@abot-ai/runtime 1.5.0 → 1.6.0

package/dist/src/cli/host-companion-bundle.mjs

@@ -2699,7 +2699,7 @@ import { lookup as lookupHost } from "node:dns/promises";
 import { isIP } from "node:net";
 
 // src/computer-access/companion/protocol.ts
-var DESKTOP_NOTIFICATION_OPERATION = "desktop_notification";
+var DESKTOP_NOTIFICATION_OPERATION = "desktop_notification", MACOS_PERMISSION_OPERATION = "macos_permissions";
 var HOST_SOCKET_PATH = "/system-host/connect";
 var HOST_OPERATIONS = [
   "system_targets",
@@ -2715,7 +2715,7 @@ function isHostOperation(value) {
   return HOST_OPERATIONS.some((operation) => operation === value);
 }
 function isHostWireOperation(value) {
-  return isHostOperation(value) || value === DESKTOP_NOTIFICATION_OPERATION ? !0 : COMPUTER_HOST_OPERATIONS.some((operation) => operation === value);
+  return isHostOperation(value) || value === DESKTOP_NOTIFICATION_OPERATION || value === MACOS_PERMISSION_OPERATION ? !0 : COMPUTER_HOST_OPERATIONS.some((operation) => operation === value);
 }
 function isHostRecord(value) {
   return value === null || typeof value != "object" ? !1 : !Array.isArray(value);
@@ -2805,10 +2805,10 @@ function hasSameNativeConnection(a, b) {
 function isAbsentFile(error) {
   return isHostRecord(error) && error.code === "ENOENT";
 }
-function createNativeHostState(directory, access4) {
+function createNativeHostState(directory, access5) {
   let connectionPath = join(directory, "connection.json"), statusPath = join(directory, "status.json");
   async function inspectPrivate(path) {
-    await access4.ensureDirectory(directory);
+    await access5.ensureDirectory(directory);
     let stat2 = await lstat(path).catch((error) => {
       if (!isAbsentFile(error))
         throw error;
@@ -2816,7 +2816,7 @@ function createNativeHostState(directory, access4) {
     if (stat2) {
       if (!stat2.isFile() || stat2.isSymbolicLink())
         throw new Error("Host companion state must be a private regular file.");
-      return await access4.assertFile(path, stat2), stat2;
+      return await access5.assertFile(path, stat2), stat2;
     }
   }
   async function readPrivate(path) {
@@ -2828,7 +2828,7 @@ function createNativeHostState(directory, access4) {
     }
   }
   async function writePrivate(path, value) {
-    await access4.ensureDirectory(directory), await readPrivate(path);
+    await access5.ensureDirectory(directory), await readPrivate(path);
     let temporary = `${path}.${randomUUID()}.tmp`;
     try {
       await writeFile(temporary, JSON.stringify(value) + `
@@ -2836,7 +2836,7 @@ function createNativeHostState(directory, access4) {
         encoding: "utf8",
         mode: 384,
         flag: "wx"
-      }), await access4.assertFile(temporary, await lstat(temporary)), await rename(temporary, path);
+      }), await access5.assertFile(temporary, await lstat(temporary)), await rename(temporary, path);
     } finally {
       await unlink(temporary).catch((error) => {
         if (!isAbsentFile(error)) throw error;
@@ -2894,7 +2894,7 @@ import { homedir as homedir4 } from "node:os";
 // src/computer-access/companion/notification-installation.ts
 import { randomUUID as randomUUID4 } from "node:crypto";
 import {
-  lstat as lstat3,
+  lstat as lstat4,
   mkdir as mkdir2,
   open,
   readFile as readFile4,
@@ -2902,7 +2902,7 @@ import {
   rm as rm2,
   writeFile as writeFile4
 } from "node:fs/promises";
-import { dirname as dirname3, isAbsolute, join as join6 } from "node:path";
+import { dirname as dirname3, isAbsolute, join as join7 } from "node:path";
 
 // src/computer-access/companion/notification-directory.ts
 import { randomUUID as randomUUID2 } from "node:crypto";
@@ -3291,7 +3291,7 @@ function sourceUrlAllowed(value) {
   var origin = connection.url.replace(/^ws:/, 'http:').replace(/^wss:/, 'https:');
   if (value.indexOf(origin + '/') !== 0) return false;
   var path = value.slice(origin.length).split('?')[0];
-  return ['/chat', '/notifications', '/home', '/learning'].indexOf(path) !== -1;
+  return ['/chat', '/notifications', '/home', '/learning', '/automations'].indexOf(path) !== -1;
 }
 ObjC.registerSubclass({
   name: 'ABotDesktopNotificationDelegate',
@@ -3414,12 +3414,50 @@ function run(args) {
 }
 `;
 
+// src/computer-access/companion/spark-notification-query.ts
+var SPARK_NOTIFICATION_QUERY_KEYS = /* @__PURE__ */ new Set([
+  "environment",
+  "spark",
+  "message",
+  "messageCreatedAt",
+  "request"
+]);
+function hasSingleAllowedSparkParameters(parameters) {
+  for (let key of parameters.keys())
+    if (!SPARK_NOTIFICATION_QUERY_KEYS.has(key) || parameters.getAll(key).length !== 1) return !1;
+  return !0;
+}
+function isSparkNotificationReference(value) {
+  return value === null || value.trim() !== value || !value.length || value.length > 512 ? !1 : !/[\u0000-\u001f\u007f]/u.test(value);
+}
+function hasCanonicalSparkMessageTimestamp(value) {
+  if (value === null) return !1;
+  let timestamp = Number(value);
+  return !Number.isSafeInteger(timestamp) || timestamp < 0 ? !1 : String(timestamp) === value;
+}
+function hasSparkMessageReference(parameters) {
+  return ["message", "messageCreatedAt", "request"].some(
+    (key) => parameters.has(key)
+  );
+}
+function hasBoundSparkNotificationQuery(url) {
+  if (url.pathname !== "/home") return !1;
+  let parameters = url.searchParams;
+  if (!hasSingleAllowedSparkParameters(parameters) || !isSparkNotificationReference(parameters.get("environment")) || parameters.get("spark") !== "1") return !1;
+  if (!hasSparkMessageReference(parameters)) return !0;
+  if (!isSparkNotificationReference(parameters.get("message")) || !hasCanonicalSparkMessageTimestamp(parameters.get("messageCreatedAt")))
+    return !1;
+  let request = parameters.get("request");
+  return request === null ? !0 : isSparkNotificationReference(request);
+}
+
 // src/computer-access/companion/notification-protocol.ts
 var DESKTOP_NOTIFICATION_CAPABILITY = "desktop_notifications_v1", DESKTOP_NOTIFICATION_PATHS = [
   "/chat",
   "/notifications",
   "/home",
-  "/learning"
+  "/learning",
+  "/automations"
 ];
 function notificationRuntimeOrigin(runtimeUrl) {
   let url = new URL(runtimeUrl);
@@ -3427,6 +3465,15 @@ function notificationRuntimeOrigin(runtimeUrl) {
     throw new Error("notification_runtime_invalid");
   return url.origin;
 }
+function hasBoundAutomationRunQuery(url) {
+  let keys = ["environment", "automation", "run"];
+  for (let key of keys)
+    if (url.searchParams.getAll(key).length !== 1 || !url.searchParams.get(key)) return !1;
+  return [...url.searchParams.keys()].every((key) => keys.includes(key));
+}
+function hasAllowedNotificationQuery(url) {
+  return url.pathname === "/automations" ? hasBoundAutomationRunQuery(url) : url.searchParams.has("spark") ? hasBoundSparkNotificationQuery(url) : [...url.searchParams.keys()].every((key) => ["environment", "session"].includes(key));
+}
 function resolveNotificationSourceUrl(value, runtimeUrl) {
   if (typeof value != "string") throw new Error("notification_url_invalid");
   if (value.length > 4096) throw new Error("notification_url_invalid");
@@ -3440,9 +3487,7 @@ function resolveNotificationSourceUrl(value, runtimeUrl) {
     throw new Error("notification_url_invalid");
   if (!DESKTOP_NOTIFICATION_PATHS.some((path) => path === url.pathname))
     throw new Error("notification_url_path_invalid");
-  if ([...url.searchParams.keys()].some(
-    (key) => !["environment", "session"].includes(key)
-  ))
+  if (!hasAllowedNotificationQuery(url))
     throw new Error("notification_url_query_invalid");
   return url.toString();
 }
@@ -3475,6 +3520,86 @@ function readDesktopNotification(value, platform, runtimeUrl) {
   };
 }
 
+// src/computer-access/companion/notification-macos-bundle.ts
+import { constants } from "node:fs";
+import { access, lstat as lstat3 } from "node:fs/promises";
+import { join as join6 } from "node:path";
+var MAC_NOTIFICATION_PLIST_SCRIPT = String.raw`
+ObjC.import('Foundation');
+function run(argv) {
+  var plist = $.NSMutableDictionary.alloc.initWithContentsOfFile($(argv[0]));
+  if (!plist) throw new Error('notification_bundle_plist_invalid');
+  if (argv[1]) {
+    var updates = JSON.parse(argv[1]);
+    Object.keys(updates).forEach(function(key) {
+      plist.setObjectForKey($(updates[key]), $(key));
+    });
+    if (!plist.writeToFileAtomically($(argv[0]), true))
+      throw new Error('notification_bundle_plist_write_failed');
+  }
+  return JSON.stringify({
+    executable: ObjC.unwrap(plist.objectForKey('CFBundleExecutable')),
+    identifier: ObjC.unwrap(plist.objectForKey('CFBundleIdentifier'))
+  });
+}
+`;
+function isBundleExecutableName(value) {
+  return typeof value != "string" || value.length === 0 || value === "." || value === ".." ? !1 : !/[\\/\u0000-\u001f\u007f]/.test(value);
+}
+async function assertBundleDirectory(path) {
+  let stat2 = await lstat3(path);
+  if (!stat2.isDirectory() || stat2.isSymbolicLink())
+    throw new Error("notification_bundle_directory_invalid");
+}
+async function assertBundleFile(path) {
+  let stat2 = await lstat3(path);
+  if (!stat2.isFile() || stat2.isSymbolicLink())
+    throw new Error("notification_bundle_file_invalid");
+}
+async function readBundleMetadata(app, run, signal) {
+  await assertBundleDirectory(app), await assertBundleDirectory(join6(app, "Contents")), await assertBundleDirectory(join6(app, "Contents", "MacOS"));
+  let plist = join6(app, "Contents", "Info.plist");
+  return await assertBundleFile(plist), JSON.parse(await run({
+    file: "/usr/bin/osascript",
+    args: ["-l", "JavaScript", "-e", MAC_NOTIFICATION_PLIST_SCRIPT, plist],
+    signal
+  }));
+}
+async function assertBundleExecutable(app, executable) {
+  if (!isBundleExecutableName(executable))
+    throw new Error("notification_bundle_executable_invalid");
+  let path = join6(app, "Contents", "MacOS", executable);
+  await assertBundleFile(path), await access(path, constants.X_OK);
+}
+async function assertMacNotificationBundle(app, run, signal) {
+  let metadata = await readBundleMetadata(app, run, signal);
+  if (metadata.identifier !== NOTIFICATION_APP_ID)
+    throw new Error("notification_bundle_identity_invalid");
+  await assertBundleExecutable(app, metadata.executable);
+}
+async function configureMacNotificationBundle(app, run) {
+  let metadata = await readBundleMetadata(app, run);
+  await assertBundleExecutable(app, metadata.executable), await run({
+    file: "/usr/bin/osascript",
+    args: [
+      "-l",
+      "JavaScript",
+      "-e",
+      MAC_NOTIFICATION_PLIST_SCRIPT,
+      join6(app, "Contents", "Info.plist"),
+      JSON.stringify({
+        CFBundleIdentifier: NOTIFICATION_APP_ID,
+        CFBundleName: "ABot",
+        CFBundleDisplayName: "ABot",
+        LSUIElement: !0,
+        OSAAppletStayOpen: !0,
+        OSAAppletShowStartupScreen: !1,
+        NSHighResolutionCapable: !0
+      })
+    ]
+  }), await assertMacNotificationBundle(app, run);
+}
+
 // src/computer-access/companion/notification-installation.ts
 function notificationLocationsFromStartup(startup) {
   return {
@@ -3485,8 +3610,8 @@ function notificationLocationsFromStartup(startup) {
   };
 }
 function linuxNotificationDesktopPath(locations) {
-  let dataHome = locations.xdgDataHome && isAbsolute(locations.xdgDataHome) ? locations.xdgDataHome : join6(locations.homeDir, ".local", "share");
-  return join6(dataHome, "applications", NOTIFICATION_APP_ID + ".desktop");
+  let dataHome = locations.xdgDataHome && isAbsolute(locations.xdgDataHome) ? locations.xdgDataHome : join7(locations.homeDir, ".local", "share");
+  return join7(dataHome, "applications", NOTIFICATION_APP_ID + ".desktop");
 }
 function desktopArgument(value) {
   return '"' + value.replaceAll("\\", "\\\\").replaceAll('"', '\\"').replaceAll("%", "%%").replaceAll("$", "\\$").replaceAll("`", "\\`") + '"';
@@ -3508,7 +3633,7 @@ function renderLinuxNotificationDesktop(runtimeUrl) {
 `);
 }
 async function assertLinuxDesktopOwnership(path) {
-  let stat2 = await lstat3(path).catch((error) => {
+  let stat2 = await lstat4(path).catch((error) => {
     if (error.code !== "ENOENT")
       throw error;
   });
@@ -3519,12 +3644,6 @@ async function assertLinuxDesktopOwnership(path) {
     throw new Error("notification_registration_not_owned");
   return !0;
 }
-function macNotificationPlist() {
-  return `<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0"><dict><key>CFBundleExecutable</key><string>applet</string><key>CFBundleIdentifier</key><string>` + NOTIFICATION_APP_ID + `</string><key>CFBundleName</key><string>ABot</string><key>CFBundleDisplayName</key><string>ABot</string><key>CFBundlePackageType</key><string>APPL</string><key>CFBundleSignature</key><string>aplt</string><key>CFBundleVersion</key><string>1</string><key>CFBundleShortVersionString</key><string>1.0</string><key>CFBundleIconFile</key><string>applet</string><key>LSUIElement</key><true/><key>OSAAppletStayOpen</key><true/><key>OSAAppletShowStartupScreen</key><false/><key>NSHighResolutionCapable</key><true/></dict></plist>
-`;
-}
 async function stopMacNotificationApp(locations, run) {
   await run({
     file: "/usr/bin/osascript",
@@ -3538,17 +3657,14 @@ async function stopMacNotificationApp(locations, run) {
   });
 }
 async function installMacNotificationApp(locations, run) {
-  let directory = notificationInstallDirectory(locations), source = join6(directory, "notification-helper.js"), temporary = join6(directory, "ABot.next.app"), app = macNotificationAppPath(locations);
+  let directory = notificationInstallDirectory(locations), source = join7(directory, "notification-helper.js"), temporary = join7(directory, "ABot.next.app"), app = macNotificationAppPath(locations);
   await writeFile4(source, renderMacNotificationApplet(locations.stateDir), {
     mode: 384
   }), await rm2(temporary, { recursive: !0, force: !0 }), await run({
     file: "/usr/bin/osacompile",
     args: ["-l", "JavaScript", "-s", "-o", temporary, source],
     timeoutMs: 3e4
-  }), await writeFile4(
-    join6(temporary, "Contents", "Info.plist"),
-    macNotificationPlist()
-  ), await run({
+  }), await configureMacNotificationBundle(temporary, run), await run({
     file: "/usr/bin/codesign",
     args: [
       "--force",
@@ -3566,12 +3682,12 @@ async function installMacNotificationApp(locations, run) {
 }
 async function installDesktopNotificationIdentity(startup, runtimeUrl, run = runNotificationProcess) {
   let locations = notificationLocationsFromStartup(startup), directory = notificationInstallDirectory(locations);
-  await ensureOwnedNotificationDirectory(locations, run), await rm2(join6(directory, ".ready"), { force: !0 }), await mkdir2(join6(directory, "pending"), { recursive: !0, mode: 448 }), await registerDesktopNotificationIdentity(
+  await ensureOwnedNotificationDirectory(locations, run), await rm2(join7(directory, ".ready"), { force: !0 }), await mkdir2(join7(directory, "pending"), { recursive: !0, mode: 448 }), await registerDesktopNotificationIdentity(
     startup.platform,
     locations,
     runtimeUrl,
     run
-  ), await writeFile4(join6(directory, ".ready"), startup.platform, { mode: 384 });
+  ), await writeFile4(join7(directory, ".ready"), startup.platform, { mode: 384 });
 }
 async function registerDesktopNotificationIdentity(platform, locations, runtimeUrl, run) {
   if (platform === "win32") {
@@ -3593,7 +3709,7 @@ async function registerDesktopNotificationIdentity(platform, locations, runtimeU
   throw new Error("notification_platform_unsupported");
 }
 async function uninstallMacNotificationApp(locations, run) {
-  let app = macNotificationAppPath(locations), stat2 = await lstat3(app).catch((error) => {
+  let app = macNotificationAppPath(locations), stat2 = await lstat4(app).catch((error) => {
     if (error.code !== "ENOENT")
       throw error;
   });
@@ -3652,7 +3768,7 @@ async function uninstallDesktopNotificationIdentity(startup, run = runNotificati
 }
 
 // src/cli/host-companion.ts
-import { join as join19 } from "node:path";
+import { join as join20 } from "node:path";
 import { createInterface } from "node:readline/promises";
 import { stdin, stdout } from "node:process";
 import { fileURLToPath } from "node:url";
@@ -3660,14 +3776,14 @@ import { fileURLToPath } from "node:url";
 // src/computer-access/companion/autostart.ts
 import { execFile } from "node:child_process";
 import {
-  lstat as lstat4,
+  lstat as lstat5,
   mkdir as mkdir3,
   readFile as readFile5,
   rename as rename3,
   unlink as unlink4,
   writeFile as writeFile5
 } from "node:fs/promises";
-import { dirname as dirname4, join as join7, posix } from "node:path";
+import { dirname as dirname4, join as join8, posix } from "node:path";
 import { promisify } from "node:util";
 import { randomUUID as randomUUID5 } from "node:crypto";
 var executeFile = promisify(execFile), LABEL = "com.abot.host-companion", OWNER_MARKER = "ABot managed native host companion";
@@ -3692,18 +3808,18 @@ function vbsString(value) {
   return `"${value.replaceAll('"', '""')}"`;
 }
 function linuxConfigHome(options) {
-  return options.xdgConfigHome ? posix.isAbsolute(options.xdgConfigHome) ? options.xdgConfigHome : join7(options.homeDir, ".config") : join7(options.homeDir, ".config");
+  return options.xdgConfigHome ? posix.isAbsolute(options.xdgConfigHome) ? options.xdgConfigHome : join8(options.homeDir, ".config") : join8(options.homeDir, ".config");
 }
 function nativeAutostartFile(options) {
   if (options.platform === "linux")
-    return join7(linuxConfigHome(options), "autostart", `${LABEL}.desktop`);
+    return join8(linuxConfigHome(options), "autostart", `${LABEL}.desktop`);
   if (options.platform === "darwin")
-    return join7(options.homeDir, "Library", "LaunchAgents", `${LABEL}.plist`);
+    return join8(options.homeDir, "Library", "LaunchAgents", `${LABEL}.plist`);
   if (options.platform !== "win32")
     throw new Error("Automatic host startup supports Windows and macOS only.");
   if (!options.appData)
     throw new Error("Windows APPDATA is unavailable for current-user startup.");
-  return join7(
+  return join8(
     options.appData,
     "Microsoft",
     "Windows",
@@ -3753,8 +3869,8 @@ X-GNOME-Autostart-enabled=true
 <key>LimitLoadToSessionType</key><string>Aqua</string>
 <key>ProcessType</key><string>Interactive</string>
 <key>WorkingDirectory</key><string>${xmlText(options.homeDir)}</string>
-<key>StandardOutPath</key><string>${xmlText(join7(options.stateDir, "agent.log"))}</string>
-<key>StandardErrorPath</key><string>${xmlText(join7(options.stateDir, "agent.log"))}</string>
+<key>StandardOutPath</key><string>${xmlText(join8(options.stateDir, "agent.log"))}</string>
+<key>StandardErrorPath</key><string>${xmlText(join8(options.stateDir, "agent.log"))}</string>
 </dict></plist>
 `;
 }
@@ -3762,7 +3878,7 @@ function errorCode(error) {
   return error && typeof error == "object" && "code" in error ? error.code : void 0;
 }
 async function existingOwnedRegistration(path) {
-  let stat2 = await lstat4(path).catch((error) => {
+  let stat2 = await lstat5(path).catch((error) => {
     if (errorCode(error) !== "ENOENT")
       throw error;
   });
@@ -3853,34 +3969,9 @@ function nativeOperatingSystem(platform) {
 var import_stream = __toESM(require_stream(), 1), import_extension = __toESM(require_extension(), 1), import_permessage_deflate = __toESM(require_permessage_deflate(), 1), import_receiver = __toESM(require_receiver(), 1), import_sender = __toESM(require_sender(), 1), import_subprotocol = __toESM(require_subprotocol(), 1), import_websocket = __toESM(require_websocket(), 1), import_websocket_server = __toESM(require_websocket_server(), 1);
 var wrapper_default = import_websocket.default;
 
-// src/computer-access/companion/native-loopback-lookup.ts
-function matchesLookupFamily(address, family) {
-  return family === 4 || family === "IPv4" ? address.family === 4 : family === 6 || family === "IPv6" ? address.family === 6 : family === void 0 || family === 0;
-}
-function nativeLoopbackSocketOptions(endpoint) {
-  let expectedHostname = new URL(endpoint.url).hostname.toLowerCase();
-  return {
-    family: 0,
-    autoSelectFamily: !0,
-    autoSelectFamilyAttemptTimeout: 250,
-    lookup(hostname2, options, callback) {
-      if (!(hostname2.toLowerCase() === expectedHostname)) {
-        callback(Object.assign(new Error("Unexpected Runtime lookup hostname."), { code: "ENOTFOUND" }), []);
-        return;
-      }
-      let addresses = endpoint.addresses.filter((address) => matchesLookupFamily(address, options.family));
-      if (addresses.length === 0) {
-        callback(Object.assign(new Error("No validated Runtime address for this family."), { code: "ENOTFOUND" }), []);
-        return;
-      }
-      if (options.all) {
-        callback(null, addresses.map(({ address, family }) => ({ address, family })));
-        return;
-      }
-      callback(null, addresses[0].address, addresses[0].family);
-    }
-  };
-}
+// src/computer-access/companion/native-permissions.ts
+import { execFile as execFile3 } from "node:child_process";
+import { promisify as promisify3 } from "node:util";
 
 // src/plugin-sdk/parameters.ts
 var PluginParameterError = class extends TypeError {
@@ -3946,8 +4037,21 @@ function runtimeToolPathErrorCode(error) {
     return error.code;
 }
 
+// src/capabilities/tool-context-text.ts
+function hasValidToolContextText(carrier) {
+  let fields = carrier.contextTextFields;
+  if (fields === void 0) return !0;
+  if (!Array.isArray(fields) || fields.length === 0 || fields.length > 3 || new Set(fields).size !== fields.length) return !1;
+  for (let field of fields)
+    if (!isContextTextField(field) || typeof carrier[field] != "string") return !1;
+  return !0;
+}
+function isContextTextField(value) {
+  return value === "output" || value === "stdout" || value === "stderr";
+}
+
 // src/plugin-sdk/results.ts
-var PLUGIN_RESULT_SERIALIZED_MAX_BYTES = 128 * 1024;
+var PLUGIN_RESULT_SERIALIZED_MAX_BYTES = 262144;
 function resultBoundsFailure(code, message) {
   return {
     ok: !1,
@@ -3957,56 +4061,75 @@ function resultBoundsFailure(code, message) {
     errorCode: code
   };
 }
-function enforcePluginResultByteBudget(result) {
-  let serialized;
+function enforcePluginResultByteBudget(result, resultBudget) {
+  let requiresContextTextHost = !1, serializedBytes, envelopeBytes, maxBytes = PLUGIN_RESULT_SERIALIZED_MAX_BYTES, fitsDeclaredBudget = !0;
   try {
+    if (!hasValidToolContextText(result))
+      return resultBoundsFailure(
+        "plugin_context_text_invalid",
+        "The plugin declared invalid context text fields."
+      );
+    if (requiresContextTextHost = result.contextTextFields !== void 0, requiresContextTextHost && resultBudget?.acceptsContextText !== !0)
+      return resultBoundsFailure(
+        "plugin_context_text_unavailable",
+        "The host does not support context-managed tool text."
+      );
     let candidate = JSON.stringify(result);
     if (candidate === void 0)
       return resultBoundsFailure(
         "plugin_result_not_json_safe",
         "The plugin produced a result that is not JSON-safe."
       );
-    serialized = candidate;
+    let assessment = resultBudget?.assess(result);
+    serializedBytes = assessment?.serializedBytes ?? Buffer.byteLength(candidate, "utf8"), envelopeBytes = assessment?.envelopeBytes ?? serializedBytes, maxBytes = Math.min(assessment?.maxBytes ?? maxBytes, maxBytes), fitsDeclaredBudget = assessment?.fits ?? !0;
   } catch {
     return resultBoundsFailure(
       "plugin_result_not_json_safe",
       "The plugin produced a result that is not JSON-safe."
     );
   }
-  return Buffer.byteLength(serialized, "utf8") > PLUGIN_RESULT_SERIALIZED_MAX_BYTES ? resultBoundsFailure(
-    "plugin_result_too_large",
-    `The plugin result exceeds the ${PLUGIN_RESULT_SERIALIZED_MAX_BYTES}-byte safety limit.`
-  ) : result;
-}
-function successResult(input) {
-  return enforcePluginResultByteBudget({
-    ok: !0,
-    ...input.media !== void 0 ? { media: input.media } : {},
-    output: input.output,
-    producedNewInformation: input.producedNewInformation ?? !0,
-    ...input.progress !== void 0 ? { progress: input.progress } : {},
-    ...input.actions !== void 0 ? { actions: input.actions } : {},
-    ...input.exitCode !== void 0 ? { exitCode: input.exitCode } : {},
-    ...input.stdout !== void 0 ? { stdout: input.stdout } : {},
-    ...input.stderr !== void 0 ? { stderr: input.stderr } : {},
-    ...input.data !== void 0 ? { data: input.data } : {}
-  });
+  if (!(fitsDeclaredBudget && envelopeBytes <= maxBytes)) {
+    let message = requiresContextTextHost ? `The plugin result envelope is ${envelopeBytes} bytes (${serializedBytes} total bytes) and exceeds the ${maxBytes}-byte delivery limit.` : `The plugin result is ${serializedBytes} bytes and exceeds the ${maxBytes}-byte delivery limit.`;
+    return resultBoundsFailure("plugin_result_too_large", message);
+  }
+  return result;
 }
-function failureResult(input) {
-  return enforcePluginResultByteBudget({
-    ok: !1,
-    ...input.media !== void 0 ? { media: input.media } : {},
-    output: input.output ?? input.message,
-    producedNewInformation: !1,
-    ...input.progress !== void 0 ? { progress: input.progress } : {},
-    ...input.actions !== void 0 ? { actions: input.actions } : {},
-    ...input.exitCode !== void 0 ? { exitCode: input.exitCode } : {},
-    ...input.stdout !== void 0 ? { stdout: input.stdout } : {},
-    ...input.stderr !== void 0 ? { stderr: input.stderr } : {},
-    ...input.data !== void 0 ? { data: input.data } : {},
-    error: input.message,
-    errorCode: input.errorCode
-  });
+function successResult(input, resultBudget) {
+  return enforcePluginResultByteBudget(
+    {
+      ok: !0,
+      ...input.media !== void 0 ? { media: input.media } : {},
+      output: input.output,
+      producedNewInformation: input.producedNewInformation ?? !0,
+      ...input.progress !== void 0 ? { progress: input.progress } : {},
+      ...input.actions !== void 0 ? { actions: input.actions } : {},
+      ...input.exitCode !== void 0 ? { exitCode: input.exitCode } : {},
+      ...input.stdout !== void 0 ? { stdout: input.stdout } : {},
+      ...input.stderr !== void 0 ? { stderr: input.stderr } : {},
+      ...input.data !== void 0 ? { data: input.data } : {}
+    },
+    resultBudget
+  );
+}
+function failureResult(input, resultBudget) {
+  return enforcePluginResultByteBudget(
+    {
+      ok: !1,
+      ...input.interruption ? { interruption: input.interruption } : {},
+      ...input.media !== void 0 ? { media: input.media } : {},
+      output: input.output ?? input.message,
+      producedNewInformation: !1,
+      ...input.progress !== void 0 ? { progress: input.progress } : {},
+      ...input.actions !== void 0 ? { actions: input.actions } : {},
+      ...input.exitCode !== void 0 ? { exitCode: input.exitCode } : {},
+      ...input.stdout !== void 0 ? { stdout: input.stdout } : {},
+      ...input.stderr !== void 0 ? { stderr: input.stderr } : {},
+      ...input.data !== void 0 ? { data: input.data } : {},
+      error: input.message,
+      errorCode: input.errorCode
+    },
+    resultBudget
+  );
 }
 function failureFromError(error, options) {
   let pathCode = runtimeToolPathErrorCode(error), parameterCode = isPluginParameterError(error) ? error.code : void 0, errorCode2 = pathCode ?? parameterCode ?? options.fallbackCode, message = pathCode ?? parameterCode ?? options.fallbackMessage;
@@ -4017,6 +4140,145 @@ function failureFromError(error, options) {
   });
 }
 
+// src/computer-access/computer/macos-permission-helper.ts
+var MACOS_PERMISSION_GATE = String.raw`
+func prepareMacPermissions(
+  action: String,
+  screenGranted: () -> Bool,
+  accessibilityGranted: () -> Bool,
+  requestScreen: () -> Void,
+  requestAccessibility: () -> Void
+) -> [String: String] {
+  if action == "screen_recording" && !screenGranted() { requestScreen() }
+  if action == "accessibility" && !accessibilityGranted() { requestAccessibility() }
+  return ["screenRecording": screenGranted() ? "granted" : "required",
+    "accessibility": accessibilityGranted() ? "granted" : "required"]
+}
+`, MACOS_PERMISSION_INPUT = String.raw`
+let action = CommandLine.arguments.last ?? "check"
+guard ["check", "screen_recording", "accessibility"].contains(action) else { exit(2) }
+`, MACOS_PERMISSION_HELPER = String.raw`
+import Foundation
+import CoreGraphics
+import ApplicationServices
+${MACOS_PERMISSION_GATE}
+${MACOS_PERMISSION_INPUT}
+let result = prepareMacPermissions(
+  action: action,
+  screenGranted: { CGPreflightScreenCaptureAccess() },
+  accessibilityGranted: { AXIsProcessTrusted() },
+  requestScreen: { _ = CGRequestScreenCaptureAccess() },
+  requestAccessibility: {
+    let options = [kAXTrustedCheckOptionPrompt.takeUnretainedValue() as String: true] as CFDictionary
+    _ = AXIsProcessTrustedWithOptions(options)
+  }
+)
+let data = try JSONSerialization.data(withJSONObject: result)
+print(String(data: data, encoding: .utf8)!)
+`;
+
+// src/computer-access/computer/macos-prerequisites.ts
+import { execFile as execFile2 } from "node:child_process";
+import { access as access2 } from "node:fs/promises";
+import { promisify as promisify2 } from "node:util";
+var executeFile2 = promisify2(execFile2);
+async function missingMacosComputerPrerequisite() {
+  try {
+    let version = await executeFile2("/usr/bin/sw_vers", ["-productVersion"], {
+      timeout: 1e3,
+      maxBuffer: 1024
+    }), major = Number(version.stdout.trim().split(".")[0]);
+    if (!Number.isInteger(major) || major < 14)
+      return "macos14_computer_backend_required";
+    let directory = await executeFile2("/usr/bin/xcode-select", ["-p"], {
+      timeout: 1e3,
+      maxBuffer: 4096
+    });
+    await access2(directory.stdout.trim());
+    return;
+  } catch {
+    return "macos_swift_developer_tools_required";
+  }
+}
+
+// src/computer-access/companion/permission-protocol.ts
+var MACOS_PERMISSION_CAPABILITY = "macos_permission_preflight_v1";
+function isMacPermissionAction(value) {
+  return !isHostRecord(value) || Object.keys(value).some((key) => !["action", "permission"].includes(key)) ? !1 : value.action === "check" ? !Object.hasOwn(value, "permission") : value.action !== "request" ? !1 : value.permission === "screen_recording" || value.permission === "accessibility";
+}
+function isMacPermissionStatus(value) {
+  return !isHostRecord(value) || Object.keys(value).some((key) => !["screenRecording", "accessibility"].includes(key)) || value.screenRecording !== "granted" && value.screenRecording !== "required" ? !1 : value.accessibility === "granted" || value.accessibility === "required";
+}
+
+// src/computer-access/companion/native-permissions.ts
+var executeFile3 = promisify3(execFile3);
+async function prepareMacPermissions(action, signal, dependencies = {}) {
+  if ((dependencies.platform ?? process.platform) !== "darwin")
+    throw new Error("macos_permissions_platform_required");
+  if (!isMacPermissionAction(action)) throw new Error("macos_permissions_input_invalid");
+  signal?.throwIfAborted();
+  let prerequisite = await (dependencies.prerequisite ?? missingMacosComputerPrerequisite)();
+  if (prerequisite) throw new Error(prerequisite);
+  let requested = action.action === "request" ? action.permission : "check", output = await (dependencies.execute ?? executeFile3)(
+    "/usr/bin/swift",
+    ["-swift-version", "5", "-e", MACOS_PERMISSION_HELPER, requested],
+    { timeout: 45e3, maxBuffer: 16384, encoding: "utf8", signal }
+  ), permissions = JSON.parse(String(output.stdout));
+  if (!isMacPermissionStatus(permissions)) throw new Error("macos_permissions_result_invalid");
+  return {
+    permissions,
+    executablePath: process.execPath,
+    restartMayBeRequired: requested === "screen_recording"
+  };
+}
+function createNativePermissionHandlers(platform, prepare = prepareMacPermissions) {
+  return platform !== "macos" ? {} : {
+    [MACOS_PERMISSION_OPERATION]: async (params, context) => {
+      let { target, ...action } = params;
+      if (target !== "macos" || !isMacPermissionAction(action))
+        return failureResult({ errorCode: "macos_permissions_input_invalid", message: "Choose a permission check or one explicit permission request." });
+      try {
+        let result = await prepare(action, context?.abortSignal);
+        return successResult({ output: "Mac permission preparation completed.", data: result });
+      } catch {
+        return failureResult({
+          errorCode: "macos_permissions_check_failed",
+          message: "Permission preparation could not complete. Check that macOS 14 or later and Swift developer tools are available, then check again. No desktop content was collected."
+        });
+      }
+    }
+  };
+}
+
+// src/computer-access/companion/native-loopback-lookup.ts
+function matchesLookupFamily(address, family) {
+  return family === 4 || family === "IPv4" ? address.family === 4 : family === 6 || family === "IPv6" ? address.family === 6 : family === void 0 || family === 0;
+}
+function nativeLoopbackSocketOptions(endpoint) {
+  let expectedHostname = new URL(endpoint.url).hostname.toLowerCase();
+  return {
+    family: 0,
+    autoSelectFamily: !0,
+    autoSelectFamilyAttemptTimeout: 250,
+    lookup(hostname2, options, callback) {
+      if (!(hostname2.toLowerCase() === expectedHostname)) {
+        callback(Object.assign(new Error("Unexpected Runtime lookup hostname."), { code: "ENOTFOUND" }), []);
+        return;
+      }
+      let addresses = endpoint.addresses.filter((address) => matchesLookupFamily(address, options.family));
+      if (addresses.length === 0) {
+        callback(Object.assign(new Error("No validated Runtime address for this family."), { code: "ENOTFOUND" }), []);
+        return;
+      }
+      if (options.all) {
+        callback(null, addresses.map(({ address, family }) => ({ address, family })));
+        return;
+      }
+      callback(null, addresses[0].address, addresses[0].family);
+    }
+  };
+}
+
 // src/computer-access/companion/notification-linux.ts
 import { spawn as spawn2 } from "node:child_process";
 function notificationMarkupText(value) {
@@ -4169,24 +4431,22 @@ var LinuxNotificationRenderer = class {
 };
 
 // src/computer-access/companion/notification-readiness.ts
-import { access, readFile as readFile6 } from "node:fs/promises";
-import { join as join8 } from "node:path";
+import { access as access3, readFile as readFile6 } from "node:fs/promises";
+import { join as join9 } from "node:path";
 async function hasDesktopNotificationSupport(platform, locations, run = runNotificationProcess, signal) {
   signal?.throwIfAborted();
   try {
     if (!await hasOwnedNotificationDirectory(locations)) return !1;
     let ready = await readFile6(
-      join8(notificationInstallDirectory(locations), ".ready"),
+      join9(notificationInstallDirectory(locations), ".ready"),
       "utf8"
     ), expected = { windows: "win32", macos: "darwin", linux: "linux" }[platform];
     if (ready !== expected) return !1;
     if (platform === "windows") return !0;
     if (platform === "macos")
-      return await access(
-        join8(macNotificationAppPath(locations), "Contents", "MacOS", "applet")
-      ), !0;
+      return await assertMacNotificationBundle(macNotificationAppPath(locations), run, signal), !0;
     if (!process.env.DISPLAY && !process.env.WAYLAND_DISPLAY) return !1;
-    await access(linuxNotificationDesktopPath(locations)), signal?.throwIfAborted();
+    await access3(linuxNotificationDesktopPath(locations)), signal?.throwIfAborted();
     let help = await run({ file: "notify-send", args: ["--help"], signal });
     return signal?.throwIfAborted(), ["--wait", "--action", "--print-id"].every(
       (option) => help.includes(option)
@@ -4298,9 +4558,9 @@ async function createNativeNotificationSession(platform, runtimeUrl, locations =
 import { createHash, randomUUID as randomUUID7 } from "node:crypto";
 
 // src/computer-access/targets.ts
-import { constants } from "node:fs";
-import { access as access2 } from "node:fs/promises";
-import { delimiter, join as join9 } from "node:path";
+import { constants as constants2 } from "node:fs";
+import { access as access4 } from "node:fs/promises";
+import { delimiter, join as join10 } from "node:path";
 
 // src/computer-access/contracts.ts
 var SystemOperationError = class extends Error {
@@ -4444,11 +4704,11 @@ if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }`;
 async function findExecutable(name, additional = []) {
   let candidates = [
     ...additional,
-    ...(process.env.PATH ?? "").split(delimiter).filter(Boolean).map((directory) => join9(directory, name))
+    ...(process.env.PATH ?? "").split(delimiter).filter(Boolean).map((directory) => join10(directory, name))
   ];
   for (let candidate of candidates)
     try {
-      return await access2(candidate, constants.X_OK), candidate;
+      return await access4(candidate, constants2.X_OK), candidate;
     } catch {
     }
 }
@@ -4465,7 +4725,7 @@ async function resolveSystemTarget(id, run = runSystemProcess) {
       "system_target_unavailable",
       "No Windows execution transport is available on this host."
     );
-  let canonicalShell = nativeWindows ? join9(
+  let canonicalShell = nativeWindows ? join10(
     process.env.SystemRoot ?? "C:\\Windows",
     "System32",
     "WindowsPowerShell",
@@ -4502,7 +4762,7 @@ function isNativeUnixTarget(id) {
 }
 async function resolveNativeUnixTarget(id) {
   try {
-    await access2("/bin/bash", constants.X_OK);
+    await access4("/bin/bash", constants2.X_OK);
   } catch {
     throw new SystemOperationError(
       "system_target_unavailable",
@@ -5904,7 +6164,7 @@ func capability(_ available: Bool,_ reason: String = "",supported: Bool = true)
   return result
 }
 func rectJSON(_ rect: CGRect) -> [String:Any] {
-  return ["x":rect.minX,"y":rect.minY,"width":rect.width,"height":rect.height]
+  return ["x":Double(rect.minX),"y":Double(rect.minY),"width":Double(rect.width),"height":Double(rect.height)]
 }
 func boundedText(_ value:String,_ limit:Int=256) -> String {
   var result="",length=0
@@ -6209,12 +6469,9 @@ final class CancellationFlag {
     }
   }
 }
-let keyCodes:[String:CGKeyCode] = ["a":0,"s":1,"d":2,"f":3,"h":4,"g":5,"z":6,"x":7,"c":8,"v":9,"b":11,"q":12,"w":13,"e":14,"r":15,"y":16,"t":17,"1":18,"2":19,"3":20,"4":21,"6":22,"5":23,"=":24,"9":25,"7":26,"-":27,"8":28,"0":29,"]":30,"o":31,"u":32,"[":33,"i":34,"p":35,"l":37,"j":38,"'":39,"k":40,";":41,"\\":42,",":43,"/":44,"n":45,"m":46,".":47,"\u{60}":50,"Enter":36,"Return":36,"Tab":48,"Space":49,"Backspace":51,"Delete":117,"Esc":53,"Escape":53,"Meta":55,"Super":55,"Command":55,"Shift":56,"Alt":58,"Option":58,"Ctrl":59,"Control":59,"F1":122,"F2":120,"F3":99,"F4":118,"F5":96,"F6":97,"F7":98,"F8":100,"F9":101,"F10":109,"F11":103,"F12":111,"Home":115,"End":119,"PageUp":116,"PageDown":121,"ArrowLeft":123,"ArrowRight":124,"ArrowDown":125,"ArrowUp":126]
+let keyCodes:[String:CGKeyCode] = ["a":0,"s":1,"d":2,"f":3,"h":4,"g":5,"z":6,"x":7,"c":8,"v":9,"b":11,"q":12,"w":13,"e":14,"r":15,"y":16,"t":17,"1":18,"2":19,"3":20,"4":21,"6":22,"5":23,"=":24,"9":25,"7":26,"-":27,"8":28,"0":29,"]":30,"o":31,"u":32,"[":33,"i":34,"p":35,"l":37,"j":38,"'":39,"k":40,";":41,"\\":42,",":43,"/":44,"n":45,"m":46,".":47,"\u{60}":50,"enter":36,"return":36,"tab":48,"space":49,"backspace":51,"delete":117,"esc":53,"escape":53,"meta":55,"super":55,"command":55,"cmd":55,"shift":56,"alt":58,"option":58,"ctrl":59,"control":59,"f1":122,"f2":120,"f3":99,"f4":118,"f5":96,"f6":97,"f7":98,"f8":100,"f9":101,"f10":109,"f11":103,"f12":111,"home":115,"end":119,"pageup":116,"pagedown":121,"arrowleft":123,"arrowright":124,"arrowdown":125,"arrowup":126]
 func nativeKey(_ value:String) throws -> CGKeyCode {
-  if let key=keyCodes[value] {
-    return key
-  }
-  if value.count==1,let key=keyCodes[value.lowercased()] {
+  if let key=keyCodes[value.lowercased()] {
     return key
   }
   throw NativeFailure("macos_key_unsupported")
@@ -6597,30 +6854,6 @@ RunLoop.main.run()
 ].join(`
 `);
 
-// src/computer-access/computer/macos-prerequisites.ts
-import { execFile as execFile2 } from "node:child_process";
-import { access as access3 } from "node:fs/promises";
-import { promisify as promisify2 } from "node:util";
-var executeFile2 = promisify2(execFile2);
-async function missingMacosComputerPrerequisite() {
-  try {
-    let version = await executeFile2("/usr/bin/sw_vers", ["-productVersion"], {
-      timeout: 1e3,
-      maxBuffer: 1024
-    }), major = Number(version.stdout.trim().split(".")[0]);
-    if (!Number.isInteger(major) || major < 14)
-      return "macos14_computer_backend_required";
-    let directory = await executeFile2("/usr/bin/xcode-select", ["-p"], {
-      timeout: 1e3,
-      maxBuffer: 4096
-    });
-    await access3(directory.stdout.trim());
-    return;
-  } catch {
-    return "macos_swift_developer_tools_required";
-  }
-}
-
 // src/computer-access/computer/macos-backend.ts
 function createMacosComputerBackend(target) {
   if (target.id !== "macos" || target.transport !== "native")
@@ -9093,7 +9326,7 @@ var NativeObservationSession = class {
 // src/computer-access/application-catalog.ts
 import { readdir, readFile as readFile7 } from "node:fs/promises";
 import { homedir as homedir3 } from "node:os";
-import { basename as basename3, join as join10 } from "node:path";
+import { basename as basename3, join as join11 } from "node:path";
 var CATALOG_ENTRY_LIMIT = 2e3;
 function isAbsentOptionalCatalogRoot(error, depth) {
   return depth !== 0 || !(error instanceof Error) ? !1 : "code" in error && error.code === "ENOENT";
@@ -9121,7 +9354,7 @@ async function collectApplicationPaths(roots, extension2) {
         complete = !1;
         break;
       }
-      let absolute = join10(current.path, entry.name);
+      let absolute = join11(current.path, entry.name);
       if (entry.name.endsWith(extension2)) {
         paths.push(absolute);
         continue;
@@ -9200,7 +9433,7 @@ async function readSystemApplications(target, run) {
     let roots2 = [
       "/Applications",
       "/System/Applications",
-      join10(homedir3(), "Applications")
+      join11(homedir3(), "Applications")
     ], catalog2 = await collectApplicationPaths(roots2, ".app");
     return {
       applications: catalog2.paths.map((id) => ({
@@ -9217,8 +9450,8 @@ async function readSystemApplications(target, run) {
       }
     };
   }
-  let dataHome = process.env.XDG_DATA_HOME ?? join10(homedir3(), ".local", "share"), dataDirs = (process.env.XDG_DATA_DIRS ?? "/usr/local/share:/usr/share").split(":"), roots = [dataHome, ...dataDirs].map(
-    (directory) => join10(directory, "applications")
+  let dataHome = process.env.XDG_DATA_HOME ?? join11(homedir3(), ".local", "share"), dataDirs = (process.env.XDG_DATA_DIRS ?? "/usr/local/share:/usr/share").split(":"), roots = [dataHome, ...dataDirs].map(
+    (directory) => join11(directory, "applications")
   ), catalog = await collectApplicationPaths(roots, ".desktop"), applications = [], complete = catalog.complete;
   for (let path of catalog.paths) {
     let content;
@@ -9729,6 +9962,7 @@ function readNativeServerMessage(text) {
   };
 }
 var NATIVE_OPERATION_FIELDS = {
+  macos_permissions: ["target", "action", "permission"],
   desktop_notification: ["target", "notificationId", "title", "body", "url"],
   system_targets: [],
   system_command: ["target", "command", "cwd", "elevated", "timeout_ms"],
@@ -9788,7 +10022,8 @@ async function connectNativeHost(options) {
   let handlers = options.handlers ?? {
     ...createSystemHandlers(),
     ...computers.handlers(),
-    ...notifications.handlers()
+    ...notifications.handlers(),
+    ...createNativePermissionHandlers(options.identity.os)
   };
   return new Promise((resolve2) => {
     let socket = new wrapper_default(endpoint.url, {
@@ -9935,9 +10170,10 @@ async function connectNativeHost(options) {
         capabilities: [
           OBSERVATION_CAPABILITY,
           COMPUTER_CAPABILITY,
+          ...options.identity.os === "macos" ? [MACOS_PERMISSION_CAPABILITY] : [],
           ...advertisedNotificationReady ? [DESKTOP_NOTIFICATION_CAPABILITY] : []
         ],
-        companionVersion: 6,
+        companionVersion: 10,
         ...hostId ? { hostId } : {}
       });
     }), socket.on("message", (data, binary) => {
@@ -10064,10 +10300,10 @@ async function runNativeHostSupervisor(options) {
 }
 
 // src/computer-access/companion/process-owner-identity.ts
-import { execFile as execFile3 } from "node:child_process";
+import { execFile as execFile4 } from "node:child_process";
 import { readFile as readFile8 } from "node:fs/promises";
-import { promisify as promisify3 } from "node:util";
-var executeFile3 = promisify3(execFile3), WINDOWS_OWNER_SCRIPT = `
+import { promisify as promisify4 } from "node:util";
+var executeFile4 = promisify4(execFile4), WINDOWS_OWNER_SCRIPT = `
 $ErrorActionPreference = 'Stop'
 $targetPid = [int]$env:ABOT_HOST_OWNER_PID
 $target = Get-Process -Id $targetPid -ErrorAction Stop
@@ -10183,7 +10419,7 @@ var nativeProbe = createProcessOwnerIdentityProbe({
   platform: process.platform,
   currentPid: process.pid,
   readText: (path) => readFile8(path, "utf8"),
-  execute: async (file, args, options) => (await executeFile3(file, [...args], options)).stdout,
+  execute: async (file, args, options) => (await executeFile4(file, [...args], options)).stdout,
   processIsAlive: observePidLiveness
 }), readProcessOwnerIdentity = nativeProbe.readProcessOwnerIdentity, isProcessOwnerAlive = nativeProbe.isProcessOwnerAlive, requireCurrentProcessOwnerIdentity = nativeProbe.requireCurrentProcessOwnerIdentity;
 
@@ -10192,7 +10428,7 @@ import { randomUUID as randomUUID9 } from "node:crypto";
 
 // src/runtime/adapters/long-term-memory/file-lock/cleanup.ts
 import { rmdir, unlink as unlink5 } from "node:fs/promises";
-import { join as join11 } from "node:path";
+import { join as join12 } from "node:path";
 
 // src/runtime/adapters/long-term-memory/file-lock/contracts.ts
 var LEASE_DIRECTORY_NAME = "lease", OWNER_FILE_PATTERN = /^owner-([0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12})\.json$/iu;
@@ -10209,7 +10445,7 @@ function fileSystemErrorCode(error) {
 // src/runtime/adapters/long-term-memory/file-lock/cleanup.ts
 async function removeObservedOwner(lockPath, observedOwnerFileName) {
   try {
-    await unlink5(join11(lockPath, LEASE_DIRECTORY_NAME, observedOwnerFileName));
+    await unlink5(join12(lockPath, LEASE_DIRECTORY_NAME, observedOwnerFileName));
   } catch (error) {
     if (fileSystemErrorCode(error) === "ENOENT") return !1;
     throw error;
@@ -10217,7 +10453,7 @@ async function removeObservedOwner(lockPath, observedOwnerFileName) {
   return removeEmptyLockTree(lockPath, !0);
 }
 async function removeEmptyLockTree(lockPath, hasLeaseDirectory) {
-  return hasLeaseDirectory && !await removeDirectoryIfEmpty(join11(lockPath, LEASE_DIRECTORY_NAME)) ? !1 : removeDirectoryIfEmpty(lockPath);
+  return hasLeaseDirectory && !await removeDirectoryIfEmpty(join12(lockPath, LEASE_DIRECTORY_NAME)) ? !1 : removeDirectoryIfEmpty(lockPath);
 }
 async function removeDirectoryIfEmpty(path) {
   try {
@@ -10245,7 +10481,7 @@ async function removeStagingLock(stagingPath, stagingOwnerPath) {
 
 // src/runtime/adapters/long-term-memory/file-lock/install.ts
 import { mkdir as mkdir4, open as open2, rename as rename4 } from "node:fs/promises";
-import { join as join12 } from "node:path";
+import { join as join13 } from "node:path";
 
 // src/runtime/adapters/long-term-memory/file-lock/owner-identity.ts
 function isLockOwnerIdentity(value) {
@@ -10259,7 +10495,7 @@ function hasValidOptionalLockOwnerIdentity(value) {
 async function installLockDirectory(lockPath, token, ownerIdentity) {
   if (!hasValidOptionalLockOwnerIdentity(ownerIdentity))
     throw new Error("file_lock_owner_identity_invalid");
-  let stagingPath = `${lockPath}.${process.pid}.${token}.pending`, stagingOwnerPath = join12(stagingPath, ownerFileName(token)), handle, claimedLockPath = !1, installed = !1;
+  let stagingPath = `${lockPath}.${process.pid}.${token}.pending`, stagingOwnerPath = join13(stagingPath, ownerFileName(token)), handle, claimedLockPath = !1, installed = !1;
   try {
     await mkdir4(stagingPath, { mode: 448 }), handle = await open2(stagingOwnerPath, "wx", 384), await handle.writeFile(
       JSON.stringify({
@@ -10269,7 +10505,7 @@ async function installLockDirectory(lockPath, token, ownerIdentity) {
         ...ownerIdentity === void 0 ? {} : { ownerIdentity }
       }),
       "utf8"
-    ), await handle.sync(), await handle.close(), handle = void 0, await mkdir4(lockPath, { mode: 448 }), claimedLockPath = !0, await rename4(stagingPath, join12(lockPath, LEASE_DIRECTORY_NAME)), installed = !0;
+    ), await handle.sync(), await handle.close(), handle = void 0, await mkdir4(lockPath, { mode: 448 }), claimedLockPath = !0, await rename4(stagingPath, join13(lockPath, LEASE_DIRECTORY_NAME)), installed = !0;
   } finally {
     await handle?.close().catch(() => {
     }), installed || (await removeStagingLock(stagingPath, stagingOwnerPath), claimedLockPath && await removeDirectoryIfEmpty(lockPath));
@@ -10277,19 +10513,19 @@ async function installLockDirectory(lockPath, token, ownerIdentity) {
 }
 
 // src/runtime/adapters/long-term-memory/file-lock/snapshot.ts
-import { lstat as lstat5, readdir as readdir2 } from "node:fs/promises";
-import { join as join14 } from "node:path";
+import { lstat as lstat6, readdir as readdir2 } from "node:fs/promises";
+import { join as join15 } from "node:path";
 
 // src/runtime/adapters/long-term-memory/file-lock/owner-record.ts
-import { constants as constants2 } from "node:fs";
+import { constants as constants3 } from "node:fs";
 import { open as open3 } from "node:fs/promises";
-import { join as join13 } from "node:path";
+import { join as join14 } from "node:path";
 async function readOwnerRecord(lockPath, entryName, expectedToken, directoryModifiedAtMs) {
   let handle;
   try {
     handle = await open3(
-      join13(lockPath, LEASE_DIRECTORY_NAME, entryName),
-      constants2.O_RDONLY | constants2.O_NOFOLLOW
+      join14(lockPath, LEASE_DIRECTORY_NAME, entryName),
+      constants3.O_RDONLY | constants3.O_NOFOLLOW
     );
     let before = await handle.stat({ bigint: !0 }), modifiedAtMs = Math.max(
       directoryModifiedAtMs,
@@ -10406,16 +10642,16 @@ async function readLockSnapshot(lockPath) {
 }
 async function readLockInfo(lockPath) {
   try {
-    return await lstat5(lockPath);
+    return await lstat6(lockPath);
   } catch (error) {
     if (fileSystemErrorCode(error) === "ENOENT") return;
     throw error;
   }
 }
 async function readLeaseSnapshot(lockPath, lockModifiedAtMs) {
-  let leasePath = join14(lockPath, LEASE_DIRECTORY_NAME), leaseInfo, leaseEntries;
+  let leasePath = join15(lockPath, LEASE_DIRECTORY_NAME), leaseInfo, leaseEntries;
   try {
-    if (leaseInfo = await lstat5(leasePath), !leaseInfo.isDirectory())
+    if (leaseInfo = await lstat6(leasePath), !leaseInfo.isDirectory())
       return invalidLeaseSnapshot(lockModifiedAtMs);
     leaseEntries = await readdir2(leasePath, { withFileTypes: !0 });
   } catch (error) {
@@ -10453,15 +10689,15 @@ function invalidLeaseSnapshot(modifiedAtMs) {
 
 // src/runtime/adapters/long-term-memory/file-lock/synchronous-release.ts
 import { rmdirSync, unlinkSync } from "node:fs";
-import { join as join15 } from "node:path";
+import { join as join16 } from "node:path";
 function removeObservedOwnerSynchronously(lockPath, observedOwnerFileName) {
   try {
-    unlinkSync(join15(lockPath, LEASE_DIRECTORY_NAME, observedOwnerFileName));
+    unlinkSync(join16(lockPath, LEASE_DIRECTORY_NAME, observedOwnerFileName));
   } catch (error) {
     if (fileSystemErrorCode(error) === "ENOENT") return !1;
     throw error;
   }
-  return removeReleasedDirectory(join15(lockPath, LEASE_DIRECTORY_NAME)) ? removeReleasedDirectory(lockPath) : !1;
+  return removeReleasedDirectory(join16(lockPath, LEASE_DIRECTORY_NAME)) ? removeReleasedDirectory(lockPath) : !1;
 }
 function removeReleasedDirectory(path) {
   try {
@@ -10537,13 +10773,13 @@ function delay3(milliseconds) {
 }
 
 // src/runtime/local-host/private-directory.ts
-import { lstat as lstat6, mkdir as mkdir5, mkdtemp, rename as rename5, rmdir as rmdir2 } from "node:fs/promises";
-import { basename as basename4, dirname as dirname5, join as join16 } from "node:path";
+import { lstat as lstat7, mkdir as mkdir5, mkdtemp, rename as rename5, rmdir as rmdir2 } from "node:fs/promises";
+import { basename as basename4, dirname as dirname5, join as join17 } from "node:path";
 
 // src/runtime/local-host/windows-private-access.ts
-import { execFile as execFile4 } from "node:child_process";
-import { promisify as promisify4 } from "node:util";
-var execute2 = promisify4(execFile4), privateAccessScript = `
+import { execFile as execFile5 } from "node:child_process";
+import { promisify as promisify5 } from "node:util";
+var execute2 = promisify5(execFile5), privateAccessScript = `
 $ErrorActionPreference = 'Stop'
 $target = $env:ABOT_LOCAL_HOST_PRIVATE_PATH
 $current = [System.Security.Principal.WindowsIdentity]::GetCurrent().User
@@ -10611,7 +10847,7 @@ async function assertPrivateRuntimeAccess(path, stat2, errorCode2, newlyCreatedD
 // src/runtime/local-host/private-directory.ts
 async function ensurePrivateRuntimeDirectory(directory) {
   process.platform === "win32" ? await installWindowsPrivateDirectory(directory) : await mkdir5(directory, { recursive: !0, mode: 448 });
-  let stat2 = await lstat6(directory);
+  let stat2 = await lstat7(directory);
   if (!stat2.isDirectory() || stat2.isSymbolicLink())
     throw new Error("local_runtime_directory_not_private");
   await assertPrivateRuntimeAccess(
@@ -10625,7 +10861,7 @@ async function installWindowsPrivateDirectory(directory) {
   let parent = dirname5(directory);
   await mkdir5(parent, { recursive: !0 });
   let temporary = await mkdtemp(
-    join16(parent, `.${basename4(directory)}.private-`)
+    join17(parent, `.${basename4(directory)}.private-`)
   );
   try {
     await verifyWindowsPrivateAccess(temporary, !0);
@@ -10644,7 +10880,7 @@ async function installWindowsPrivateDirectory(directory) {
 }
 async function hasExistingPath(path) {
   try {
-    return await lstat6(path), !0;
+    return await lstat7(path), !0;
   } catch (error) {
     if (isMissingPath(error)) return !1;
     throw error;
@@ -10666,11 +10902,11 @@ async function readNativeCompanionBuildId(cliPath) {
 }
 
 // src/computer-access/companion/native-replacement.ts
-import { execFile as execFile5 } from "node:child_process";
-import { join as join17 } from "node:path";
+import { execFile as execFile6 } from "node:child_process";
+import { join as join18 } from "node:path";
 import { setTimeout as delay4 } from "node:timers/promises";
-import { promisify as promisify5 } from "node:util";
-var executeFile4 = promisify5(execFile5), STOP_WAIT_MS = 1e4;
+import { promisify as promisify6 } from "node:util";
+var executeFile5 = promisify6(execFile6), STOP_WAIT_MS = 1e4;
 function replacementFailure(reason) {
   return new Error(
     `The running Host Companion could not be safely replaced (${reason}). Close the existing Host Companion, then run the updated setup again. The saved pairing was not changed.`
@@ -10741,12 +10977,12 @@ async function stopOwnedNativeCompanion(stateDir, overrides = {}) {
       process.kill(pid, signal);
     },
     execute: async (file, args, options) => {
-      await executeFile4(file, [...args], options);
+      await executeFile5(file, [...args], options);
     },
     now: Date.now,
     delay: delay4,
     ...overrides
-  }, lockPath = join17(stateDir, "agent"), initial = await readReplacementLock(lockPath, dependencies);
+  }, lockPath = join18(stateDir, "agent"), initial = await readReplacementLock(lockPath, dependencies);
   if (!initial || isReclaimableLockWithoutRecord(initial)) return;
   let owner = requireRecordedOwner(initial);
   if (!await verifyLiveCompanionOwner(owner, dependencies)) return;
@@ -10765,13 +11001,13 @@ async function stopOwnedNativeCompanion(stateDir, overrides = {}) {
 }
 
 // src/computer-access/companion/native-runtime-installation.ts
-import { execFile as execFile6 } from "node:child_process";
+import { execFile as execFile7 } from "node:child_process";
 import { createHash as createHash4, randomUUID as randomUUID10 } from "node:crypto";
-import { constants as constants3 } from "node:fs";
-import { lstat as lstat7, open as open4, rename as rename6, unlink as unlink6 } from "node:fs/promises";
-import { join as join18 } from "node:path";
-import { promisify as promisify6 } from "node:util";
-var executeFile5 = promisify6(execFile6), NATIVE_RUNTIME_INSTALLATION_FAILURE = "The Mac companion runtime could not be prepared safely. The saved pairing was not changed. Check the local Node.js installation and run setup again.";
+import { constants as constants4 } from "node:fs";
+import { lstat as lstat8, open as open4, rename as rename6, unlink as unlink6 } from "node:fs/promises";
+import { join as join19 } from "node:path";
+import { promisify as promisify7 } from "node:util";
+var executeFile6 = promisify7(execFile7), NATIVE_RUNTIME_INSTALLATION_FAILURE = "The Mac companion runtime could not be prepared safely. The saved pairing was not changed. Check the local Node.js installation and run setup again.";
 function runtimeInstallationFailure() {
   return new Error(NATIVE_RUNTIME_INSTALLATION_FAILURE);
 }
@@ -10802,19 +11038,19 @@ async function streamRuntimeDigest(handle) {
   return hash.digest("hex");
 }
 async function readRuntimeFile(path, managed) {
-  let stat2 = await lstat7(path).catch((error) => {
+  let stat2 = await lstat8(path).catch((error) => {
     if (!isAbsentRuntimePath(error))
       throw error;
   });
   if (!stat2) return;
   if (managed && await requireManagedRuntimeFile(path, stat2), !managed && !hasTrustedRuntimeSource(stat2))
     throw runtimeInstallationFailure();
-  let handle = await open4(path, constants3.O_RDONLY | constants3.O_NOFOLLOW);
+  let handle = await open4(path, constants4.O_RDONLY | constants4.O_NOFOLLOW);
   try {
     if (!hasSameRuntimeIdentity(stat2, await handle.stat()))
       throw runtimeInstallationFailure();
     let digest = await streamRuntimeDigest(handle);
-    if (!hasSameRuntimeIdentity(stat2, await handle.stat()) || !hasSameRuntimeIdentity(stat2, await lstat7(path)))
+    if (!hasSameRuntimeIdentity(stat2, await handle.stat()) || !hasSameRuntimeIdentity(stat2, await lstat8(path)))
       throw runtimeInstallationFailure();
     return { stat: stat2, digest };
   } finally {
@@ -10838,13 +11074,13 @@ async function requireRuntimeVersion(path, expected, dependencies) {
     throw runtimeInstallationFailure();
 }
 async function copyRuntimeSource(source, staged, expected) {
-  let input = await open4(source, constants3.O_RDONLY | constants3.O_NOFOLLOW);
+  let input = await open4(source, constants4.O_RDONLY | constants4.O_NOFOLLOW);
   try {
     if (!hasSameRuntimeIdentity(expected.stat, await input.stat()))
       throw runtimeInstallationFailure();
     let output = await open4(
       staged,
-      constants3.O_WRONLY | constants3.O_CREAT | constants3.O_EXCL | constants3.O_NOFOLLOW,
+      constants4.O_WRONLY | constants4.O_CREAT | constants4.O_EXCL | constants4.O_NOFOLLOW,
       384
     );
     try {
@@ -10874,19 +11110,19 @@ async function requireUnchangedRuntimeTarget(path, expected) {
 }
 async function requireUnchangedRuntimeDirectory(path, expected) {
   await ensurePrivateRuntimeDirectory(path);
-  let current = await lstat7(path);
+  let current = await lstat8(path);
   if (expected.dev !== current.dev || expected.ino !== current.ino) throw runtimeInstallationFailure();
 }
 async function installManagedRuntime(startup, dependencies) {
   await ensurePrivateRuntimeDirectory(startup.stateDir);
-  let stateIdentity = await lstat7(startup.stateDir), directory = join18(startup.stateDir, "runtime");
+  let stateIdentity = await lstat8(startup.stateDir), directory = join19(startup.stateDir, "runtime");
   await ensurePrivateRuntimeDirectory(directory);
-  let directoryIdentity = await lstat7(directory), target = join18(directory, "node"), source = await readRuntimeFile(startup.nodePath, !1);
+  let directoryIdentity = await lstat8(directory), target = join19(directory, "node"), source = await readRuntimeFile(startup.nodePath, !1);
   if (!source) throw runtimeInstallationFailure();
   let existing = await readRuntimeFile(target, !0), expectedVersion = await runtimeVersion(startup.nodePath, dependencies);
   if (existing?.digest === source.digest)
     return await requireRuntimeVersion(target, expectedVersion, dependencies), await requireUnchangedRuntimeDirectory(startup.stateDir, stateIdentity), await requireUnchangedRuntimeDirectory(directory, directoryIdentity), await requireUnchangedRuntimeTarget(target, existing), target;
-  let staged = join18(directory, ".node-" + randomUUID10() + ".tmp");
+  let staged = join19(directory, ".node-" + randomUUID10() + ".tmp");
   try {
     await copyRuntimeSource(startup.nodePath, staged, source);
     let stagedFile = await readRuntimeFile(staged, !0);
@@ -10902,7 +11138,7 @@ async function installManagedRuntime(startup, dependencies) {
 async function prepareNativeCompanionRuntime(startup, overrides = {}) {
   if (startup.platform !== "darwin") return startup;
   let dependencies = {
-    execute: async (file, args, options) => (await executeFile5(file, [...args], options)).stdout,
+    execute: async (file, args, options) => (await executeFile6(file, [...args], options)).stdout,
     ...overrides
   };
   try {
@@ -10984,6 +11220,27 @@ function resolveHostCompanionSetupUrl(saved, requestedUrl, upgradeHostId) {
   return saved.url;
 }
 
+// src/cli/host-permissions.ts
+function permissionCliAction(args) {
+  if (args.length === 0) return { action: "check" };
+  if (args.length !== 2 || args[0] !== "--request")
+    throw new Error("Usage: abot host permissions [--request screen-recording|accessibility]");
+  if (args[1] === "screen-recording") return { action: "request", permission: "screen_recording" };
+  if (args[1] === "accessibility") return { action: "request", permission: "accessibility" };
+  throw new Error("Usage: abot host permissions [--request screen-recording|accessibility]");
+}
+async function runHostPermissionsCli(args, dependencies = {}) {
+  let action = permissionCliAction(args);
+  if ((dependencies.platform ?? process.platform) !== "darwin")
+    throw new Error("Mac permission preparation is available only on macOS.");
+  let result = await (dependencies.prepare ?? prepareMacPermissions)(action);
+  (dependencies.print ?? console.log)(JSON.stringify({
+    scope: "calling_application",
+    ...result,
+    guidance: "These permissions belong to the Terminal/app running this command, not the installed companion. Run ABot from this same application. If macOS asks you to quit and reopen it, do so before starting a model session, then check again. App-specific Automation permissions are separate."
+  }, null, 2));
+}
+
 // src/cli/host-companion.ts
 function printHostHelp() {
   console.log(
@@ -10991,6 +11248,7 @@ function printHostHelp() {
       "Usage:",
       "  abot host connect --url http://localhost:5177",
       "  abot host status",
+      "  abot host permissions [--request screen-recording|accessibility]",
       "  abot host disconnect",
       "  abot host uninstall",
       "  abot host run",
@@ -11005,7 +11263,7 @@ function printHostHelp() {
   );
 }
 function nativeState() {
-  return createNativeHostState(join19(homedir4(), ".abot", "host-companion"), {
+  return createNativeHostState(join20(homedir4(), ".abot", "host-companion"), {
     ensureDirectory: ensurePrivateRuntimeDirectory,
     assertFile: (path, stat2) => assertPrivateRuntimeAccess(
       path,
@@ -11093,7 +11351,7 @@ async function runHost(state, options) {
     autostartOptions(state, options).cliPath
   ), ownerIdentity = await requireCurrentProcessOwnerIdentity(), release2;
   try {
-    release2 = await acquireFileLock(join19(state.directory, "agent"), {
+    release2 = await acquireFileLock(join20(state.directory, "agent"), {
       waitMs: 0,
       releaseMode: "synchronous",
       ownerIdentity,
@@ -11120,7 +11378,7 @@ async function runHost(state, options) {
 async function disconnectHost(state) {
   await state.remove(), await uninstallNativeAutostart(autostartOptions(state)), await uninstallDesktopNotificationIdentity(autostartOptions(state));
   let ownerIdentity = await requireCurrentProcessOwnerIdentity();
-  await (await acquireFileLock(join19(state.directory, "agent"), {
+  await (await acquireFileLock(join20(state.directory, "agent"), {
     waitMs: 5e3,
     releaseMode: "synchronous",
     ownerIdentity,
@@ -11135,6 +11393,10 @@ async function runHostCompanionCli(args, options = {}) {
     printHostHelp();
     return;
   }
+  if (command === "permissions") {
+    await runHostPermissionsCli(rest);
+    return;
+  }
   let state = nativeState();
   if (command === "connect") {
     await connectHost(rest, state, options);