rnxsim 0.1.516 → 0.1.517

package/dist-lib/agent-daemon-client.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.517 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/agent-events.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.517 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/agent-identity.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.517 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/agent-sessions.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.517 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/attached-projects.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.517 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/auth/shared-session.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.517 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/backend-origin.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.517 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/beta.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.517 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/beta.mjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.517 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 
 // src/beta.ts
 var IS_BETA = true;

package/dist-lib/bridge-constants.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.517 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/bridge-contract-input.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.517 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/bridge-contract-input.mjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.517 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 
 // src/bridge-contract.ts
 var SIM_LONG_PRESS_MAX_MS = 5e3;

package/dist-lib/bridge-contract.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.517 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/bridge-contract.mjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.517 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 
 // src/bridge-contract.ts
 var REFUSED_PERFORM_STEP_TYPES = [

package/dist-lib/capture-contract.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.517 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/capture-contract.mjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.517 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 
 // src/capture-contract.ts
 var RNX_SCREEN_CAPTURE_VERSION = 1;

package/dist-lib/cli-constants.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.517 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/cloud-contract.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.517 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;
@@ -30,9 +30,15 @@ __export(cloud_contract_exports, {
   RNX_CLOUD_LABELS_MAX_COUNT: () => RNX_CLOUD_LABELS_MAX_COUNT,
   RNX_CLOUD_LABEL_MAX_LENGTH: () => RNX_CLOUD_LABEL_MAX_LENGTH,
   RNX_CLOUD_MAX_ARTIFACT_BYTES: () => RNX_CLOUD_MAX_ARTIFACT_BYTES,
+  RNX_CLOUD_SCOPED_TOKEN_DEFAULT_TTL_SECONDS: () => RNX_CLOUD_SCOPED_TOKEN_DEFAULT_TTL_SECONDS,
+  RNX_CLOUD_SCOPED_TOKEN_MAX_ORIGINS: () => RNX_CLOUD_SCOPED_TOKEN_MAX_ORIGINS,
+  RNX_CLOUD_SCOPED_TOKEN_MAX_TTL_SECONDS: () => RNX_CLOUD_SCOPED_TOKEN_MAX_TTL_SECONDS,
+  RNX_CLOUD_SCOPED_TOKEN_MIN_TTL_SECONDS: () => RNX_CLOUD_SCOPED_TOKEN_MIN_TTL_SECONDS,
+  RNX_CLOUD_SCOPED_TOKEN_PREFIX: () => RNX_CLOUD_SCOPED_TOKEN_PREFIX,
   RNX_CLOUD_TEST_FILES_MAX_BYTES: () => RNX_CLOUD_TEST_FILES_MAX_BYTES,
   RNX_CLOUD_TEST_FILES_MAX_COUNT: () => RNX_CLOUD_TEST_FILES_MAX_COUNT,
   RNX_CLOUD_TOKEN_SCOPES: () => RNX_CLOUD_TOKEN_SCOPES,
+  isRnxCloudCommandScope: () => isRnxCloudCommandScope,
   isRnxCloudCommandType: () => isRnxCloudCommandType,
   isRnxCloudSimStatus: () => isRnxCloudSimStatus,
   isValidRnxCloudLabel: () => isValidRnxCloudLabel,
@@ -48,6 +54,22 @@ var RNX_CLOUD_DESIGN_MAX_STORAGE_ENTRIES = 256;
 var RNX_CLOUD_DESIGN_MAX_STORAGE_BYTES = 1024 * 1024;
 var RNX_CLOUD_TEST_FILES_MAX_COUNT = 256;
 var RNX_CLOUD_TEST_FILES_MAX_BYTES = 5e5;
+var RNX_CLOUD_COMMAND_SCOPE_SET = /* @__PURE__ */ new Set([
+  "read",
+  "drive",
+  "reset",
+  "media",
+  "debug",
+  "watch"
+]);
+function isRnxCloudCommandScope(value) {
+  return RNX_CLOUD_COMMAND_SCOPE_SET.has(value);
+}
+var RNX_CLOUD_SCOPED_TOKEN_PREFIX = "sk_rnx_sim_";
+var RNX_CLOUD_SCOPED_TOKEN_DEFAULT_TTL_SECONDS = 3600;
+var RNX_CLOUD_SCOPED_TOKEN_MIN_TTL_SECONDS = 1;
+var RNX_CLOUD_SCOPED_TOKEN_MAX_TTL_SECONDS = 14400;
+var RNX_CLOUD_SCOPED_TOKEN_MAX_ORIGINS = 16;
 var RNX_CLOUD_COMMAND_SCOPES = {
   state: "read",
   tree: "read",
@@ -152,9 +174,15 @@ function isRnxCloudSimStatus(value) {
   RNX_CLOUD_LABELS_MAX_COUNT,
   RNX_CLOUD_LABEL_MAX_LENGTH,
   RNX_CLOUD_MAX_ARTIFACT_BYTES,
+  RNX_CLOUD_SCOPED_TOKEN_DEFAULT_TTL_SECONDS,
+  RNX_CLOUD_SCOPED_TOKEN_MAX_ORIGINS,
+  RNX_CLOUD_SCOPED_TOKEN_MAX_TTL_SECONDS,
+  RNX_CLOUD_SCOPED_TOKEN_MIN_TTL_SECONDS,
+  RNX_CLOUD_SCOPED_TOKEN_PREFIX,
   RNX_CLOUD_TEST_FILES_MAX_BYTES,
   RNX_CLOUD_TEST_FILES_MAX_COUNT,
   RNX_CLOUD_TOKEN_SCOPES,
+  isRnxCloudCommandScope,
   isRnxCloudCommandType,
   isRnxCloudSimStatus,
   isValidRnxCloudLabel,

package/dist-lib/cloud-contract.mjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.517 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 
 // src/cloud-contract.ts
 var RNX_CLOUD_MAX_ARTIFACT_BYTES = 20 * 1024 * 1024;
@@ -6,6 +6,22 @@ var RNX_CLOUD_DESIGN_MAX_STORAGE_ENTRIES = 256;
 var RNX_CLOUD_DESIGN_MAX_STORAGE_BYTES = 1024 * 1024;
 var RNX_CLOUD_TEST_FILES_MAX_COUNT = 256;
 var RNX_CLOUD_TEST_FILES_MAX_BYTES = 5e5;
+var RNX_CLOUD_COMMAND_SCOPE_SET = /* @__PURE__ */ new Set([
+  "read",
+  "drive",
+  "reset",
+  "media",
+  "debug",
+  "watch"
+]);
+function isRnxCloudCommandScope(value) {
+  return RNX_CLOUD_COMMAND_SCOPE_SET.has(value);
+}
+var RNX_CLOUD_SCOPED_TOKEN_PREFIX = "sk_rnx_sim_";
+var RNX_CLOUD_SCOPED_TOKEN_DEFAULT_TTL_SECONDS = 3600;
+var RNX_CLOUD_SCOPED_TOKEN_MIN_TTL_SECONDS = 1;
+var RNX_CLOUD_SCOPED_TOKEN_MAX_TTL_SECONDS = 14400;
+var RNX_CLOUD_SCOPED_TOKEN_MAX_ORIGINS = 16;
 var RNX_CLOUD_COMMAND_SCOPES = {
   state: "read",
   tree: "read",
@@ -109,9 +125,15 @@ export {
   RNX_CLOUD_LABELS_MAX_COUNT,
   RNX_CLOUD_LABEL_MAX_LENGTH,
   RNX_CLOUD_MAX_ARTIFACT_BYTES,
+  RNX_CLOUD_SCOPED_TOKEN_DEFAULT_TTL_SECONDS,
+  RNX_CLOUD_SCOPED_TOKEN_MAX_ORIGINS,
+  RNX_CLOUD_SCOPED_TOKEN_MAX_TTL_SECONDS,
+  RNX_CLOUD_SCOPED_TOKEN_MIN_TTL_SECONDS,
+  RNX_CLOUD_SCOPED_TOKEN_PREFIX,
   RNX_CLOUD_TEST_FILES_MAX_BYTES,
   RNX_CLOUD_TEST_FILES_MAX_COUNT,
   RNX_CLOUD_TOKEN_SCOPES,
+  isRnxCloudCommandScope,
   isRnxCloudCommandType,
   isRnxCloudSimStatus,
   isValidRnxCloudLabel,

package/dist-lib/cloud.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.517 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;
@@ -24,8 +24,11 @@ var cloud_exports = {};
 __export(cloud_exports, {
   RNX_CLOUD_COMMAND_TYPES: () => RNX_CLOUD_COMMAND_TYPES,
   RNX_CLOUD_MAX_ARTIFACT_BYTES: () => RNX_CLOUD_MAX_ARTIFACT_BYTES,
+  RNX_CLOUD_SCOPED_TOKEN_PREFIX: () => RNX_CLOUD_SCOPED_TOKEN_PREFIX,
   RemoteSimulator: () => RemoteSimulator,
+  connect: () => connect,
   createRemoteSimulator: () => createRemoteSimulator,
+  isRnxCloudCommandScope: () => isRnxCloudCommandScope,
   isRnxCloudCommandType: () => isRnxCloudCommandType
 });
 module.exports = __toCommonJS(cloud_exports);
@@ -99,6 +102,18 @@ function isRnxScreenCapture(value) {
 // src/cloud-contract.ts
 var RNX_CLOUD_MAX_ARTIFACT_BYTES = 20 * 1024 * 1024;
 var RNX_CLOUD_DESIGN_MAX_STORAGE_BYTES = 1024 * 1024;
+var RNX_CLOUD_COMMAND_SCOPE_SET = /* @__PURE__ */ new Set([
+  "read",
+  "drive",
+  "reset",
+  "media",
+  "debug",
+  "watch"
+]);
+function isRnxCloudCommandScope(value) {
+  return RNX_CLOUD_COMMAND_SCOPE_SET.has(value);
+}
+var RNX_CLOUD_SCOPED_TOKEN_PREFIX = "sk_rnx_sim_";
 var RNX_CLOUD_COMMAND_SCOPES = {
   state: "read",
   tree: "read",
@@ -336,7 +351,7 @@ function readBoxCreate(value, expectedBytes, expectedSha256) {
     simulatorToken: simulator.token
   };
 }
-function cloudCommand(command) {
+function cloudCommand(command, scopes) {
   const clean = {};
   for (const [key, value] of Object.entries(command)) {
     if (key !== "id" && key !== "simId") clean[key] = value;
@@ -344,7 +359,7 @@ function cloudCommand(command) {
   if (!isRnxCloudCommandType(command.type)) {
     throw new Error(`RNX Cloud does not support bridge command type ${command.type}`);
   }
-  if (!rnxCloudScopesAllowCommand(RNX_CLOUD_TOKEN_SCOPES, command.type)) {
+  if (!rnxCloudScopesAllowCommand(scopes, command.type)) {
     throw new Error(
       `RNX Cloud command ${command.type} requires the ${rnxCloudCommandScope(command.type)} scope`
     );
@@ -391,7 +406,10 @@ var RemoteSimulator = class {
         }
         return result;
       },
-      reset: () => this.sendCommand({ type: "reset" })
+      reset: () => this.sendCommand({ type: "reset" }),
+      state: (options) => this.sendCommand(
+        options === void 0 ? { type: "state" } : { type: "state", stateOptions: options }
+      )
     };
   }
   get simId() {
@@ -400,7 +418,13 @@ var RemoteSimulator = class {
   get claim() {
     return this.session.claim;
   }
+  get scopes() {
+    return this.session.scopes;
+  }
   get receipt() {
+    if (!this.session.claim) {
+      throw new Error("this simulator was attached with connect() and holds no claim");
+    }
     return {
       simId: this.session.simId,
       artifact: this.session.artifact,
@@ -410,8 +434,10 @@ var RemoteSimulator = class {
   async sendCommand(command, options) {
     const body = {
       id: globalThis.crypto.randomUUID(),
-      claimId: this.session.claim.id,
-      command: cloudCommand(command)
+      // a scoped token drives without a claim: the service checks the token
+      // instead. a full token still joins the claim it names here.
+      claimId: this.session.claim?.id ?? "",
+      command: cloudCommand(command, this.session.scopes)
     };
     let response;
     try {
@@ -450,6 +476,10 @@ var RemoteSimulator = class {
     return parsed.result;
   }
   async confirm() {
+    if (!this.session.claim) {
+      throw new Error("this simulator was attached with connect() and holds no claim");
+    }
+    const claimId = this.session.claim.id;
     const response = await fetchWithCloudRetry(
       `${this.session.origin}/v1/sims/${encodeURIComponent(this.session.simId)}/claim`,
       {
@@ -458,7 +488,7 @@ var RemoteSimulator = class {
           authorization: `Bearer ${this.session.simulatorToken}`,
           "content-type": "application/json"
         },
-        body: JSON.stringify({ claimId: this.session.claim.id })
+        body: JSON.stringify({ claimId })
       }
     );
     const text = await response.text();
@@ -470,20 +500,24 @@ var RemoteSimulator = class {
       throw new Error("RNX Cloud claim returned unreadable JSON");
     }
     const claim = readClaim(isRecord(parsed) ? parsed.claim : null);
-    if (claim.id !== this.session.claim.id) {
+    if (claim.id !== claimId) {
       throw new Error("RNX Cloud confirmation replaced the initial claim");
     }
     this.session = { ...this.session, claim };
     return claim;
   }
   async close() {
-    const response = await fetchWithCloudRetry(
-      `${this.session.origin}/v1/boxes/${encodeURIComponent(this.session.boxId)}`,
-      {
-        method: "DELETE",
-        headers: { authorization: `Bearer ${this.session.boxToken}` }
-      }
-    );
+    const target = this.session.boxId !== null && this.session.boxToken !== null ? {
+      url: `${this.session.origin}/v1/boxes/${encodeURIComponent(this.session.boxId)}`,
+      authorization: `Bearer ${this.session.boxToken}`
+    } : {
+      url: `${this.session.origin}/v1/sims/${encodeURIComponent(this.session.simId)}`,
+      authorization: `Bearer ${this.session.simulatorToken}`
+    };
+    const response = await fetchWithCloudRetry(target.url, {
+      method: "DELETE",
+      headers: { authorization: target.authorization }
+    });
     const text = await response.text();
     if (!response.ok && response.status !== 404) {
       throw responseError(response.status, text);
@@ -541,16 +575,80 @@ async function createRemoteSimulator(input) {
     simId: created.receipt.simulator.simId,
     simulatorToken: created.simulatorToken,
     claim: created.receipt.simulator.claim,
-    artifact: created.receipt.artifact
+    artifact: created.receipt.artifact,
+    scopes: RNX_CLOUD_TOKEN_SCOPES
   });
   await simulator.confirm();
   return simulator;
 }
+function readSimArtifact(value) {
+  if (!isRecord(value) || typeof value.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(value.sha256) || typeof value.bytes !== "number" || !Number.isInteger(value.bytes) || value.bytes <= 0) {
+    throw new Error("RNX Cloud returned an invalid simulator artifact");
+  }
+  return { id: `sha256:${value.sha256}`, bytes: value.bytes };
+}
+function readConnectClaim(value) {
+  if (value === null) return null;
+  return readClaim(value);
+}
+function readConnectScopes(value, token) {
+  if (!token.startsWith(RNX_CLOUD_SCOPED_TOKEN_PREFIX)) return RNX_CLOUD_TOKEN_SCOPES;
+  if (!isRecord(value) || typeof value.id !== "string" || !value.id || !Array.isArray(value.scopes) || value.scopes.length === 0 || !value.scopes.every(
+    (scope) => typeof scope === "string" && isRnxCloudCommandScope(scope)
+  ) || typeof value.expiresAt !== "number") {
+    throw new Error("RNX Cloud returned an invalid scoped token");
+  }
+  return Object.freeze([...value.scopes]);
+}
+async function connect(input) {
+  if (!input.id) throw new Error("RNX Cloud connect needs a simulator id");
+  if (!input.token) throw new Error("RNX Cloud connect needs a token");
+  const origin = resolveOrigin(input.origin);
+  let response;
+  try {
+    response = await fetchWithCloudRetry(
+      `${origin}/v1/sims/${encodeURIComponent(input.id)}`,
+      { headers: { authorization: `Bearer ${input.token}` } }
+    );
+  } catch (error) {
+    throw new Error(
+      `could not reach RNX Cloud at ${origin}: ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+  const text = await response.text();
+  if (!response.ok) throw responseError(response.status, text);
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+    throw new Error("RNX Cloud connect returned unreadable JSON");
+  }
+  if (!isRecord(parsed) || !isRecord(parsed.sim)) {
+    throw new Error("RNX Cloud connect returned an invalid simulator");
+  }
+  const sim = parsed.sim;
+  if (typeof sim.simId !== "string" || !sim.simId) {
+    throw new Error("RNX Cloud connect returned an invalid simulator");
+  }
+  return new RemoteSimulator({
+    origin,
+    boxId: null,
+    boxToken: null,
+    simId: sim.simId,
+    simulatorToken: input.token,
+    claim: readConnectClaim(sim.claim ?? null),
+    artifact: readSimArtifact(sim.artifact),
+    scopes: readConnectScopes(isRecord(parsed) ? parsed.token : null, input.token)
+  });
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   RNX_CLOUD_COMMAND_TYPES,
   RNX_CLOUD_MAX_ARTIFACT_BYTES,
+  RNX_CLOUD_SCOPED_TOKEN_PREFIX,
   RemoteSimulator,
+  connect,
   createRemoteSimulator,
+  isRnxCloudCommandScope,
   isRnxCloudCommandType
 });

package/dist-lib/cloud.mjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.517 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 var __defProp = Object.defineProperty;
 var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
 var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
@@ -72,6 +72,18 @@ function isRnxScreenCapture(value) {
 // src/cloud-contract.ts
 var RNX_CLOUD_MAX_ARTIFACT_BYTES = 20 * 1024 * 1024;
 var RNX_CLOUD_DESIGN_MAX_STORAGE_BYTES = 1024 * 1024;
+var RNX_CLOUD_COMMAND_SCOPE_SET = /* @__PURE__ */ new Set([
+  "read",
+  "drive",
+  "reset",
+  "media",
+  "debug",
+  "watch"
+]);
+function isRnxCloudCommandScope(value) {
+  return RNX_CLOUD_COMMAND_SCOPE_SET.has(value);
+}
+var RNX_CLOUD_SCOPED_TOKEN_PREFIX = "sk_rnx_sim_";
 var RNX_CLOUD_COMMAND_SCOPES = {
   state: "read",
   tree: "read",
@@ -309,7 +321,7 @@ function readBoxCreate(value, expectedBytes, expectedSha256) {
     simulatorToken: simulator.token
   };
 }
-function cloudCommand(command) {
+function cloudCommand(command, scopes) {
   const clean = {};
   for (const [key, value] of Object.entries(command)) {
     if (key !== "id" && key !== "simId") clean[key] = value;
@@ -317,7 +329,7 @@ function cloudCommand(command) {
   if (!isRnxCloudCommandType(command.type)) {
     throw new Error(`RNX Cloud does not support bridge command type ${command.type}`);
   }
-  if (!rnxCloudScopesAllowCommand(RNX_CLOUD_TOKEN_SCOPES, command.type)) {
+  if (!rnxCloudScopesAllowCommand(scopes, command.type)) {
     throw new Error(
       `RNX Cloud command ${command.type} requires the ${rnxCloudCommandScope(command.type)} scope`
     );
@@ -364,7 +376,10 @@ var RemoteSimulator = class {
         }
         return result;
       },
-      reset: () => this.sendCommand({ type: "reset" })
+      reset: () => this.sendCommand({ type: "reset" }),
+      state: (options) => this.sendCommand(
+        options === void 0 ? { type: "state" } : { type: "state", stateOptions: options }
+      )
     };
   }
   get simId() {
@@ -373,7 +388,13 @@ var RemoteSimulator = class {
   get claim() {
     return this.session.claim;
   }
+  get scopes() {
+    return this.session.scopes;
+  }
   get receipt() {
+    if (!this.session.claim) {
+      throw new Error("this simulator was attached with connect() and holds no claim");
+    }
     return {
       simId: this.session.simId,
       artifact: this.session.artifact,
@@ -383,8 +404,10 @@ var RemoteSimulator = class {
   async sendCommand(command, options) {
     const body = {
       id: globalThis.crypto.randomUUID(),
-      claimId: this.session.claim.id,
-      command: cloudCommand(command)
+      // a scoped token drives without a claim: the service checks the token
+      // instead. a full token still joins the claim it names here.
+      claimId: this.session.claim?.id ?? "",
+      command: cloudCommand(command, this.session.scopes)
     };
     let response;
     try {
@@ -423,6 +446,10 @@ var RemoteSimulator = class {
     return parsed.result;
   }
   async confirm() {
+    if (!this.session.claim) {
+      throw new Error("this simulator was attached with connect() and holds no claim");
+    }
+    const claimId = this.session.claim.id;
     const response = await fetchWithCloudRetry(
       `${this.session.origin}/v1/sims/${encodeURIComponent(this.session.simId)}/claim`,
       {
@@ -431,7 +458,7 @@ var RemoteSimulator = class {
           authorization: `Bearer ${this.session.simulatorToken}`,
           "content-type": "application/json"
         },
-        body: JSON.stringify({ claimId: this.session.claim.id })
+        body: JSON.stringify({ claimId })
       }
     );
     const text = await response.text();
@@ -443,20 +470,24 @@ var RemoteSimulator = class {
       throw new Error("RNX Cloud claim returned unreadable JSON");
     }
     const claim = readClaim(isRecord(parsed) ? parsed.claim : null);
-    if (claim.id !== this.session.claim.id) {
+    if (claim.id !== claimId) {
       throw new Error("RNX Cloud confirmation replaced the initial claim");
     }
     this.session = { ...this.session, claim };
     return claim;
   }
   async close() {
-    const response = await fetchWithCloudRetry(
-      `${this.session.origin}/v1/boxes/${encodeURIComponent(this.session.boxId)}`,
-      {
-        method: "DELETE",
-        headers: { authorization: `Bearer ${this.session.boxToken}` }
-      }
-    );
+    const target = this.session.boxId !== null && this.session.boxToken !== null ? {
+      url: `${this.session.origin}/v1/boxes/${encodeURIComponent(this.session.boxId)}`,
+      authorization: `Bearer ${this.session.boxToken}`
+    } : {
+      url: `${this.session.origin}/v1/sims/${encodeURIComponent(this.session.simId)}`,
+      authorization: `Bearer ${this.session.simulatorToken}`
+    };
+    const response = await fetchWithCloudRetry(target.url, {
+      method: "DELETE",
+      headers: { authorization: target.authorization }
+    });
     const text = await response.text();
     if (!response.ok && response.status !== 404) {
       throw responseError(response.status, text);
@@ -514,15 +545,79 @@ async function createRemoteSimulator(input) {
     simId: created.receipt.simulator.simId,
     simulatorToken: created.simulatorToken,
     claim: created.receipt.simulator.claim,
-    artifact: created.receipt.artifact
+    artifact: created.receipt.artifact,
+    scopes: RNX_CLOUD_TOKEN_SCOPES
   });
   await simulator.confirm();
   return simulator;
 }
+function readSimArtifact(value) {
+  if (!isRecord(value) || typeof value.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(value.sha256) || typeof value.bytes !== "number" || !Number.isInteger(value.bytes) || value.bytes <= 0) {
+    throw new Error("RNX Cloud returned an invalid simulator artifact");
+  }
+  return { id: `sha256:${value.sha256}`, bytes: value.bytes };
+}
+function readConnectClaim(value) {
+  if (value === null) return null;
+  return readClaim(value);
+}
+function readConnectScopes(value, token) {
+  if (!token.startsWith(RNX_CLOUD_SCOPED_TOKEN_PREFIX)) return RNX_CLOUD_TOKEN_SCOPES;
+  if (!isRecord(value) || typeof value.id !== "string" || !value.id || !Array.isArray(value.scopes) || value.scopes.length === 0 || !value.scopes.every(
+    (scope) => typeof scope === "string" && isRnxCloudCommandScope(scope)
+  ) || typeof value.expiresAt !== "number") {
+    throw new Error("RNX Cloud returned an invalid scoped token");
+  }
+  return Object.freeze([...value.scopes]);
+}
+async function connect(input) {
+  if (!input.id) throw new Error("RNX Cloud connect needs a simulator id");
+  if (!input.token) throw new Error("RNX Cloud connect needs a token");
+  const origin = resolveOrigin(input.origin);
+  let response;
+  try {
+    response = await fetchWithCloudRetry(
+      `${origin}/v1/sims/${encodeURIComponent(input.id)}`,
+      { headers: { authorization: `Bearer ${input.token}` } }
+    );
+  } catch (error) {
+    throw new Error(
+      `could not reach RNX Cloud at ${origin}: ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+  const text = await response.text();
+  if (!response.ok) throw responseError(response.status, text);
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+    throw new Error("RNX Cloud connect returned unreadable JSON");
+  }
+  if (!isRecord(parsed) || !isRecord(parsed.sim)) {
+    throw new Error("RNX Cloud connect returned an invalid simulator");
+  }
+  const sim = parsed.sim;
+  if (typeof sim.simId !== "string" || !sim.simId) {
+    throw new Error("RNX Cloud connect returned an invalid simulator");
+  }
+  return new RemoteSimulator({
+    origin,
+    boxId: null,
+    boxToken: null,
+    simId: sim.simId,
+    simulatorToken: input.token,
+    claim: readConnectClaim(sim.claim ?? null),
+    artifact: readSimArtifact(sim.artifact),
+    scopes: readConnectScopes(isRecord(parsed) ? parsed.token : null, input.token)
+  });
+}
 export {
   RNX_CLOUD_COMMAND_TYPES,
   RNX_CLOUD_MAX_ARTIFACT_BYTES,
+  RNX_CLOUD_SCOPED_TOKEN_PREFIX,
   RemoteSimulator,
+  connect,
   createRemoteSimulator,
+  isRnxCloudCommandScope,
   isRnxCloudCommandType
 };