rnxsim 0.1.516 → 0.1.518

package/dist-lib/cloud.mjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 var __defProp = Object.defineProperty;
 var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
 var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
@@ -72,6 +72,18 @@ function isRnxScreenCapture(value) {
 // src/cloud-contract.ts
 var RNX_CLOUD_MAX_ARTIFACT_BYTES = 20 * 1024 * 1024;
 var RNX_CLOUD_DESIGN_MAX_STORAGE_BYTES = 1024 * 1024;
+var RNX_CLOUD_COMMAND_SCOPE_SET = /* @__PURE__ */ new Set([
+  "read",
+  "drive",
+  "reset",
+  "media",
+  "debug",
+  "watch"
+]);
+function isRnxCloudCommandScope(value) {
+  return RNX_CLOUD_COMMAND_SCOPE_SET.has(value);
+}
+var RNX_CLOUD_SCOPED_TOKEN_PREFIX = "sk_rnx_sim_";
 var RNX_CLOUD_COMMAND_SCOPES = {
   state: "read",
   tree: "read",
@@ -309,7 +321,7 @@ function readBoxCreate(value, expectedBytes, expectedSha256) {
     simulatorToken: simulator.token
   };
 }
-function cloudCommand(command) {
+function cloudCommand(command, scopes) {
   const clean = {};
   for (const [key, value] of Object.entries(command)) {
     if (key !== "id" && key !== "simId") clean[key] = value;
@@ -317,7 +329,7 @@ function cloudCommand(command) {
   if (!isRnxCloudCommandType(command.type)) {
     throw new Error(`RNX Cloud does not support bridge command type ${command.type}`);
   }
-  if (!rnxCloudScopesAllowCommand(RNX_CLOUD_TOKEN_SCOPES, command.type)) {
+  if (!rnxCloudScopesAllowCommand(scopes, command.type)) {
     throw new Error(
       `RNX Cloud command ${command.type} requires the ${rnxCloudCommandScope(command.type)} scope`
     );
@@ -364,7 +376,10 @@ var RemoteSimulator = class {
         }
         return result;
       },
-      reset: () => this.sendCommand({ type: "reset" })
+      reset: () => this.sendCommand({ type: "reset" }),
+      state: (options) => this.sendCommand(
+        options === void 0 ? { type: "state" } : { type: "state", stateOptions: options }
+      )
     };
   }
   get simId() {
@@ -373,7 +388,13 @@ var RemoteSimulator = class {
   get claim() {
     return this.session.claim;
   }
+  get scopes() {
+    return this.session.scopes;
+  }
   get receipt() {
+    if (!this.session.claim) {
+      throw new Error("this simulator was attached with connect() and holds no claim");
+    }
     return {
       simId: this.session.simId,
       artifact: this.session.artifact,
@@ -383,8 +404,10 @@ var RemoteSimulator = class {
   async sendCommand(command, options) {
     const body = {
       id: globalThis.crypto.randomUUID(),
-      claimId: this.session.claim.id,
-      command: cloudCommand(command)
+      // a scoped token drives without a claim: the service checks the token
+      // instead. a full token still joins the claim it names here.
+      claimId: this.session.claim?.id ?? "",
+      command: cloudCommand(command, this.session.scopes)
     };
     let response;
     try {
@@ -423,6 +446,10 @@ var RemoteSimulator = class {
     return parsed.result;
   }
   async confirm() {
+    if (!this.session.claim) {
+      throw new Error("this simulator was attached with connect() and holds no claim");
+    }
+    const claimId = this.session.claim.id;
     const response = await fetchWithCloudRetry(
       `${this.session.origin}/v1/sims/${encodeURIComponent(this.session.simId)}/claim`,
       {
@@ -431,7 +458,7 @@ var RemoteSimulator = class {
           authorization: `Bearer ${this.session.simulatorToken}`,
           "content-type": "application/json"
         },
-        body: JSON.stringify({ claimId: this.session.claim.id })
+        body: JSON.stringify({ claimId })
       }
     );
     const text = await response.text();
@@ -443,20 +470,24 @@ var RemoteSimulator = class {
       throw new Error("RNX Cloud claim returned unreadable JSON");
     }
     const claim = readClaim(isRecord(parsed) ? parsed.claim : null);
-    if (claim.id !== this.session.claim.id) {
+    if (claim.id !== claimId) {
       throw new Error("RNX Cloud confirmation replaced the initial claim");
     }
     this.session = { ...this.session, claim };
     return claim;
   }
   async close() {
-    const response = await fetchWithCloudRetry(
-      `${this.session.origin}/v1/boxes/${encodeURIComponent(this.session.boxId)}`,
-      {
-        method: "DELETE",
-        headers: { authorization: `Bearer ${this.session.boxToken}` }
-      }
-    );
+    const target = this.session.boxId !== null && this.session.boxToken !== null ? {
+      url: `${this.session.origin}/v1/boxes/${encodeURIComponent(this.session.boxId)}`,
+      authorization: `Bearer ${this.session.boxToken}`
+    } : {
+      url: `${this.session.origin}/v1/sims/${encodeURIComponent(this.session.simId)}`,
+      authorization: `Bearer ${this.session.simulatorToken}`
+    };
+    const response = await fetchWithCloudRetry(target.url, {
+      method: "DELETE",
+      headers: { authorization: target.authorization }
+    });
     const text = await response.text();
     if (!response.ok && response.status !== 404) {
       throw responseError(response.status, text);
@@ -514,15 +545,79 @@ async function createRemoteSimulator(input) {
     simId: created.receipt.simulator.simId,
     simulatorToken: created.simulatorToken,
     claim: created.receipt.simulator.claim,
-    artifact: created.receipt.artifact
+    artifact: created.receipt.artifact,
+    scopes: RNX_CLOUD_TOKEN_SCOPES
   });
   await simulator.confirm();
   return simulator;
 }
+function readSimArtifact(value) {
+  if (!isRecord(value) || typeof value.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(value.sha256) || typeof value.bytes !== "number" || !Number.isInteger(value.bytes) || value.bytes <= 0) {
+    throw new Error("RNX Cloud returned an invalid simulator artifact");
+  }
+  return { id: `sha256:${value.sha256}`, bytes: value.bytes };
+}
+function readConnectClaim(value) {
+  if (value === null) return null;
+  return readClaim(value);
+}
+function readConnectScopes(value, token) {
+  if (!token.startsWith(RNX_CLOUD_SCOPED_TOKEN_PREFIX)) return RNX_CLOUD_TOKEN_SCOPES;
+  if (!isRecord(value) || typeof value.id !== "string" || !value.id || !Array.isArray(value.scopes) || value.scopes.length === 0 || !value.scopes.every(
+    (scope) => typeof scope === "string" && isRnxCloudCommandScope(scope)
+  ) || typeof value.expiresAt !== "number") {
+    throw new Error("RNX Cloud returned an invalid scoped token");
+  }
+  return Object.freeze([...value.scopes]);
+}
+async function connect(input) {
+  if (!input.id) throw new Error("RNX Cloud connect needs a simulator id");
+  if (!input.token) throw new Error("RNX Cloud connect needs a token");
+  const origin = resolveOrigin(input.origin);
+  let response;
+  try {
+    response = await fetchWithCloudRetry(
+      `${origin}/v1/sims/${encodeURIComponent(input.id)}`,
+      { headers: { authorization: `Bearer ${input.token}` } }
+    );
+  } catch (error) {
+    throw new Error(
+      `could not reach RNX Cloud at ${origin}: ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+  const text = await response.text();
+  if (!response.ok) throw responseError(response.status, text);
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+    throw new Error("RNX Cloud connect returned unreadable JSON");
+  }
+  if (!isRecord(parsed) || !isRecord(parsed.sim)) {
+    throw new Error("RNX Cloud connect returned an invalid simulator");
+  }
+  const sim = parsed.sim;
+  if (typeof sim.simId !== "string" || !sim.simId) {
+    throw new Error("RNX Cloud connect returned an invalid simulator");
+  }
+  return new RemoteSimulator({
+    origin,
+    boxId: null,
+    boxToken: null,
+    simId: sim.simId,
+    simulatorToken: input.token,
+    claim: readConnectClaim(sim.claim ?? null),
+    artifact: readSimArtifact(sim.artifact),
+    scopes: readConnectScopes(isRecord(parsed) ? parsed.token : null, input.token)
+  });
+}
 export {
   RNX_CLOUD_COMMAND_TYPES,
   RNX_CLOUD_MAX_ARTIFACT_BYTES,
+  RNX_CLOUD_SCOPED_TOKEN_PREFIX,
   RemoteSimulator,
+  connect,
   createRemoteSimulator,
+  isRnxCloudCommandScope,
   isRnxCloudCommandType
 };

package/dist-lib/config.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/detox/index.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;
@@ -3267,18 +3267,36 @@ var device = {
         }
         const frameMs = 1e3 / 60;
         const controller = await lockstep.begin(60);
+        const moves = input.hold?.moves ?? [];
         const holdState = {
+          nextMove: 0,
+          pressFrameIndex: null,
           released: false,
-          releaseFrameIndex: null
+          x: input.hold?.x ?? 0,
+          y: input.hold?.y ?? 0
         };
-        const releaseHoldIfDue = async (receipt) => {
+        const holdEventFrameIndex = (afterMs) => (holdState.pressFrameIndex ?? 0) + Math.ceil(afterMs / frameMs);
+        const nextHoldEventFrameIndex = () => {
+          if (!input.hold || holdState.released || holdState.pressFrameIndex === null) {
+            return null;
+          }
+          const move = moves[holdState.nextMove];
+          return holdEventFrameIndex(move ? move.afterMs : input.hold.durationMs);
+        };
+        const advanceHold = async (receipt) => {
           if (!input.hold || !interact || holdState.released) return;
-          if (holdState.releaseFrameIndex === null) {
-            holdState.releaseFrameIndex = receipt.frameIndex - 1 + Math.ceil(input.hold.durationMs / frameMs);
+          if (holdState.pressFrameIndex === null) {
+            holdState.pressFrameIndex = receipt.frameIndex - 1;
           }
-          if (receipt.frameIndex < holdState.releaseFrameIndex) return;
+          for (let move = moves[holdState.nextMove]; move && receipt.frameIndex >= holdEventFrameIndex(move.afterMs); move = moves[holdState.nextMove]) {
+            holdState.nextMove++;
+            holdState.x = move.x;
+            holdState.y = move.y;
+            await interact.touchMove(move.x, move.y);
+          }
+          if (receipt.frameIndex < holdEventFrameIndex(input.hold.durationMs)) return;
           holdState.released = true;
-          await interact.touchUp(input.hold.x, input.hold.y);
+          await interact.touchUp(holdState.x, holdState.y);
         };
         try {
           const baselineBitmap = await captureBitmap();
@@ -3302,7 +3320,7 @@ var device = {
           for (let frame = 0; frame < detectionFrameLimit; frame++) {
             if (state.cancelled) throw new Error("rnx motion capture was cancelled");
             const receipt = await controller.stepFrame();
-            await releaseHoldIfDue(receipt);
+            await advanceHold(receipt);
             const candidateBitmap = await captureBitmap();
             const bounds = boundsFor(candidateBitmap);
             const measurement = measureChange({
@@ -3328,14 +3346,12 @@ var device = {
           const snapshots = [];
           for (const stage of input.stages) {
             if (state.cancelled) throw new Error("rnx motion capture was cancelled");
-            if (input.hold && !holdState.released && holdState.releaseFrameIndex !== null) {
-              const stageFrameIndex = visibleStart.frameIndex + Math.ceil(stage.offsetMs / frameMs);
-              while (!holdState.released && stageFrameIndex > holdState.releaseFrameIndex) {
-                await releaseHoldIfDue(await controller.stepFrame());
-              }
+            const stageFrameIndex = visibleStart.frameIndex + Math.ceil(stage.offsetMs / frameMs);
+            for (let eventFrameIndex = nextHoldEventFrameIndex(); eventFrameIndex !== null && stageFrameIndex > eventFrameIndex; eventFrameIndex = nextHoldEventFrameIndex()) {
+              await advanceHold(await controller.stepFrame());
             }
             const receipt = await controller.stepToOffset(visibleStart, stage.offsetMs);
-            await releaseHoldIfDue(receipt);
+            await advanceHold(receipt);
             snapshots.push({
               actualMs: receipt.virtualTimestampMs - visibleStart.virtualTimestampMs,
               bitmap: await captureBitmap(),

package/dist-lib/dev-bundle-resolution.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/home-paths.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/host/bridge-host.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/host/fetch-proxy-handler.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/host/fetch-proxy-overrides.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/host/fetch-proxy-overrides.mjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 
 // src/host/fetch-proxy-overrides.ts
 var FETCH_PROXY_BROWSER_USER_AGENT = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36";

package/dist-lib/host/replacement-module-handler.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/host/websocket-proxy.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/index.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/jump-to-source-babel.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/jump-to-source-native.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/menu.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/menu.mjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 
 // src/public-brand.ts
 var name = "rnx";

package/dist-lib/metro-fingerprint-registry.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/metro-fingerprint-registry.mjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 
 // src/metro-fingerprint-registry.ts
 var RNX_METRO_FINGERPRINT_SCHEMA_VERSION = 2;

package/dist-lib/metro-production-bundle.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/metro-production-bundle.mjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 
 // src/metro-production-bundle.ts
 var RNXSIM_METRO_MODULE_PATHS_PREFIX = "globalThis.__sootsimModulePaths=";

package/dist-lib/metro.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/profiles.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/public-brand.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/react-native-host-modules.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/react-native-host-modules.mjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 
 // src/react-native-host-modules.ts
 var REACT_NATIVE_PASSTHROUGH_SPECIFIERS = [

package/dist-lib/render-mode.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/scripts/dev-server-scanner.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/sdk.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/sdk.mjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 var __defProp = Object.defineProperty;
 var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
 var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);

package/dist-lib/skills.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/swift.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/vite.cjs

@@ -1,4 +1,4 @@
-/*! rnx v0.1.516 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! rnx v0.1.518 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rnxsim",
-  "version": "0.1.516",
+  "version": "0.1.518",
   "description": "Vite and Metro plugins, testing drivers, and SDK exports for rnx.",
   "author": "Tamagui LLC",
   "license": "SEE LICENSE IN LICENSE",

package/src/cloud-contract.ts

@@ -6,7 +6,43 @@ export const RNX_CLOUD_DESIGN_MAX_STORAGE_BYTES = 1024 * 1024
 export const RNX_CLOUD_TEST_FILES_MAX_COUNT = 256
 export const RNX_CLOUD_TEST_FILES_MAX_BYTES = 500_000
 
-export type RnxCloudCommandScope = 'read' | 'drive' | 'reset' | 'media' | 'debug'
+export type RnxCloudCommandScope = 'read' | 'drive' | 'reset' | 'media' | 'debug' | 'watch'
+
+const RNX_CLOUD_COMMAND_SCOPE_SET = new Set<string>([
+  'read',
+  'drive',
+  'reset',
+  'media',
+  'debug',
+  'watch',
+])
+
+export function isRnxCloudCommandScope(value: string): value is RnxCloudCommandScope {
+  return RNX_CLOUD_COMMAND_SCOPE_SET.has(value)
+}
+
+// scoped simulator tokens: one simulator, one verb set, one expiry, one
+// origin list. minted by the full per-simulator token or the account api key,
+// never by another scoped token, and never carrying debug.
+export const RNX_CLOUD_SCOPED_TOKEN_PREFIX = 'sk_rnx_sim_'
+export const RNX_CLOUD_SCOPED_TOKEN_DEFAULT_TTL_SECONDS = 3600
+export const RNX_CLOUD_SCOPED_TOKEN_MIN_TTL_SECONDS = 1
+export const RNX_CLOUD_SCOPED_TOKEN_MAX_TTL_SECONDS = 14400
+export const RNX_CLOUD_SCOPED_TOKEN_MAX_ORIGINS = 16
+
+export interface RnxCloudScopedTokenMint {
+  scopes: RnxCloudCommandScope[]
+  ttlSeconds?: number
+  origins?: string[]
+}
+
+export interface RnxCloudScopedToken {
+  tokenId: string
+  token: string
+  scopes: RnxCloudCommandScope[]
+  expiresAt: number
+  origins: string[]
+}
 
 // one scope table for both remote planes: every bridge verb names the scope
 // that may send it, so the nano service and the box relay admit the same