
+  return labels;
+}
+function matchesRnxCloudLabels(labels, selector) {
+  return Object.entries(selector).every(([key, value]) => labels[key] === value);
+}
+function isRnxCloudSimStatus(value) {
+  return value === "creating" || value === "open" || value === "hibernated" || value === "deleting" || value === "deleted";
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  RNX_CLOUD_ALL_COMMAND_SCOPES,
+  RNX_CLOUD_COMMAND_SCOPES,
   RNX_CLOUD_COMMAND_TYPES,
   RNX_CLOUD_DESIGN_MAX_STORAGE_BYTES,
   RNX_CLOUD_DESIGN_MAX_STORAGE_ENTRIES,
+  RNX_CLOUD_LABELS_MAX_COUNT,
+  RNX_CLOUD_LABEL_MAX_LENGTH,
   RNX_CLOUD_MAX_ARTIFACT_BYTES,
   RNX_CLOUD_TEST_FILES_MAX_BYTES,
   RNX_CLOUD_TEST_FILES_MAX_COUNT,
-  isRnxCloudCommandType
+  RNX_CLOUD_TOKEN_SCOPES,
+  isRnxCloudCommandType,
+  isRnxCloudSimStatus,
+  isValidRnxCloudLabel,
+  matchesRnxCloudLabels,
+  parseRnxCloudLabels,
+  readRnxCloudLabels,
+  rnxCloudCommandScope,
+  rnxCloudScopesAllowCommand
 });

package/dist-lib/cloud-contract.mjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.513 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.515 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 
 // src/cloud-contract.ts
 var RNX_CLOUD_MAX_ARTIFACT_BYTES = 20 * 1024 * 1024;
@@ -6,35 +6,118 @@ var RNX_CLOUD_DESIGN_MAX_STORAGE_ENTRIES = 256;
 var RNX_CLOUD_DESIGN_MAX_STORAGE_BYTES = 1024 * 1024;
 var RNX_CLOUD_TEST_FILES_MAX_COUNT = 256;
 var RNX_CLOUD_TEST_FILES_MAX_BYTES = 5e5;
-var RNX_CLOUD_COMMAND_TYPES = Object.freeze([
-  "state",
-  "query",
-  "resolve",
-  "perform",
-  "waitFor",
-  "reset",
-  "screenshot",
-  "capture",
-  "captureRegions",
-  "settle",
-  "setAppearance",
-  "openUrl",
-  "tree",
-  "tap",
-  "longPress",
-  "memory",
-  "diagnostics"
-]);
+var RNX_CLOUD_COMMAND_SCOPES = {
+  state: "read",
+  tree: "read",
+  query: "read",
+  resolve: "read",
+  screenshot: "read",
+  capture: "read",
+  captureRegions: "read",
+  memory: "read",
+  diagnostics: "read",
+  storageSnapshot: "read",
+  perform: "drive",
+  waitFor: "drive",
+  tap: "drive",
+  longPress: "drive",
+  settle: "drive",
+  openUrl: "drive",
+  setAppearance: "drive",
+  keyboard: "drive",
+  focus: "drive",
+  flowStatus: "drive",
+  reset: "reset",
+  camera: "media",
+  // string evaluation and arbitrary bridge calls are maestro's boundary: the
+  // customer sdk never carries this scope, and the service grants it only to
+  // the account api key caller. close rides along, since ending the page ends
+  // the sim and belongs to the sim's owner rather than any driver.
+  evaluate: "debug",
+  call: "debug",
+  close: "debug"
+};
+function scopeTableKeys() {
+  return Object.keys(RNX_CLOUD_COMMAND_SCOPES).filter(
+    (key) => Object.prototype.hasOwnProperty.call(RNX_CLOUD_COMMAND_SCOPES, key)
+  );
+}
+var RNX_CLOUD_COMMAND_TYPES = Object.freeze(scopeTableKeys());
 var RNX_CLOUD_COMMAND_TYPE_SET = new Set(RNX_CLOUD_COMMAND_TYPES);
 function isRnxCloudCommandType(value) {
   return RNX_CLOUD_COMMAND_TYPE_SET.has(value);
 }
+function rnxCloudCommandScope(type) {
+  return RNX_CLOUD_COMMAND_SCOPES[type];
+}
+var RNX_CLOUD_TOKEN_SCOPES = Object.freeze([
+  "read",
+  "drive",
+  "reset",
+  "media"
+]);
+var RNX_CLOUD_ALL_COMMAND_SCOPES = Object.freeze(["read", "drive", "reset", "media", "debug"]);
+function rnxCloudScopesAllowCommand(scopes, type) {
+  return scopes.includes(RNX_CLOUD_COMMAND_SCOPES[type]);
+}
+var RNX_CLOUD_LABELS_MAX_COUNT = 16;
+var RNX_CLOUD_LABEL_MAX_LENGTH = 63;
+var RNX_CLOUD_LABEL_CONTROL = /[\u0000-\u001f\u007f]/;
+function isValidRnxCloudLabel(key, value) {
+  return key.length > 0 && key.length <= RNX_CLOUD_LABEL_MAX_LENGTH && value.length <= RNX_CLOUD_LABEL_MAX_LENGTH && !key.includes(",") && !key.includes("=") && !value.includes(",") && !RNX_CLOUD_LABEL_CONTROL.test(key) && !RNX_CLOUD_LABEL_CONTROL.test(value);
+}
+function parseRnxCloudLabels(value) {
+  if (value === "") return {};
+  const entries = value.split(",");
+  if (entries.length > RNX_CLOUD_LABELS_MAX_COUNT) return null;
+  const labels = {};
+  for (const entry of entries) {
+    const separator = entry.indexOf("=");
+    if (separator < 1) return null;
+    const key = entry.slice(0, separator).trim();
+    const label = entry.slice(separator + 1).trim();
+    if (!isValidRnxCloudLabel(key, label)) return null;
+    if (Object.hasOwn(labels, key)) return null;
+    labels[key] = label;
+  }
+  return labels;
+}
+function readRnxCloudLabels(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return null;
+  const entries = Object.entries(value);
+  if (entries.length > RNX_CLOUD_LABELS_MAX_COUNT) return null;
+  const labels = {};
+  for (const [key, label] of entries) {
+    if (typeof label !== "string") return null;
+    if (!isValidRnxCloudLabel(key, label)) return null;
+    labels[key] = label;
+  }
+  return labels;
+}
+function matchesRnxCloudLabels(labels, selector) {
+  return Object.entries(selector).every(([key, value]) => labels[key] === value);
+}
+function isRnxCloudSimStatus(value) {
+  return value === "creating" || value === "open" || value === "hibernated" || value === "deleting" || value === "deleted";
+}
 export {
+  RNX_CLOUD_ALL_COMMAND_SCOPES,
+  RNX_CLOUD_COMMAND_SCOPES,
   RNX_CLOUD_COMMAND_TYPES,
   RNX_CLOUD_DESIGN_MAX_STORAGE_BYTES,
   RNX_CLOUD_DESIGN_MAX_STORAGE_ENTRIES,
+  RNX_CLOUD_LABELS_MAX_COUNT,
+  RNX_CLOUD_LABEL_MAX_LENGTH,
   RNX_CLOUD_MAX_ARTIFACT_BYTES,
   RNX_CLOUD_TEST_FILES_MAX_BYTES,
   RNX_CLOUD_TEST_FILES_MAX_COUNT,
-  isRnxCloudCommandType
+  RNX_CLOUD_TOKEN_SCOPES,
+  isRnxCloudCommandType,
+  isRnxCloudSimStatus,
+  isValidRnxCloudLabel,
+  matchesRnxCloudLabels,
+  parseRnxCloudLabels,
+  readRnxCloudLabels,
+  rnxCloudCommandScope,
+  rnxCloudScopesAllowCommand
 };

package/dist-lib/cloud.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.513 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.515 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;
@@ -99,29 +99,60 @@ function isRnxScreenCapture(value) {
 // src/cloud-contract.ts
 var RNX_CLOUD_MAX_ARTIFACT_BYTES = 20 * 1024 * 1024;
 var RNX_CLOUD_DESIGN_MAX_STORAGE_BYTES = 1024 * 1024;
-var RNX_CLOUD_COMMAND_TYPES = Object.freeze([
-  "state",
-  "query",
-  "resolve",
-  "perform",
-  "waitFor",
-  "reset",
-  "screenshot",
-  "capture",
-  "captureRegions",
-  "settle",
-  "setAppearance",
-  "openUrl",
-  "tree",
-  "tap",
-  "longPress",
-  "memory",
-  "diagnostics"
-]);
+var RNX_CLOUD_COMMAND_SCOPES = {
+  state: "read",
+  tree: "read",
+  query: "read",
+  resolve: "read",
+  screenshot: "read",
+  capture: "read",
+  captureRegions: "read",
+  memory: "read",
+  diagnostics: "read",
+  storageSnapshot: "read",
+  perform: "drive",
+  waitFor: "drive",
+  tap: "drive",
+  longPress: "drive",
+  settle: "drive",
+  openUrl: "drive",
+  setAppearance: "drive",
+  keyboard: "drive",
+  focus: "drive",
+  flowStatus: "drive",
+  reset: "reset",
+  camera: "media",
+  // string evaluation and arbitrary bridge calls are maestro's boundary: the
+  // customer sdk never carries this scope, and the service grants it only to
+  // the account api key caller. close rides along, since ending the page ends
+  // the sim and belongs to the sim's owner rather than any driver.
+  evaluate: "debug",
+  call: "debug",
+  close: "debug"
+};
+function scopeTableKeys() {
+  return Object.keys(RNX_CLOUD_COMMAND_SCOPES).filter(
+    (key) => Object.prototype.hasOwnProperty.call(RNX_CLOUD_COMMAND_SCOPES, key)
+  );
+}
+var RNX_CLOUD_COMMAND_TYPES = Object.freeze(scopeTableKeys());
 var RNX_CLOUD_COMMAND_TYPE_SET = new Set(RNX_CLOUD_COMMAND_TYPES);
 function isRnxCloudCommandType(value) {
   return RNX_CLOUD_COMMAND_TYPE_SET.has(value);
 }
+function rnxCloudCommandScope(type) {
+  return RNX_CLOUD_COMMAND_SCOPES[type];
+}
+var RNX_CLOUD_TOKEN_SCOPES = Object.freeze([
+  "read",
+  "drive",
+  "reset",
+  "media"
+]);
+var RNX_CLOUD_ALL_COMMAND_SCOPES = Object.freeze(["read", "drive", "reset", "media", "debug"]);
+function rnxCloudScopesAllowCommand(scopes, type) {
+  return scopes.includes(RNX_CLOUD_COMMAND_SCOPES[type]);
+}
 
 // src/public-brand.ts
 var name = "rnx";
@@ -136,6 +167,8 @@ var rnxPublicBrand = Object.freeze({
 // src/cloud.ts
 var DEFAULT_DEVICE = "iphone-16";
 var DEFAULT_WAIT_READY_MS = 2e4;
+var CLOUD_MAX_RETRIES = 2;
+var CLOUD_NEVER_RETRY_CODES = /* @__PURE__ */ new Set(["concurrency_limit", "early_access"]);
 function isRecord(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
@@ -173,6 +206,62 @@ function responseError(status, text) {
     `RNX Cloud request failed (${status})${text.trim() ? `: ${text.trim()}` : ""}`
   );
 }
+function readCloudErrorCode(text) {
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+    return null;
+  }
+  if (!isRecord(parsed)) return null;
+  if (typeof parsed.error === "string") return parsed.error;
+  if (isRecord(parsed.error) && typeof parsed.error.code === "string") {
+    return parsed.error.code;
+  }
+  return null;
+}
+function readRetryAfterMs(response, text) {
+  const header = response.headers.get("retry-after");
+  if (header !== null) {
+    const seconds = Number(header.trim());
+    if (Number.isFinite(seconds) && seconds >= 0) return seconds * 1e3;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+    return null;
+  }
+  if (isRecord(parsed) && typeof parsed.retryAfterMs === "number" && Number.isFinite(parsed.retryAfterMs) && parsed.retryAfterMs >= 0) {
+    return parsed.retryAfterMs;
+  }
+  return null;
+}
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function fetchWithCloudRetry(url, init, options) {
+  let attempt = 0;
+  for (; ; ) {
+    const response = await fetch(
+      url,
+      options?.timeoutMs === void 0 ? init : { ...init, signal: AbortSignal.timeout(options.timeoutMs) }
+    );
+    if (response.ok) return response;
+    const retryableStatus = response.status === 429 || response.status >= 500;
+    if (!retryableStatus || attempt >= CLOUD_MAX_RETRIES) return response;
+    const text = await response.text();
+    const code = readCloudErrorCode(text);
+    const retryable = response.status >= 500 ? !(code !== null && CLOUD_NEVER_RETRY_CODES.has(code)) : code === "rate_limited";
+    if (!retryable) {
+      return new Response(text, { status: response.status, headers: response.headers });
+    }
+    if (response.status === 429) {
+      await sleep(readRetryAfterMs(response, text) ?? 1e3);
+    }
+    attempt += 1;
+  }
+}
 function copyArrayBuffer(bytes) {
   const copy = new ArrayBuffer(bytes.byteLength);
   new Uint8Array(copy).set(bytes);
@@ -255,6 +344,11 @@ function cloudCommand(command) {
   if (!isRnxCloudCommandType(command.type)) {
     throw new Error(`RNX Cloud does not support bridge command type ${command.type}`);
   }
+  if (!rnxCloudScopesAllowCommand(RNX_CLOUD_TOKEN_SCOPES, command.type)) {
+    throw new Error(
+      `RNX Cloud command ${command.type} requires the ${rnxCloudCommandScope(command.type)} scope`
+    );
+  }
   return { ...clean, type: command.type };
 }
 var RemoteSimulator = class {
@@ -321,7 +415,7 @@ var RemoteSimulator = class {
     };
     let response;
     try {
-      response = await fetch(
+      response = await fetchWithCloudRetry(
         `${this.session.origin}/v1/sims/${encodeURIComponent(this.session.simId)}/commands`,
         {
           method: "POST",
@@ -329,9 +423,9 @@ var RemoteSimulator = class {
             authorization: `Bearer ${this.session.simulatorToken}`,
             "content-type": "application/json"
           },
-          body: JSON.stringify(body),
-          ...options?.timeoutMs ? { signal: AbortSignal.timeout(options.timeoutMs) } : {}
-        }
+          body: JSON.stringify(body)
+        },
+        options?.timeoutMs === void 0 ? void 0 : { timeoutMs: options.timeoutMs }
       );
     } catch (error) {
       throw new Error(
@@ -356,7 +450,7 @@ var RemoteSimulator = class {
     return parsed.result;
   }
   async confirm() {
-    const response = await fetch(
+    const response = await fetchWithCloudRetry(
       `${this.session.origin}/v1/sims/${encodeURIComponent(this.session.simId)}/claim`,
       {
         method: "POST",
@@ -383,7 +477,7 @@ var RemoteSimulator = class {
     return claim;
   }
   async close() {
-    const response = await fetch(
+    const response = await fetchWithCloudRetry(
       `${this.session.origin}/v1/boxes/${encodeURIComponent(this.session.boxId)}`,
       {
         method: "DELETE",
@@ -414,7 +508,7 @@ async function createRemoteSimulator(input) {
   const device = input.device?.trim() || DEFAULT_DEVICE;
   let response;
   try {
-    response = await fetch(`${origin}/v1/boxes`, {
+    response = await fetchWithCloudRetry(`${origin}/v1/boxes`, {
       method: "POST",
       headers: {
         authorization: input.authorization,