@agimon-ai/po-computer-use 0.0.0-alpha.24 → 0.0.0-alpha.26

package/dist/extensions/server.cjs

@@ -142,6 +142,19 @@ function computerScriptFailure(error) {
 	};
 }
 //#endregion
+//#region src/types/desktopPermissions.ts
+/** The macOS privacy permissions Desktop reports, in the order the settings page shows them. */
+const DESKTOP_PERMISSIONS = [
+	"accessibility",
+	"screen-recording",
+	"microphone",
+	"automation",
+	"full-disk-access"
+];
+function isDesktopPermission(value) {
+	return typeof value === "string" && DESKTOP_PERMISSIONS.includes(value);
+}
+//#endregion
 //#region src/types/apiRoutes.ts
 /**
 * This package's routes, as data.
@@ -234,6 +247,18 @@ var apiRoutes_default = (0, _agimon_ai_po_core_web.defineApiRoutes)({
 		method: "POST",
 		path: COMPUTER_USE_ROUTES.hubStop,
 		response: (0, _agimon_ai_po_core_web.apiResponse)()
+	},
+	/** Desktop's macOS permission states, served by the hub's `desktop-permissions` mount. */
+	desktopPermissions: {
+		method: "GET",
+		path: "/",
+		response: (0, _agimon_ai_po_core_web.apiResponse)()
+	},
+	/** Asks macOS for the body's permission on the Mac running Desktop; answers the states after. */
+	requestDesktopPermission: {
+		method: "POST",
+		path: "/",
+		response: (0, _agimon_ai_po_core_web.apiResponse)()
 	}
 });
 //#endregion
@@ -676,7 +701,7 @@ function createComputerUseServer(host, apiContext) {
 	const publishMode = () => modeOwner?.publish();
 	const applyState = (next) => {
 		state = next;
-		host.context.client.setStatus(COMPUTER_USE_STATUS_KEY, next === void 0 || next.phase === "inactive" ? void 0 : `computer use: ${next.phase}`);
+		host.context.client.setStatus(COMPUTER_USE_STATUS_KEY, next === void 0 || next.phase === "inactive" && !modeSelected() && next.artifact === void 0 ? void 0 : `computer use: ${next.phase}`);
 		publishMode();
 		for (const listener of restrictionListeners) listener();
 	};
@@ -1024,6 +1049,43 @@ var root_server_default = (0, _agimon_ai_po_core_extensionFile.defineRoot)((cont
 	};
 });
 //#endregion
+//#region src/services/desktopPermissionsApi/index.ts
+/**
+* Desktop's macOS permissions for the settings page.
+*
+* Hub-scoped because the permissions belong to the Mac, not a session. The server's
+* Desktop link reads and requests them; without Desktop the mount answers 404, so
+* the page can say so instead of guessing.
+*/
+async function desktopPermissionsResponse(access, request) {
+	const path = new URL(request.url).pathname;
+	const change = request.method === apiRoutes_default.requestDesktopPermission.method;
+	if (path !== apiRoutes_default.desktopPermissions.path || !change && request.method !== apiRoutes_default.desktopPermissions.method) return Response.json({ error: "Not found." }, { status: 404 });
+	if (access === void 0) return Response.json({ error: "Po Desktop is not running this server." }, { status: 404 });
+	if (!access.authorize(request.headers, change)) return Response.json({ error: "Open Po Desktop on that Mac, or confirm with your passkey." }, { status: 403 });
+	let permission;
+	if (change) {
+		const body = await request.json().catch(() => void 0);
+		if (!isDesktopPermission(body?.permission)) return Response.json({ error: "Name one permission to ask for." }, { status: 400 });
+		permission = body.permission;
+	}
+	try {
+		return Response.json(await access.request(permission));
+	} catch (error) {
+		return Response.json({ error: error instanceof Error ? error.message : String(error) }, { status: 502 });
+	}
+}
+//#endregion
+//#region src/extensions/(backend)/api/desktop-permissions/route.server.ts
+/** Mounts Desktop's macOS permissions at `desktop-permissions`, which the folder names. */
+var route_server_default$1 = (0, _agimon_ai_po_core_extensionFile.defineRoute)({
+	basePath: "desktop-permissions",
+	start: (context) => ({
+		fetch: (request) => desktopPermissionsResponse(context.desktopPermissions, request),
+		close: () => void 0
+	})
+});
+//#endregion
 //#region src/services/webComputerUseAvailability/index.ts
 var MissingComputerUseApiError = class extends Error {};
 function computerUseSessionApiError(status, value) {
@@ -1035,6 +1097,8 @@ function computerUseSessionApiError(status, value) {
 //#region src/services/webComputerUseChannel/index.ts
 /** Computer use runs on the Po Desktop host, so every other client declines it. */
 const DESKTOP_UNAVAILABLE = "Po Desktop computer use is unavailable.";
+const SESSION_READY_ATTEMPTS = 5;
+const SESSION_READY_RETRY_MS = 200;
 function record(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
@@ -1075,12 +1139,21 @@ function createComputerUseChannel() {
 			const requests = /* @__PURE__ */ new Map();
 			let activeSessionId;
 			let closed = false;
-			const sessionRequest = async (scope, path, method = "GET", value) => host.requestSessionApi(scope, {
-				basePath: API_BASE_PATH,
-				path,
-				method,
-				...value === void 0 ? {} : { body: JSON.stringify(value) }
-			});
+			const sessionRequest = async (scope, path, method = "GET", value) => {
+				const registeredScope = scopes.get(scope.sessionId);
+				for (let attempt = 1;; attempt++) {
+					if (closed || registeredScope === void 0 || scopes.get(scope.sessionId) !== registeredScope) throw new Error("Computer-use session is closed.");
+					const response = await host.requestSessionApi(scope, {
+						basePath: API_BASE_PATH,
+						path,
+						method,
+						...value === void 0 ? {} : { body: JSON.stringify(value) }
+					});
+					if (response.status !== 503 || attempt >= SESSION_READY_ATTEMPTS) return response;
+					if (record(await response.clone().json().catch(() => void 0))?.error !== "Session selection is not ready.") return response;
+					await new Promise((resolve) => setTimeout(resolve, SESSION_READY_RETRY_MS));
+				}
+			};
 			const publish = (scope, state) => {
 				if (state.phase === "active" || state.phase === "activating" || state.phase === "stopping") activeSessionId = scope.sessionId;
 				else if (activeSessionId === scope.sessionId) {
@@ -1350,12 +1423,22 @@ const serverPlugin = (0, _agimon_ai_po_core_serverPlugin.defineServerPlugin)({
 	name: "@agimon-ai/po-computer-use",
 	providerOverrides: (0, _agimon_ai_po_core_serverPlugin.composeServerProviderOverrides)(root_server_default),
 	injects: (0, _agimon_ai_po_core_extensionFile.composeRootInjects)({ session: [root_server_default] }),
-	global: () => ({ get channels() {
-		return [() => via({ frameType: "computer_use" }, computer_use_server_default$2())];
-	} }),
-	workspace: (context) => ({ get channels() {
-		return defined([context.hosted("global") ? void 0 : () => via({ frameType: "computer_use" }, computer_use_server_default$2())]);
-	} }),
+	global: (context) => ({
+		get api() {
+			return [at(route_server_default$1, context)];
+		},
+		get channels() {
+			return [() => via({ frameType: "computer_use" }, computer_use_server_default$2())];
+		}
+	}),
+	workspace: (context) => ({
+		get api() {
+			return [at(route_server_default$1, context)];
+		},
+		get channels() {
+			return defined([context.hosted("global") ? void 0 : () => via({ frameType: "computer_use" }, computer_use_server_default$2())]);
+		}
+	}),
 	session: async (context) => {
 		const scopeSession = await context.scopeRoot("session", root_server_default, context);
 		const contextSession = {
@@ -1365,7 +1448,7 @@ const serverPlugin = (0, _agimon_ai_po_core_serverPlugin.defineServerPlugin)({
 		return {
 			...(0, _agimon_ai_po_core_extensionFile.composeRootHooks)(scopeSession),
 			get api() {
-				return defined([at(route_server_default, contextSession)]);
+				return defined([at(route_server_default$1, context), at(route_server_default, contextSession)]);
 			},
 			get channels() {
 				return defined([context.hosted("global") ? void 0 : () => via({ frameType: "computer_use" }, computer_use_server_default$2())]);