rnxsim 0.1.514 → 0.1.515

package/cli/cloud-client.ts

@@ -28,6 +28,9 @@ import { isLoopbackHost } from '../src/backend-origin.ts'
 import {
   isRnxCloudCommandType,
   RNX_CLOUD_MAX_ARTIFACT_BYTES,
+  RNX_CLOUD_TOKEN_SCOPES,
+  rnxCloudCommandScope,
+  rnxCloudScopesAllowCommand,
   type RnxCloudBoxCreateReceipt,
   type RnxCloudCreateReceipt,
 } from '../src/cloud-contract.ts'
@@ -981,10 +984,17 @@ function cloudCommand(command: {
   for (const [key, value] of Object.entries(command)) {
     if (key !== 'id' && key !== 'simId') clean[key] = value
   }
-  if (isRnxCloudCommandType(command.type)) return clean
-  throw new Error(
-    `a remote simulator does not support bridge command type ${command.type}`,
-  )
+  if (!isRnxCloudCommandType(command.type)) {
+    throw new Error(
+      `a remote simulator does not support bridge command type ${command.type}`,
+    )
+  }
+  if (!rnxCloudScopesAllowCommand(RNX_CLOUD_TOKEN_SCOPES, command.type)) {
+    throw new Error(
+      `a remote simulator command ${command.type} requires the ${rnxCloudCommandScope(command.type)} scope`,
+    )
+  }
+  return clean
 }
 
 class CloudBridge implements WsBridge {
@@ -1077,10 +1087,10 @@ class CloudBridge implements WsBridge {
  *
  * the box holds no simulator of its own: the one it shows lives in its Box
  * page, which runs the same shell the local CLI drives over the daemon bridge.
- * so this transport moves the whole bridge vocabulary rather than the nano
- * subset (every verb that works against a local sim works against a box), and
- * the box service is only the relay in the middle. that is also why there is
- * no claim: the box token addresses the box, and the page answers for it.
+ * so this transport moves the whole bridge vocabulary, admitted by caller
+ * scope exactly like the nano plane, and the box service is only the relay in
+ * the middle. that is also why there is no claim: the box token addresses the
+ * box, and the page answers for it.
  */
 class CloudBoxBridge implements WsBridge {
   readonly plane = 'cloud' as const

package/cli/commands/inspect/get-layout.ts

@@ -30,7 +30,8 @@ export async function runGetLayoutSubcommand(opts: {
       if (
         styling &&
         error instanceof Error &&
-        error.message === 'unsupported RNX Cloud command type: evaluate'
+        (error.message === 'unsupported RNX Cloud command type: evaluate' ||
+          error.message.includes('requires the debug scope'))
       ) {
         throw new Error(
           'get layout --styling is unavailable on a remote simulator; rerun without --styling or use a local sim',

package/dist-lib/agent-daemon-client.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.514 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.515 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/agent-events.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.514 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.515 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/agent-identity.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.514 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.515 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/agent-sessions.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.514 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.515 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/attached-projects.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.514 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.515 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/auth/shared-session.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.514 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.515 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/backend-origin.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.514 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.515 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/beta.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.514 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.515 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/beta.mjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.514 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.515 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 
 // src/beta.ts
 var IS_BETA = true;

package/dist-lib/bridge-constants.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.514 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.515 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/bridge-contract-input.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.514 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.515 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;
@@ -24,6 +24,7 @@ var bridge_contract_input_exports = {};
 __export(bridge_contract_input_exports, {
   BridgeInputError: () => BridgeInputError,
   SEMANTIC_WAIT_MAX_TIMEOUT_MS: () => SEMANTIC_WAIT_MAX_TIMEOUT_MS,
+  findUnbalancedTouchDown: () => findUnbalancedTouchDown,
   parsePerformStep: () => parsePerformStep,
   parseResetOptions: () => parseResetOptions,
   parseScreenshotOptions: () => parseScreenshotOptions,
@@ -191,6 +192,45 @@ function parsePerformStep(value, index) {
       return { type, key: stringValue(step.key, `${path}.key`) };
     case "dismissKeyboard":
       return { type };
+    case "setElementValue": {
+      const submit = optionalBoolean(step, "submit", path);
+      return {
+        type,
+        id: stringValue(step.id, `${path}.id`),
+        text: stringValue(step.text, `${path}.text`),
+        ...submit === void 0 ? {} : { submit }
+      };
+    }
+    case "toggleKeyboard":
+      return { type };
+    case "openUrl": {
+      const url = stringValue(step.url, `${path}.url`);
+      if (url.length === 0) validationFailure(`${path}.url`, "must be non-empty");
+      return { type, url };
+    }
+    case "keyDown":
+    case "keyUp":
+      return { type, key: stringValue(step.key, `${path}.key`) };
+    case "setOrientation": {
+      const orientation = stringValue(step.orientation, `${path}.orientation`);
+      if (orientation !== "portrait" && orientation !== "landscape") {
+        validationFailure(`${path}.orientation`, "must be portrait or landscape");
+      }
+      return { type, orientation };
+    }
+    case "deviceInfo":
+      return { type };
+    case "buttonDown":
+    case "buttonUp": {
+      const button = step.button === void 0 ? void 0 : stringValue(step.button, `${path}.button`);
+      return { type, ...button === void 0 ? {} : { button } };
+    }
+    case "incrementElement":
+    case "decrementElement":
+      return { type, id: stringValue(step.id, `${path}.id`) };
+    case "discoverStoreKitConfig":
+    case "clearStoreKitConfig":
+      return { type };
     case "wait":
       return { type, ms: numberValue(step.ms, `${path}.ms`) };
     case "waitFor": {
@@ -214,6 +254,28 @@ function parsePerformStep(value, index) {
       return validationFailure(`${path}.type`, "is not a supported perform step");
   }
 }
+function findUnbalancedTouchDown(steps) {
+  const open = /* @__PURE__ */ new Map();
+  const pointerIdOf = (step) => {
+    if (step.type !== "touchDown" && step.type !== "touchMove" && step.type !== "touchUp" && step.type !== "touchCancel") {
+      return null;
+    }
+    const pointerId = step.pointerId ?? 999;
+    return Number.isSafeInteger(pointerId) ? pointerId : null;
+  };
+  for (const [index, step] of steps.entries()) {
+    if (step.type === "touchDown") {
+      const pointerId = pointerIdOf(step) ?? 999;
+      if (!open.has(pointerId)) open.set(pointerId, index);
+    } else if (step.type === "touchUp" || step.type === "touchCancel") {
+      const pointerId = pointerIdOf(step);
+      if (pointerId !== null) open.delete(pointerId);
+    }
+  }
+  const next = open.entries().next();
+  if (next.done) return null;
+  return { index: next.value[1], pointerId: next.value[0] };
+}
 function parseStateOptions(value) {
   const input = recordValue(value, "state");
   const route = optionalBoolean(input, "route", "state");
@@ -372,6 +434,7 @@ function parseTapTarget(value) {
 0 && (module.exports = {
   BridgeInputError,
   SEMANTIC_WAIT_MAX_TIMEOUT_MS,
+  findUnbalancedTouchDown,
   parsePerformStep,
   parseResetOptions,
   parseScreenshotOptions,

package/dist-lib/bridge-contract-input.mjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.514 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.515 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 
 // src/bridge-contract.ts
 var SIM_LONG_PRESS_MAX_MS = 5e3;
@@ -156,6 +156,45 @@ function parsePerformStep(value, index) {
       return { type, key: stringValue(step.key, `${path}.key`) };
     case "dismissKeyboard":
       return { type };
+    case "setElementValue": {
+      const submit = optionalBoolean(step, "submit", path);
+      return {
+        type,
+        id: stringValue(step.id, `${path}.id`),
+        text: stringValue(step.text, `${path}.text`),
+        ...submit === void 0 ? {} : { submit }
+      };
+    }
+    case "toggleKeyboard":
+      return { type };
+    case "openUrl": {
+      const url = stringValue(step.url, `${path}.url`);
+      if (url.length === 0) validationFailure(`${path}.url`, "must be non-empty");
+      return { type, url };
+    }
+    case "keyDown":
+    case "keyUp":
+      return { type, key: stringValue(step.key, `${path}.key`) };
+    case "setOrientation": {
+      const orientation = stringValue(step.orientation, `${path}.orientation`);
+      if (orientation !== "portrait" && orientation !== "landscape") {
+        validationFailure(`${path}.orientation`, "must be portrait or landscape");
+      }
+      return { type, orientation };
+    }
+    case "deviceInfo":
+      return { type };
+    case "buttonDown":
+    case "buttonUp": {
+      const button = step.button === void 0 ? void 0 : stringValue(step.button, `${path}.button`);
+      return { type, ...button === void 0 ? {} : { button } };
+    }
+    case "incrementElement":
+    case "decrementElement":
+      return { type, id: stringValue(step.id, `${path}.id`) };
+    case "discoverStoreKitConfig":
+    case "clearStoreKitConfig":
+      return { type };
     case "wait":
       return { type, ms: numberValue(step.ms, `${path}.ms`) };
     case "waitFor": {
@@ -179,6 +218,28 @@ function parsePerformStep(value, index) {
       return validationFailure(`${path}.type`, "is not a supported perform step");
   }
 }
+function findUnbalancedTouchDown(steps) {
+  const open = /* @__PURE__ */ new Map();
+  const pointerIdOf = (step) => {
+    if (step.type !== "touchDown" && step.type !== "touchMove" && step.type !== "touchUp" && step.type !== "touchCancel") {
+      return null;
+    }
+    const pointerId = step.pointerId ?? 999;
+    return Number.isSafeInteger(pointerId) ? pointerId : null;
+  };
+  for (const [index, step] of steps.entries()) {
+    if (step.type === "touchDown") {
+      const pointerId = pointerIdOf(step) ?? 999;
+      if (!open.has(pointerId)) open.set(pointerId, index);
+    } else if (step.type === "touchUp" || step.type === "touchCancel") {
+      const pointerId = pointerIdOf(step);
+      if (pointerId !== null) open.delete(pointerId);
+    }
+  }
+  const next = open.entries().next();
+  if (next.done) return null;
+  return { index: next.value[1], pointerId: next.value[0] };
+}
 function parseStateOptions(value) {
   const input = recordValue(value, "state");
   const route = optionalBoolean(input, "route", "state");
@@ -336,6 +397,7 @@ function parseTapTarget(value) {
 export {
   BridgeInputError,
   SEMANTIC_WAIT_MAX_TIMEOUT_MS,
+  findUnbalancedTouchDown,
   parsePerformStep,
   parseResetOptions,
   parseScreenshotOptions,

package/dist-lib/bridge-contract.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.514 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.515 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;
@@ -24,15 +24,82 @@ var bridge_contract_exports = {};
 __export(bridge_contract_exports, {
   HEADLESS_TENANT_FETCH_HUNG_MARKER: () => HEADLESS_TENANT_FETCH_HUNG_MARKER,
   PUBLIC_NO_NETWORK_MARKER: () => PUBLIC_NO_NETWORK_MARKER,
+  REFUSED_PERFORM_STEP_TYPES: () => REFUSED_PERFORM_STEP_TYPES,
   SEMANTIC_READY_CONTENT_NODE_FLOOR: () => SEMANTIC_READY_CONTENT_NODE_FLOOR,
   SEMANTIC_READY_NODE_STABLE_MS: () => SEMANTIC_READY_NODE_STABLE_MS,
   SEMANTIC_READY_POLL_MS: () => SEMANTIC_READY_POLL_MS,
   SIM_LONG_PRESS_DEFAULT_MS: () => SIM_LONG_PRESS_DEFAULT_MS,
   SIM_LONG_PRESS_MAX_MS: () => SIM_LONG_PRESS_MAX_MS,
+  performStepRefusal: () => performStepRefusal,
   readyProbeHasContent: () => readyProbeHasContent,
-  readyProbeHasTargetContent: () => readyProbeHasTargetContent
+  readyProbeHasTargetContent: () => readyProbeHasTargetContent,
+  refusedPerformStepReason: () => refusedPerformStepReason
 });
 module.exports = __toCommonJS(bridge_contract_exports);
+var REFUSED_PERFORM_STEP_TYPES = [
+  "keyDown",
+  "keyUp",
+  "setOrientation",
+  "buttonDown",
+  "buttonUp",
+  "incrementElement",
+  "decrementElement",
+  "discoverStoreKitConfig",
+  "clearStoreKitConfig"
+];
+function refusedPerformStepReason(type) {
+  switch (type) {
+    case "keyDown":
+    case "keyUp":
+      return `${type} is not supported: keys dispatch atomically; use the key step`;
+    case "setOrientation":
+      return "setOrientation is not supported: the simulator viewport is fixed at boot";
+    case "buttonDown":
+    case "buttonUp":
+      return `${type} is not supported: the simulator has no hardware buttons`;
+    case "incrementElement":
+    case "decrementElement":
+      return `${type} is not supported: steppers have no engine primitive; drive them with tapId`;
+    case "discoverStoreKitConfig":
+    case "clearStoreKitConfig":
+      return `${type} is not supported: storekit has no simulator model`;
+  }
+}
+function performStepRefusal(type) {
+  switch (type) {
+    case "keyDown":
+    case "keyUp":
+    case "setOrientation":
+    case "buttonDown":
+    case "buttonUp":
+    case "incrementElement":
+    case "decrementElement":
+    case "discoverStoreKitConfig":
+    case "clearStoreKitConfig":
+      return refusedPerformStepReason(type);
+    case "touchDown":
+    case "touchMove":
+    case "touchUp":
+    case "touchCancel":
+    case "tap":
+    case "tapId":
+    case "doubleTap":
+    case "longPress":
+    case "drag":
+    case "pinch":
+    case "scroll":
+    case "type":
+    case "key":
+    case "dismissKeyboard":
+    case "setElementValue":
+    case "toggleKeyboard":
+    case "openUrl":
+    case "deviceInfo":
+    case "wait":
+    case "waitFor":
+      return null;
+  }
+}
 var SIM_LONG_PRESS_DEFAULT_MS = 500;
 var SIM_LONG_PRESS_MAX_MS = 5e3;
 var SEMANTIC_READY_CONTENT_NODE_FLOOR = 100;
@@ -50,11 +117,14 @@ function readyProbeHasTargetContent(probe) {
 0 && (module.exports = {
   HEADLESS_TENANT_FETCH_HUNG_MARKER,
   PUBLIC_NO_NETWORK_MARKER,
+  REFUSED_PERFORM_STEP_TYPES,
   SEMANTIC_READY_CONTENT_NODE_FLOOR,
   SEMANTIC_READY_NODE_STABLE_MS,
   SEMANTIC_READY_POLL_MS,
   SIM_LONG_PRESS_DEFAULT_MS,
   SIM_LONG_PRESS_MAX_MS,
+  performStepRefusal,
   readyProbeHasContent,
-  readyProbeHasTargetContent
+  readyProbeHasTargetContent,
+  refusedPerformStepReason
 });

package/dist-lib/bridge-contract.mjs

@@ -1,6 +1,70 @@
-/*! rnx v0.1.514 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.515 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 
 // src/bridge-contract.ts
+var REFUSED_PERFORM_STEP_TYPES = [
+  "keyDown",
+  "keyUp",
+  "setOrientation",
+  "buttonDown",
+  "buttonUp",
+  "incrementElement",
+  "decrementElement",
+  "discoverStoreKitConfig",
+  "clearStoreKitConfig"
+];
+function refusedPerformStepReason(type) {
+  switch (type) {
+    case "keyDown":
+    case "keyUp":
+      return `${type} is not supported: keys dispatch atomically; use the key step`;
+    case "setOrientation":
+      return "setOrientation is not supported: the simulator viewport is fixed at boot";
+    case "buttonDown":
+    case "buttonUp":
+      return `${type} is not supported: the simulator has no hardware buttons`;
+    case "incrementElement":
+    case "decrementElement":
+      return `${type} is not supported: steppers have no engine primitive; drive them with tapId`;
+    case "discoverStoreKitConfig":
+    case "clearStoreKitConfig":
+      return `${type} is not supported: storekit has no simulator model`;
+  }
+}
+function performStepRefusal(type) {
+  switch (type) {
+    case "keyDown":
+    case "keyUp":
+    case "setOrientation":
+    case "buttonDown":
+    case "buttonUp":
+    case "incrementElement":
+    case "decrementElement":
+    case "discoverStoreKitConfig":
+    case "clearStoreKitConfig":
+      return refusedPerformStepReason(type);
+    case "touchDown":
+    case "touchMove":
+    case "touchUp":
+    case "touchCancel":
+    case "tap":
+    case "tapId":
+    case "doubleTap":
+    case "longPress":
+    case "drag":
+    case "pinch":
+    case "scroll":
+    case "type":
+    case "key":
+    case "dismissKeyboard":
+    case "setElementValue":
+    case "toggleKeyboard":
+    case "openUrl":
+    case "deviceInfo":
+    case "wait":
+    case "waitFor":
+      return null;
+  }
+}
 var SIM_LONG_PRESS_DEFAULT_MS = 500;
 var SIM_LONG_PRESS_MAX_MS = 5e3;
 var SEMANTIC_READY_CONTENT_NODE_FLOOR = 100;
@@ -17,11 +81,14 @@ function readyProbeHasTargetContent(probe) {
 export {
   HEADLESS_TENANT_FETCH_HUNG_MARKER,
   PUBLIC_NO_NETWORK_MARKER,
+  REFUSED_PERFORM_STEP_TYPES,
   SEMANTIC_READY_CONTENT_NODE_FLOOR,
   SEMANTIC_READY_NODE_STABLE_MS,
   SEMANTIC_READY_POLL_MS,
   SIM_LONG_PRESS_DEFAULT_MS,
   SIM_LONG_PRESS_MAX_MS,
+  performStepRefusal,
   readyProbeHasContent,
-  readyProbeHasTargetContent
+  readyProbeHasTargetContent,
+  refusedPerformStepReason
 };

package/dist-lib/capture-contract.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.514 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.515 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/capture-contract.mjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.514 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.515 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 
 // src/capture-contract.ts
 var RNX_SCREEN_CAPTURE_VERSION = 1;

package/dist-lib/cli-constants.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.514 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.515 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/cloud-contract.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.514 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.515 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;
@@ -22,6 +22,8 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/cloud-contract.ts
 var cloud_contract_exports = {};
 __export(cloud_contract_exports, {
+  RNX_CLOUD_ALL_COMMAND_SCOPES: () => RNX_CLOUD_ALL_COMMAND_SCOPES,
+  RNX_CLOUD_COMMAND_SCOPES: () => RNX_CLOUD_COMMAND_SCOPES,
   RNX_CLOUD_COMMAND_TYPES: () => RNX_CLOUD_COMMAND_TYPES,
   RNX_CLOUD_DESIGN_MAX_STORAGE_BYTES: () => RNX_CLOUD_DESIGN_MAX_STORAGE_BYTES,
   RNX_CLOUD_DESIGN_MAX_STORAGE_ENTRIES: () => RNX_CLOUD_DESIGN_MAX_STORAGE_ENTRIES,
@@ -30,12 +32,15 @@ __export(cloud_contract_exports, {
   RNX_CLOUD_MAX_ARTIFACT_BYTES: () => RNX_CLOUD_MAX_ARTIFACT_BYTES,
   RNX_CLOUD_TEST_FILES_MAX_BYTES: () => RNX_CLOUD_TEST_FILES_MAX_BYTES,
   RNX_CLOUD_TEST_FILES_MAX_COUNT: () => RNX_CLOUD_TEST_FILES_MAX_COUNT,
+  RNX_CLOUD_TOKEN_SCOPES: () => RNX_CLOUD_TOKEN_SCOPES,
   isRnxCloudCommandType: () => isRnxCloudCommandType,
   isRnxCloudSimStatus: () => isRnxCloudSimStatus,
   isValidRnxCloudLabel: () => isValidRnxCloudLabel,
   matchesRnxCloudLabels: () => matchesRnxCloudLabels,
   parseRnxCloudLabels: () => parseRnxCloudLabels,
-  readRnxCloudLabels: () => readRnxCloudLabels
+  readRnxCloudLabels: () => readRnxCloudLabels,
+  rnxCloudCommandScope: () => rnxCloudCommandScope,
+  rnxCloudScopesAllowCommand: () => rnxCloudScopesAllowCommand
 });
 module.exports = __toCommonJS(cloud_contract_exports);
 var RNX_CLOUD_MAX_ARTIFACT_BYTES = 20 * 1024 * 1024;
@@ -43,29 +48,60 @@ var RNX_CLOUD_DESIGN_MAX_STORAGE_ENTRIES = 256;
 var RNX_CLOUD_DESIGN_MAX_STORAGE_BYTES = 1024 * 1024;
 var RNX_CLOUD_TEST_FILES_MAX_COUNT = 256;
 var RNX_CLOUD_TEST_FILES_MAX_BYTES = 5e5;
-var RNX_CLOUD_COMMAND_TYPES = Object.freeze([
-  "state",
-  "query",
-  "resolve",
-  "perform",
-  "waitFor",
-  "reset",
-  "screenshot",
-  "capture",
-  "captureRegions",
-  "settle",
-  "setAppearance",
-  "openUrl",
-  "tree",
-  "tap",
-  "longPress",
-  "memory",
-  "diagnostics"
-]);
+var RNX_CLOUD_COMMAND_SCOPES = {
+  state: "read",
+  tree: "read",
+  query: "read",
+  resolve: "read",
+  screenshot: "read",
+  capture: "read",
+  captureRegions: "read",
+  memory: "read",
+  diagnostics: "read",
+  storageSnapshot: "read",
+  perform: "drive",
+  waitFor: "drive",
+  tap: "drive",
+  longPress: "drive",
+  settle: "drive",
+  openUrl: "drive",
+  setAppearance: "drive",
+  keyboard: "drive",
+  focus: "drive",
+  flowStatus: "drive",
+  reset: "reset",
+  camera: "media",
+  // string evaluation and arbitrary bridge calls are maestro's boundary: the
+  // customer sdk never carries this scope, and the service grants it only to
+  // the account api key caller. close rides along, since ending the page ends
+  // the sim and belongs to the sim's owner rather than any driver.
+  evaluate: "debug",
+  call: "debug",
+  close: "debug"
+};
+function scopeTableKeys() {
+  return Object.keys(RNX_CLOUD_COMMAND_SCOPES).filter(
+    (key) => Object.prototype.hasOwnProperty.call(RNX_CLOUD_COMMAND_SCOPES, key)
+  );
+}
+var RNX_CLOUD_COMMAND_TYPES = Object.freeze(scopeTableKeys());
 var RNX_CLOUD_COMMAND_TYPE_SET = new Set(RNX_CLOUD_COMMAND_TYPES);
 function isRnxCloudCommandType(value) {
   return RNX_CLOUD_COMMAND_TYPE_SET.has(value);
 }
+function rnxCloudCommandScope(type) {
+  return RNX_CLOUD_COMMAND_SCOPES[type];
+}
+var RNX_CLOUD_TOKEN_SCOPES = Object.freeze([
+  "read",
+  "drive",
+  "reset",
+  "media"
+]);
+var RNX_CLOUD_ALL_COMMAND_SCOPES = Object.freeze(["read", "drive", "reset", "media", "debug"]);
+function rnxCloudScopesAllowCommand(scopes, type) {
+  return scopes.includes(RNX_CLOUD_COMMAND_SCOPES[type]);
+}
 var RNX_CLOUD_LABELS_MAX_COUNT = 16;
 var RNX_CLOUD_LABEL_MAX_LENGTH = 63;
 var RNX_CLOUD_LABEL_CONTROL = /[\u0000-\u001f\u007f]/;
@@ -108,6 +144,8 @@ function isRnxCloudSimStatus(value) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  RNX_CLOUD_ALL_COMMAND_SCOPES,
+  RNX_CLOUD_COMMAND_SCOPES,
   RNX_CLOUD_COMMAND_TYPES,
   RNX_CLOUD_DESIGN_MAX_STORAGE_BYTES,
   RNX_CLOUD_DESIGN_MAX_STORAGE_ENTRIES,
@@ -116,10 +154,13 @@ function isRnxCloudSimStatus(value) {
   RNX_CLOUD_MAX_ARTIFACT_BYTES,
   RNX_CLOUD_TEST_FILES_MAX_BYTES,
   RNX_CLOUD_TEST_FILES_MAX_COUNT,
+  RNX_CLOUD_TOKEN_SCOPES,
   isRnxCloudCommandType,
   isRnxCloudSimStatus,
   isValidRnxCloudLabel,
   matchesRnxCloudLabels,
   parseRnxCloudLabels,
-  readRnxCloudLabels
+  readRnxCloudLabels,
+  rnxCloudCommandScope,
+  rnxCloudScopesAllowCommand
 });