@agimon-ai/po-computer-use 0.0.0-alpha.31 → 0.0.0-alpha.33

package/dist/apiContracts.cjs

@@ -44,6 +44,26 @@ const ComputerStateSchema = typebox.Type.Object({
 	failure: O(Error),
 	artifact: O(Artifact)
 });
+const Permission = values([
+	"accessibility",
+	"screen-recording",
+	"microphone",
+	"automation",
+	"full-disk-access"
+]);
+const PermissionState = values([
+	"granted",
+	"denied",
+	"not-determined",
+	"per-app"
+]);
+const DesktopPermissionStatesSchema = typebox.Type.Object({
+	accessibility: PermissionState,
+	"screen-recording": PermissionState,
+	microphone: PermissionState,
+	automation: PermissionState,
+	"full-disk-access": PermissionState
+});
 const Reference = {
 	snapshotId: typebox.Type.String({ minLength: 1 }),
 	elementRef: typebox.Type.String({ minLength: 1 })
@@ -96,6 +116,32 @@ const apiContracts = (0, _agimon_ai_po_core_apiContracts.defineApiContract)({
 	version: 1,
 	dynamic: ["Desktop provider target extensions, observations and operation results are runtime-defined JSON."],
 	http: [
+		...[
+			"global",
+			"workspace",
+			"session"
+		].flatMap((scope) => ["GET", "POST"].map((method) => ({
+			id: `computer.permissions.${method === "GET" ? "read" : "request"}`,
+			scope,
+			basePath: "desktop-permissions",
+			path: "/",
+			method,
+			authentication: "owner",
+			description: method === "GET" ? "Read the Mac-owned permission states. Requires an authorized local Desktop caller or trusted remote caller." : "Ask macOS for one named permission. Requires an authorized local Desktop caller or remote passkey step-up.",
+			availability: "Requires Po Desktop to be running this server; otherwise returns 404.",
+			...method === "POST" ? { body: {
+				required: true,
+				contentType: "application/json",
+				schema: typebox.Type.Object({ permission: Permission })
+			} } : {},
+			responses: {
+				...(0, _agimon_ai_po_core_apiContracts.jsonApiResponses)(DesktopPermissionStatesSchema),
+				"502": {
+					description: "Desktop permission request failed.",
+					schema: typebox.Type.Object({ error: S })
+				}
+			}
+		}))),
 		{
 			id: "computer.activation.state",
 			scope: "session",

package/dist/apiContracts.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"apiContracts.cjs","names":["Type","jsonApiResponses","defineApiContract"],"sources":["../src/schemas/apiContracts.ts"],"sourcesContent":["import { defineApiContract, jsonApiResponses, type PoHttpContract } from '@agimon-ai/po-core/apiContracts';\nimport { Type } from 'typebox';\n\nconst S = Type.String();\nconst N = Type.Number();\nconst O = Type.Optional;\nconst values = <T extends string>(items: T[]) => Type.Union(items.map((item) => Type.Literal(item)));\nconst Json = Type.Unknown({\n  description:\n    'Desktop provider JSON value. Targets, observations and action results are supplied by the admitted Desktop provider.',\n});\nconst Target = Type.Record(S, Json);\nconst Error = Type.Object({ code: S, message: S });\nconst Artifact = Type.Object({\n  artifactId: S,\n  status: values(['ready', 'failed']),\n  sizeBytes: O(N),\n  downloadUrl: O(S),\n  previewUrl: O(S),\n  actionCount: O(N),\n  completedAt: O(S),\n  failure: O(Error),\n});\nexport const ComputerStateSchema = Type.Object({\n  sessionId: S,\n  revision: N,\n  wake: N,\n  phase: values(['inactive', 'awaiting_confirmation', 'activating', 'active', 'stopping', 'failed']),\n  requestId: O(S),\n  target: O(Target),\n  durationMs: O(N),\n  expiresAt: O(N),\n  failure: O(Error),\n  artifact: O(Artifact),\n});\nconst Reference = { snapshotId: Type.String({ minLength: 1 }), elementRef: Type.String({ minLength: 1 }) };\nexport const ComputerActionSchema = Type.Union([\n  Type.Object({ kind: values(['press', 'focus']), ...Reference }, { additionalProperties: false }),\n  Type.Object({ kind: Type.Literal('set_value'), ...Reference, value: S }, { additionalProperties: false }),\n  Type.Object(\n    {\n      kind: Type.Literal('scroll'),\n      ...Reference,\n      direction: values(['up', 'down', 'left', 'right']),\n      amount: values(['line', 'page']),\n    },\n    { additionalProperties: false },\n  ),\n]);\nconst internal = (\n  method: 'GET' | 'POST',\n  path: string,\n  output: object,\n  body?: object,\n  status = 200,\n): PoHttpContract => ({\n  id: `computer.${path.slice(1).replaceAll('/', '.')}`,\n  scope: 'session',\n  basePath: 'computer-use',\n  path,\n  method,\n  authentication: 'owner',\n  description: `Computer use broker ${path}. Requires the host-issued ${path.startsWith('/agent/') ? 'agent' : 'hub'} bearer token.`,\n  availability: 'Internal broker route; ordinary browser credentials are insufficient.',\n  parameters: [{ name: 'Authorization', in: 'header', required: true, schema: Type.String({ pattern: '^Bearer .+' }) }],\n  ...(body ? { body: { required: true, contentType: 'application/json', schema: body } } : {}),\n  responses: jsonApiResponses(output, status),\n});\nexport const apiContracts = defineApiContract({\n  version: 1,\n  dynamic: ['Desktop provider target extensions, observations and operation results are runtime-defined JSON.'],\n  http: [\n    {\n      id: 'computer.activation.state',\n      scope: 'session',\n      basePath: 'computer-use',\n      path: '/activate',\n      method: 'GET',\n      authentication: 'owner',\n      description: 'Read state as the matching pending requester or approved recording reader.',\n      responses: jsonApiResponses(ComputerStateSchema),\n    },\n    {\n      id: 'computer.activation.cancel',\n      scope: 'session',\n      basePath: 'computer-use',\n      path: '/activate',\n      method: 'DELETE',\n      authentication: 'owner',\n      description: 'Cancel only the matching requester pending activation.',\n      responses: jsonApiResponses(ComputerStateSchema, 202),\n    },\n    {\n      id: 'computer.activate',\n      scope: 'session',\n      basePath: 'computer-use',\n      path: '/activate',\n      method: 'POST',\n      authentication: 'owner',\n      description:\n        'Request confirmed Desktop access with admitted caller and remote step-up context. A remote caller may omit target so the local Mac selects the window.',\n      body: {\n        required: true,\n        contentType: 'application/json',\n        schema: Type.Object({\n          target: O(Type.Object({ windowId: S, bundleId: S })),\n          durationMs: Type.Integer({ minimum: 1000, maximum: 1800000 }),\n        }),\n      },\n      responses: jsonApiResponses(ComputerStateSchema, 202),\n    },\n    {\n      id: 'computer.artifact',\n      scope: 'session',\n      basePath: 'computer-use',\n      path: '/artifact',\n      method: 'GET',\n      authentication: 'owner',\n      description: 'Read at most 1 MiB of a recording belonging to this session and approved caller.',\n      parameters: [\n        { name: 'artifactId', in: 'query', required: true, schema: S },\n        { name: 'offset', in: 'query', required: true, schema: Type.Integer({ minimum: 0 }) },\n      ],\n      responses: {\n        206: {\n          description: 'Bounded recording bytes.',\n          contentType: 'video/mp4',\n          schema: Type.String({ format: 'binary' }),\n        },\n      },\n    },\n    internal('GET', '/agent/state', ComputerStateSchema),\n    internal('GET', '/hub/state', ComputerStateSchema),\n    internal('POST', '/agent/observe', Json),\n    internal('POST', '/agent/action', Json, ComputerActionSchema),\n    internal('POST', '/agent/stop', ComputerStateSchema, undefined, 202),\n    internal(\n      'GET',\n      '/hub/activation',\n      Type.Union([\n        Type.Null(),\n        Type.Object({\n          requestId: S,\n          target: Target,\n          durationSeconds: N,\n          createdAt: N,\n          confirmationExpiresAt: N,\n          caller: Type.Object({ locality: values(['local', 'remote']), stepUp: S }),\n        }),\n      ]),\n    ),\n    internal('GET', '/hub/authorization', Type.Union([Type.Null(), Type.Object({ grantId: S, expiresAt: O(N) })])),\n    internal(\n      'GET',\n      '/hub/next',\n      Type.Union([\n        Type.Null(),\n        Type.Object({ id: S, operation: values(['observe', 'act']), payload: O(Json), grantId: S, sequence: O(N) }),\n      ]),\n    ),\n    internal('POST', '/hub/complete', ComputerStateSchema, Type.Object({ id: S, error: O(S), result: O(Json) })),\n    internal(\n      'POST',\n      '/hub/stop',\n      ComputerStateSchema,\n      Type.Object({ error: O(S), host: O(Type.Object({ grantId: S, expiresAt: N })), artifact: O(Artifact) }),\n    ),\n  ],\n  sockets: (['global', 'workspace'] as const).flatMap((scope) => [\n    {\n      id: 'computer.state',\n      scope,\n      service: 'po.hub',\n      member: 'computer_use_state',\n      kind: 'channel',\n      direction: 'server-to-client',\n      description: 'Computer use channel payload.',\n      input: Type.Object({ state: ComputerStateSchema, targets: Type.Array(Target), busy: O(Type.Literal(true)) }),\n    },\n    {\n      id: 'computer.command',\n      scope,\n      service: 'po.hub',\n      member: 'computer_use_state',\n      kind: 'channel',\n      direction: 'client-to-server',\n      description: 'Computer use browser channel command.',\n      input: Type.Object({ action: values(['status', 'targets', 'stop', 'artifacts']) }),\n    },\n  ]),\n});\nexport default apiContracts;\n"],"mappings":";;;;;;;AAGA,MAAM,IAAIA,QAAAA,KAAK,OAAO;AACtB,MAAM,IAAIA,QAAAA,KAAK,OAAO;AACtB,MAAM,IAAIA,QAAAA,KAAK;AACf,MAAM,UAA4B,UAAeA,QAAAA,KAAK,MAAM,MAAM,KAAK,SAASA,QAAAA,KAAK,QAAQ,IAAI,CAAC,CAAC;AACnG,MAAM,OAAOA,QAAAA,KAAK,QAAQ,EACxB,aACE,uHACJ,CAAC;AACD,MAAM,SAASA,QAAAA,KAAK,OAAO,GAAG,IAAI;AAClC,MAAM,QAAQA,QAAAA,KAAK,OAAO;CAAE,MAAM;CAAG,SAAS;AAAE,CAAC;AACjD,MAAM,WAAWA,QAAAA,KAAK,OAAO;CAC3B,YAAY;CACZ,QAAQ,OAAO,CAAC,SAAS,QAAQ,CAAC;CAClC,WAAW,EAAE,CAAC;CACd,aAAa,EAAE,CAAC;CAChB,YAAY,EAAE,CAAC;CACf,aAAa,EAAE,CAAC;CAChB,aAAa,EAAE,CAAC;CAChB,SAAS,EAAE,KAAK;AAClB,CAAC;AACD,MAAa,sBAAsBA,QAAAA,KAAK,OAAO;CAC7C,WAAW;CACX,UAAU;CACV,MAAM;CACN,OAAO,OAAO;EAAC;EAAY;EAAyB;EAAc;EAAU;EAAY;CAAQ,CAAC;CACjG,WAAW,EAAE,CAAC;CACd,QAAQ,EAAE,MAAM;CAChB,YAAY,EAAE,CAAC;CACf,WAAW,EAAE,CAAC;CACd,SAAS,EAAE,KAAK;CAChB,UAAU,EAAE,QAAQ;AACtB,CAAC;AACD,MAAM,YAAY;CAAE,YAAYA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAAG,YAAYA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AAAE;AACzG,MAAa,uBAAuBA,QAAAA,KAAK,MAAM;CAC7CA,QAAAA,KAAK,OAAO;EAAE,MAAM,OAAO,CAAC,SAAS,OAAO,CAAC;EAAG,GAAG;CAAU,GAAG,EAAE,sBAAsB,MAAM,CAAC;CAC/FA,QAAAA,KAAK,OAAO;EAAE,MAAMA,QAAAA,KAAK,QAAQ,WAAW;EAAG,GAAG;EAAW,OAAO;CAAE,GAAG,EAAE,sBAAsB,MAAM,CAAC;CACxGA,QAAAA,KAAK,OACH;EACE,MAAMA,QAAAA,KAAK,QAAQ,QAAQ;EAC3B,GAAG;EACH,WAAW,OAAO;GAAC;GAAM;GAAQ;GAAQ;EAAO,CAAC;EACjD,QAAQ,OAAO,CAAC,QAAQ,MAAM,CAAC;CACjC,GACA,EAAE,sBAAsB,MAAM,CAChC;AACF,CAAC;AACD,MAAM,YACJ,QACA,MACA,QACA,MACA,SAAS,SACW;CACpB,IAAI,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,KAAK,GAAG;CACjD,OAAO;CACP,UAAU;CACV;CACA;CACA,gBAAgB;CAChB,aAAa,uBAAuB,KAAK,6BAA6B,KAAK,WAAW,SAAS,IAAI,UAAU,MAAM;CACnH,cAAc;CACd,YAAY,CAAC;EAAE,MAAM;EAAiB,IAAI;EAAU,UAAU;EAAM,QAAQA,QAAAA,KAAK,OAAO,EAAE,SAAS,aAAa,CAAC;CAAE,CAAC;CACpH,GAAI,OAAO,EAAE,MAAM;EAAE,UAAU;EAAM,aAAa;EAAoB,QAAQ;CAAK,EAAE,IAAI,CAAC;CAC1F,YAAA,GAAWC,gCAAAA,iBAAAA,CAAiB,QAAQ,MAAM;AAC5C;AACA,MAAa,gBAAA,GAAeC,gCAAAA,kBAAAA,CAAkB;CAC5C,SAAS;CACT,SAAS,CAAC,kGAAkG;CAC5G,MAAM;EACJ;GACE,IAAI;GACJ,OAAO;GACP,UAAU;GACV,MAAM;GACN,QAAQ;GACR,gBAAgB;GAChB,aAAa;GACb,YAAA,GAAWD,gCAAAA,iBAAAA,CAAiB,mBAAmB;EACjD;EACA;GACE,IAAI;GACJ,OAAO;GACP,UAAU;GACV,MAAM;GACN,QAAQ;GACR,gBAAgB;GAChB,aAAa;GACb,YAAA,GAAWA,gCAAAA,iBAAAA,CAAiB,qBAAqB,GAAG;EACtD;EACA;GACE,IAAI;GACJ,OAAO;GACP,UAAU;GACV,MAAM;GACN,QAAQ;GACR,gBAAgB;GAChB,aACE;GACF,MAAM;IACJ,UAAU;IACV,aAAa;IACb,QAAQD,QAAAA,KAAK,OAAO;KAClB,QAAQ,EAAEA,QAAAA,KAAK,OAAO;MAAE,UAAU;MAAG,UAAU;KAAE,CAAC,CAAC;KACnD,YAAYA,QAAAA,KAAK,QAAQ;MAAE,SAAS;MAAM,SAAS;KAAQ,CAAC;IAC9D,CAAC;GACH;GACA,YAAA,GAAWC,gCAAAA,iBAAAA,CAAiB,qBAAqB,GAAG;EACtD;EACA;GACE,IAAI;GACJ,OAAO;GACP,UAAU;GACV,MAAM;GACN,QAAQ;GACR,gBAAgB;GAChB,aAAa;GACb,YAAY,CACV;IAAE,MAAM;IAAc,IAAI;IAAS,UAAU;IAAM,QAAQ;GAAE,GAC7D;IAAE,MAAM;IAAU,IAAI;IAAS,UAAU;IAAM,QAAQD,QAAAA,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;GAAE,CACtF;GACA,WAAW,EACT,KAAK;IACH,aAAa;IACb,aAAa;IACb,QAAQA,QAAAA,KAAK,OAAO,EAAE,QAAQ,SAAS,CAAC;GAC1C,EACF;EACF;EACA,SAAS,OAAO,gBAAgB,mBAAmB;EACnD,SAAS,OAAO,cAAc,mBAAmB;EACjD,SAAS,QAAQ,kBAAkB,IAAI;EACvC,SAAS,QAAQ,iBAAiB,MAAM,oBAAoB;EAC5D,SAAS,QAAQ,eAAe,qBAAqB,KAAA,GAAW,GAAG;EACnE,SACE,OACA,mBACAA,QAAAA,KAAK,MAAM,CACTA,QAAAA,KAAK,KAAK,GACVA,QAAAA,KAAK,OAAO;GACV,WAAW;GACX,QAAQ;GACR,iBAAiB;GACjB,WAAW;GACX,uBAAuB;GACvB,QAAQA,QAAAA,KAAK,OAAO;IAAE,UAAU,OAAO,CAAC,SAAS,QAAQ,CAAC;IAAG,QAAQ;GAAE,CAAC;EAC1E,CAAC,CACH,CAAC,CACH;EACA,SAAS,OAAO,sBAAsBA,QAAAA,KAAK,MAAM,CAACA,QAAAA,KAAK,KAAK,GAAGA,QAAAA,KAAK,OAAO;GAAE,SAAS;GAAG,WAAW,EAAE,CAAC;EAAE,CAAC,CAAC,CAAC,CAAC;EAC7G,SACE,OACA,aACAA,QAAAA,KAAK,MAAM,CACTA,QAAAA,KAAK,KAAK,GACVA,QAAAA,KAAK,OAAO;GAAE,IAAI;GAAG,WAAW,OAAO,CAAC,WAAW,KAAK,CAAC;GAAG,SAAS,EAAE,IAAI;GAAG,SAAS;GAAG,UAAU,EAAE,CAAC;EAAE,CAAC,CAC5G,CAAC,CACH;EACA,SAAS,QAAQ,iBAAiB,qBAAqBA,QAAAA,KAAK,OAAO;GAAE,IAAI;GAAG,OAAO,EAAE,CAAC;GAAG,QAAQ,EAAE,IAAI;EAAE,CAAC,CAAC;EAC3G,SACE,QACA,aACA,qBACAA,QAAAA,KAAK,OAAO;GAAE,OAAO,EAAE,CAAC;GAAG,MAAM,EAAEA,QAAAA,KAAK,OAAO;IAAE,SAAS;IAAG,WAAW;GAAE,CAAC,CAAC;GAAG,UAAU,EAAE,QAAQ;EAAE,CAAC,CACxG;CACF;CACA,SAAU,CAAC,UAAU,WAAW,CAAC,CAAW,SAAS,UAAU,CAC7D;EACE,IAAI;EACJ;EACA,SAAS;EACT,QAAQ;EACR,MAAM;EACN,WAAW;EACX,aAAa;EACb,OAAOA,QAAAA,KAAK,OAAO;GAAE,OAAO;GAAqB,SAASA,QAAAA,KAAK,MAAM,MAAM;GAAG,MAAM,EAAEA,QAAAA,KAAK,QAAQ,IAAI,CAAC;EAAE,CAAC;CAC7G,GACA;EACE,IAAI;EACJ;EACA,SAAS;EACT,QAAQ;EACR,MAAM;EACN,WAAW;EACX,aAAa;EACb,OAAOA,QAAAA,KAAK,OAAO,EAAE,QAAQ,OAAO;GAAC;GAAU;GAAW;GAAQ;EAAW,CAAC,EAAE,CAAC;CACnF,CACF,CAAC;AACH,CAAC"}
+{"version":3,"file":"apiContracts.cjs","names":["Type","jsonApiResponses","defineApiContract"],"sources":["../src/schemas/apiContracts.ts"],"sourcesContent":["import { defineApiContract, jsonApiResponses, type PoHttpContract } from '@agimon-ai/po-core/apiContracts';\nimport { Type } from 'typebox';\n\nconst S = Type.String();\nconst N = Type.Number();\nconst O = Type.Optional;\nconst values = <T extends string>(items: T[]) => Type.Union(items.map((item) => Type.Literal(item)));\nconst Json = Type.Unknown({\n  description:\n    'Desktop provider JSON value. Targets, observations and action results are supplied by the admitted Desktop provider.',\n});\nconst Target = Type.Record(S, Json);\nconst Error = Type.Object({ code: S, message: S });\nconst Artifact = Type.Object({\n  artifactId: S,\n  status: values(['ready', 'failed']),\n  sizeBytes: O(N),\n  downloadUrl: O(S),\n  previewUrl: O(S),\n  actionCount: O(N),\n  completedAt: O(S),\n  failure: O(Error),\n});\nexport const ComputerStateSchema = Type.Object({\n  sessionId: S,\n  revision: N,\n  wake: N,\n  phase: values(['inactive', 'awaiting_confirmation', 'activating', 'active', 'stopping', 'failed']),\n  requestId: O(S),\n  target: O(Target),\n  durationMs: O(N),\n  expiresAt: O(N),\n  failure: O(Error),\n  artifact: O(Artifact),\n});\nconst Permission = values(['accessibility', 'screen-recording', 'microphone', 'automation', 'full-disk-access']);\nconst PermissionState = values(['granted', 'denied', 'not-determined', 'per-app']);\nexport const DesktopPermissionStatesSchema = Type.Object({\n  accessibility: PermissionState,\n  'screen-recording': PermissionState,\n  microphone: PermissionState,\n  automation: PermissionState,\n  'full-disk-access': PermissionState,\n});\nconst Reference = { snapshotId: Type.String({ minLength: 1 }), elementRef: Type.String({ minLength: 1 }) };\nexport const ComputerActionSchema = Type.Union([\n  Type.Object({ kind: values(['press', 'focus']), ...Reference }, { additionalProperties: false }),\n  Type.Object({ kind: Type.Literal('set_value'), ...Reference, value: S }, { additionalProperties: false }),\n  Type.Object(\n    {\n      kind: Type.Literal('scroll'),\n      ...Reference,\n      direction: values(['up', 'down', 'left', 'right']),\n      amount: values(['line', 'page']),\n    },\n    { additionalProperties: false },\n  ),\n]);\nconst internal = (\n  method: 'GET' | 'POST',\n  path: string,\n  output: object,\n  body?: object,\n  status = 200,\n): PoHttpContract => ({\n  id: `computer.${path.slice(1).replaceAll('/', '.')}`,\n  scope: 'session',\n  basePath: 'computer-use',\n  path,\n  method,\n  authentication: 'owner',\n  description: `Computer use broker ${path}. Requires the host-issued ${path.startsWith('/agent/') ? 'agent' : 'hub'} bearer token.`,\n  availability: 'Internal broker route; ordinary browser credentials are insufficient.',\n  parameters: [{ name: 'Authorization', in: 'header', required: true, schema: Type.String({ pattern: '^Bearer .+' }) }],\n  ...(body ? { body: { required: true, contentType: 'application/json', schema: body } } : {}),\n  responses: jsonApiResponses(output, status),\n});\nexport const apiContracts = defineApiContract({\n  version: 1,\n  dynamic: ['Desktop provider target extensions, observations and operation results are runtime-defined JSON.'],\n  http: [\n    ...(['global', 'workspace', 'session'] as const).flatMap((scope) =>\n      (['GET', 'POST'] as const).map((method) => ({\n        id: `computer.permissions.${method === 'GET' ? 'read' : 'request'}`,\n        scope,\n        basePath: 'desktop-permissions',\n        path: '/',\n        method,\n        authentication: 'owner' as const,\n        description:\n          method === 'GET'\n            ? 'Read the Mac-owned permission states. Requires an authorized local Desktop caller or trusted remote caller.'\n            : 'Ask macOS for one named permission. Requires an authorized local Desktop caller or remote passkey step-up.',\n        availability: 'Requires Po Desktop to be running this server; otherwise returns 404.',\n        ...(method === 'POST'\n          ? {\n              body: {\n                required: true,\n                contentType: 'application/json',\n                schema: Type.Object({ permission: Permission }),\n              },\n            }\n          : {}),\n        responses: {\n          ...jsonApiResponses(DesktopPermissionStatesSchema),\n          '502': { description: 'Desktop permission request failed.', schema: Type.Object({ error: S }) },\n        },\n      })),\n    ),\n    {\n      id: 'computer.activation.state',\n      scope: 'session',\n      basePath: 'computer-use',\n      path: '/activate',\n      method: 'GET',\n      authentication: 'owner',\n      description: 'Read state as the matching pending requester or approved recording reader.',\n      responses: jsonApiResponses(ComputerStateSchema),\n    },\n    {\n      id: 'computer.activation.cancel',\n      scope: 'session',\n      basePath: 'computer-use',\n      path: '/activate',\n      method: 'DELETE',\n      authentication: 'owner',\n      description: 'Cancel only the matching requester pending activation.',\n      responses: jsonApiResponses(ComputerStateSchema, 202),\n    },\n    {\n      id: 'computer.activate',\n      scope: 'session',\n      basePath: 'computer-use',\n      path: '/activate',\n      method: 'POST',\n      authentication: 'owner',\n      description:\n        'Request confirmed Desktop access with admitted caller and remote step-up context. A remote caller may omit target so the local Mac selects the window.',\n      body: {\n        required: true,\n        contentType: 'application/json',\n        schema: Type.Object({\n          target: O(Type.Object({ windowId: S, bundleId: S })),\n          durationMs: Type.Integer({ minimum: 1000, maximum: 1800000 }),\n        }),\n      },\n      responses: jsonApiResponses(ComputerStateSchema, 202),\n    },\n    {\n      id: 'computer.artifact',\n      scope: 'session',\n      basePath: 'computer-use',\n      path: '/artifact',\n      method: 'GET',\n      authentication: 'owner',\n      description: 'Read at most 1 MiB of a recording belonging to this session and approved caller.',\n      parameters: [\n        { name: 'artifactId', in: 'query', required: true, schema: S },\n        { name: 'offset', in: 'query', required: true, schema: Type.Integer({ minimum: 0 }) },\n      ],\n      responses: {\n        206: {\n          description: 'Bounded recording bytes.',\n          contentType: 'video/mp4',\n          schema: Type.String({ format: 'binary' }),\n        },\n      },\n    },\n    internal('GET', '/agent/state', ComputerStateSchema),\n    internal('GET', '/hub/state', ComputerStateSchema),\n    internal('POST', '/agent/observe', Json),\n    internal('POST', '/agent/action', Json, ComputerActionSchema),\n    internal('POST', '/agent/stop', ComputerStateSchema, undefined, 202),\n    internal(\n      'GET',\n      '/hub/activation',\n      Type.Union([\n        Type.Null(),\n        Type.Object({\n          requestId: S,\n          target: Target,\n          durationSeconds: N,\n          createdAt: N,\n          confirmationExpiresAt: N,\n          caller: Type.Object({ locality: values(['local', 'remote']), stepUp: S }),\n        }),\n      ]),\n    ),\n    internal('GET', '/hub/authorization', Type.Union([Type.Null(), Type.Object({ grantId: S, expiresAt: O(N) })])),\n    internal(\n      'GET',\n      '/hub/next',\n      Type.Union([\n        Type.Null(),\n        Type.Object({ id: S, operation: values(['observe', 'act']), payload: O(Json), grantId: S, sequence: O(N) }),\n      ]),\n    ),\n    internal('POST', '/hub/complete', ComputerStateSchema, Type.Object({ id: S, error: O(S), result: O(Json) })),\n    internal(\n      'POST',\n      '/hub/stop',\n      ComputerStateSchema,\n      Type.Object({ error: O(S), host: O(Type.Object({ grantId: S, expiresAt: N })), artifact: O(Artifact) }),\n    ),\n  ],\n  sockets: (['global', 'workspace'] as const).flatMap((scope) => [\n    {\n      id: 'computer.state',\n      scope,\n      service: 'po.hub',\n      member: 'computer_use_state',\n      kind: 'channel',\n      direction: 'server-to-client',\n      description: 'Computer use channel payload.',\n      input: Type.Object({ state: ComputerStateSchema, targets: Type.Array(Target), busy: O(Type.Literal(true)) }),\n    },\n    {\n      id: 'computer.command',\n      scope,\n      service: 'po.hub',\n      member: 'computer_use_state',\n      kind: 'channel',\n      direction: 'client-to-server',\n      description: 'Computer use browser channel command.',\n      input: Type.Object({ action: values(['status', 'targets', 'stop', 'artifacts']) }),\n    },\n  ]),\n});\nexport default apiContracts;\n"],"mappings":";;;;;;;AAGA,MAAM,IAAIA,QAAAA,KAAK,OAAO;AACtB,MAAM,IAAIA,QAAAA,KAAK,OAAO;AACtB,MAAM,IAAIA,QAAAA,KAAK;AACf,MAAM,UAA4B,UAAeA,QAAAA,KAAK,MAAM,MAAM,KAAK,SAASA,QAAAA,KAAK,QAAQ,IAAI,CAAC,CAAC;AACnG,MAAM,OAAOA,QAAAA,KAAK,QAAQ,EACxB,aACE,uHACJ,CAAC;AACD,MAAM,SAASA,QAAAA,KAAK,OAAO,GAAG,IAAI;AAClC,MAAM,QAAQA,QAAAA,KAAK,OAAO;CAAE,MAAM;CAAG,SAAS;AAAE,CAAC;AACjD,MAAM,WAAWA,QAAAA,KAAK,OAAO;CAC3B,YAAY;CACZ,QAAQ,OAAO,CAAC,SAAS,QAAQ,CAAC;CAClC,WAAW,EAAE,CAAC;CACd,aAAa,EAAE,CAAC;CAChB,YAAY,EAAE,CAAC;CACf,aAAa,EAAE,CAAC;CAChB,aAAa,EAAE,CAAC;CAChB,SAAS,EAAE,KAAK;AAClB,CAAC;AACD,MAAa,sBAAsBA,QAAAA,KAAK,OAAO;CAC7C,WAAW;CACX,UAAU;CACV,MAAM;CACN,OAAO,OAAO;EAAC;EAAY;EAAyB;EAAc;EAAU;EAAY;CAAQ,CAAC;CACjG,WAAW,EAAE,CAAC;CACd,QAAQ,EAAE,MAAM;CAChB,YAAY,EAAE,CAAC;CACf,WAAW,EAAE,CAAC;CACd,SAAS,EAAE,KAAK;CAChB,UAAU,EAAE,QAAQ;AACtB,CAAC;AACD,MAAM,aAAa,OAAO;CAAC;CAAiB;CAAoB;CAAc;CAAc;AAAkB,CAAC;AAC/G,MAAM,kBAAkB,OAAO;CAAC;CAAW;CAAU;CAAkB;AAAS,CAAC;AACjF,MAAa,gCAAgCA,QAAAA,KAAK,OAAO;CACvD,eAAe;CACf,oBAAoB;CACpB,YAAY;CACZ,YAAY;CACZ,oBAAoB;AACtB,CAAC;AACD,MAAM,YAAY;CAAE,YAAYA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAAG,YAAYA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AAAE;AACzG,MAAa,uBAAuBA,QAAAA,KAAK,MAAM;CAC7CA,QAAAA,KAAK,OAAO;EAAE,MAAM,OAAO,CAAC,SAAS,OAAO,CAAC;EAAG,GAAG;CAAU,GAAG,EAAE,sBAAsB,MAAM,CAAC;CAC/FA,QAAAA,KAAK,OAAO;EAAE,MAAMA,QAAAA,KAAK,QAAQ,WAAW;EAAG,GAAG;EAAW,OAAO;CAAE,GAAG,EAAE,sBAAsB,MAAM,CAAC;CACxGA,QAAAA,KAAK,OACH;EACE,MAAMA,QAAAA,KAAK,QAAQ,QAAQ;EAC3B,GAAG;EACH,WAAW,OAAO;GAAC;GAAM;GAAQ;GAAQ;EAAO,CAAC;EACjD,QAAQ,OAAO,CAAC,QAAQ,MAAM,CAAC;CACjC,GACA,EAAE,sBAAsB,MAAM,CAChC;AACF,CAAC;AACD,MAAM,YACJ,QACA,MACA,QACA,MACA,SAAS,SACW;CACpB,IAAI,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,KAAK,GAAG;CACjD,OAAO;CACP,UAAU;CACV;CACA;CACA,gBAAgB;CAChB,aAAa,uBAAuB,KAAK,6BAA6B,KAAK,WAAW,SAAS,IAAI,UAAU,MAAM;CACnH,cAAc;CACd,YAAY,CAAC;EAAE,MAAM;EAAiB,IAAI;EAAU,UAAU;EAAM,QAAQA,QAAAA,KAAK,OAAO,EAAE,SAAS,aAAa,CAAC;CAAE,CAAC;CACpH,GAAI,OAAO,EAAE,MAAM;EAAE,UAAU;EAAM,aAAa;EAAoB,QAAQ;CAAK,EAAE,IAAI,CAAC;CAC1F,YAAA,GAAWC,gCAAAA,iBAAAA,CAAiB,QAAQ,MAAM;AAC5C;AACA,MAAa,gBAAA,GAAeC,gCAAAA,kBAAAA,CAAkB;CAC5C,SAAS;CACT,SAAS,CAAC,kGAAkG;CAC5G,MAAM;EACJ,GAAI;GAAC;GAAU;GAAa;EAAS,CAAC,CAAW,SAAS,UACvD,CAAC,OAAO,MAAM,CAAC,CAAW,KAAK,YAAY;GAC1C,IAAI,wBAAwB,WAAW,QAAQ,SAAS;GACxD;GACA,UAAU;GACV,MAAM;GACN;GACA,gBAAgB;GAChB,aACE,WAAW,QACP,gHACA;GACN,cAAc;GACd,GAAI,WAAW,SACX,EACE,MAAM;IACJ,UAAU;IACV,aAAa;IACb,QAAQF,QAAAA,KAAK,OAAO,EAAE,YAAY,WAAW,CAAC;GAChD,EACF,IACA,CAAC;GACL,WAAW;IACT,IAAA,GAAGC,gCAAAA,iBAAAA,CAAiB,6BAA6B;IACjD,OAAO;KAAE,aAAa;KAAsC,QAAQD,QAAAA,KAAK,OAAO,EAAE,OAAO,EAAE,CAAC;IAAE;GAChG;EACF,EAAE,CACJ;EACA;GACE,IAAI;GACJ,OAAO;GACP,UAAU;GACV,MAAM;GACN,QAAQ;GACR,gBAAgB;GAChB,aAAa;GACb,YAAA,GAAWC,gCAAAA,iBAAAA,CAAiB,mBAAmB;EACjD;EACA;GACE,IAAI;GACJ,OAAO;GACP,UAAU;GACV,MAAM;GACN,QAAQ;GACR,gBAAgB;GAChB,aAAa;GACb,YAAA,GAAWA,gCAAAA,iBAAAA,CAAiB,qBAAqB,GAAG;EACtD;EACA;GACE,IAAI;GACJ,OAAO;GACP,UAAU;GACV,MAAM;GACN,QAAQ;GACR,gBAAgB;GAChB,aACE;GACF,MAAM;IACJ,UAAU;IACV,aAAa;IACb,QAAQD,QAAAA,KAAK,OAAO;KAClB,QAAQ,EAAEA,QAAAA,KAAK,OAAO;MAAE,UAAU;MAAG,UAAU;KAAE,CAAC,CAAC;KACnD,YAAYA,QAAAA,KAAK,QAAQ;MAAE,SAAS;MAAM,SAAS;KAAQ,CAAC;IAC9D,CAAC;GACH;GACA,YAAA,GAAWC,gCAAAA,iBAAAA,CAAiB,qBAAqB,GAAG;EACtD;EACA;GACE,IAAI;GACJ,OAAO;GACP,UAAU;GACV,MAAM;GACN,QAAQ;GACR,gBAAgB;GAChB,aAAa;GACb,YAAY,CACV;IAAE,MAAM;IAAc,IAAI;IAAS,UAAU;IAAM,QAAQ;GAAE,GAC7D;IAAE,MAAM;IAAU,IAAI;IAAS,UAAU;IAAM,QAAQD,QAAAA,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;GAAE,CACtF;GACA,WAAW,EACT,KAAK;IACH,aAAa;IACb,aAAa;IACb,QAAQA,QAAAA,KAAK,OAAO,EAAE,QAAQ,SAAS,CAAC;GAC1C,EACF;EACF;EACA,SAAS,OAAO,gBAAgB,mBAAmB;EACnD,SAAS,OAAO,cAAc,mBAAmB;EACjD,SAAS,QAAQ,kBAAkB,IAAI;EACvC,SAAS,QAAQ,iBAAiB,MAAM,oBAAoB;EAC5D,SAAS,QAAQ,eAAe,qBAAqB,KAAA,GAAW,GAAG;EACnE,SACE,OACA,mBACAA,QAAAA,KAAK,MAAM,CACTA,QAAAA,KAAK,KAAK,GACVA,QAAAA,KAAK,OAAO;GACV,WAAW;GACX,QAAQ;GACR,iBAAiB;GACjB,WAAW;GACX,uBAAuB;GACvB,QAAQA,QAAAA,KAAK,OAAO;IAAE,UAAU,OAAO,CAAC,SAAS,QAAQ,CAAC;IAAG,QAAQ;GAAE,CAAC;EAC1E,CAAC,CACH,CAAC,CACH;EACA,SAAS,OAAO,sBAAsBA,QAAAA,KAAK,MAAM,CAACA,QAAAA,KAAK,KAAK,GAAGA,QAAAA,KAAK,OAAO;GAAE,SAAS;GAAG,WAAW,EAAE,CAAC;EAAE,CAAC,CAAC,CAAC,CAAC;EAC7G,SACE,OACA,aACAA,QAAAA,KAAK,MAAM,CACTA,QAAAA,KAAK,KAAK,GACVA,QAAAA,KAAK,OAAO;GAAE,IAAI;GAAG,WAAW,OAAO,CAAC,WAAW,KAAK,CAAC;GAAG,SAAS,EAAE,IAAI;GAAG,SAAS;GAAG,UAAU,EAAE,CAAC;EAAE,CAAC,CAC5G,CAAC,CACH;EACA,SAAS,QAAQ,iBAAiB,qBAAqBA,QAAAA,KAAK,OAAO;GAAE,IAAI;GAAG,OAAO,EAAE,CAAC;GAAG,QAAQ,EAAE,IAAI;EAAE,CAAC,CAAC;EAC3G,SACE,QACA,aACA,qBACAA,QAAAA,KAAK,OAAO;GAAE,OAAO,EAAE,CAAC;GAAG,MAAM,EAAEA,QAAAA,KAAK,OAAO;IAAE,SAAS;IAAG,WAAW;GAAE,CAAC,CAAC;GAAG,UAAU,EAAE,QAAQ;EAAE,CAAC,CACxG;CACF;CACA,SAAU,CAAC,UAAU,WAAW,CAAC,CAAW,SAAS,UAAU,CAC7D;EACE,IAAI;EACJ;EACA,SAAS;EACT,QAAQ;EACR,MAAM;EACN,WAAW;EACX,aAAa;EACb,OAAOA,QAAAA,KAAK,OAAO;GAAE,OAAO;GAAqB,SAASA,QAAAA,KAAK,MAAM,MAAM;GAAG,MAAM,EAAEA,QAAAA,KAAK,QAAQ,IAAI,CAAC;EAAE,CAAC;CAC7G,GACA;EACE,IAAI;EACJ;EACA,SAAS;EACT,QAAQ;EACR,MAAM;EACN,WAAW;EACX,aAAa;EACb,OAAOA,QAAAA,KAAK,OAAO,EAAE,QAAQ,OAAO;GAAC;GAAU;GAAW;GAAQ;EAAW,CAAC,EAAE,CAAC;CACnF,CACF,CAAC;AACH,CAAC"}

package/dist/apiContracts.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"apiContracts.d.mts","names":[],"sources":["../src/schemas/apiContracts.ts"],"mappings":";;qBAoEa"}
+{"version":3,"file":"apiContracts.d.mts","names":[],"sources":["../src/schemas/apiContracts.ts"],"mappings":";;qBA6Ea"}

package/dist/apiContracts.mjs

@@ -40,6 +40,26 @@ const ComputerStateSchema = Type.Object({
 	failure: O(Error),
 	artifact: O(Artifact)
 });
+const Permission = values([
+	"accessibility",
+	"screen-recording",
+	"microphone",
+	"automation",
+	"full-disk-access"
+]);
+const PermissionState = values([
+	"granted",
+	"denied",
+	"not-determined",
+	"per-app"
+]);
+const DesktopPermissionStatesSchema = Type.Object({
+	accessibility: PermissionState,
+	"screen-recording": PermissionState,
+	microphone: PermissionState,
+	automation: PermissionState,
+	"full-disk-access": PermissionState
+});
 const Reference = {
 	snapshotId: Type.String({ minLength: 1 }),
 	elementRef: Type.String({ minLength: 1 })
@@ -92,6 +112,32 @@ const apiContracts = defineApiContract({
 	version: 1,
 	dynamic: ["Desktop provider target extensions, observations and operation results are runtime-defined JSON."],
 	http: [
+		...[
+			"global",
+			"workspace",
+			"session"
+		].flatMap((scope) => ["GET", "POST"].map((method) => ({
+			id: `computer.permissions.${method === "GET" ? "read" : "request"}`,
+			scope,
+			basePath: "desktop-permissions",
+			path: "/",
+			method,
+			authentication: "owner",
+			description: method === "GET" ? "Read the Mac-owned permission states. Requires an authorized local Desktop caller or trusted remote caller." : "Ask macOS for one named permission. Requires an authorized local Desktop caller or remote passkey step-up.",
+			availability: "Requires Po Desktop to be running this server; otherwise returns 404.",
+			...method === "POST" ? { body: {
+				required: true,
+				contentType: "application/json",
+				schema: Type.Object({ permission: Permission })
+			} } : {},
+			responses: {
+				...jsonApiResponses(DesktopPermissionStatesSchema),
+				"502": {
+					description: "Desktop permission request failed.",
+					schema: Type.Object({ error: S })
+				}
+			}
+		}))),
 		{
 			id: "computer.activation.state",
 			scope: "session",

package/dist/apiContracts.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"apiContracts.mjs","names":[],"sources":["../src/schemas/apiContracts.ts"],"sourcesContent":["import { defineApiContract, jsonApiResponses, type PoHttpContract } from '@agimon-ai/po-core/apiContracts';\nimport { Type } from 'typebox';\n\nconst S = Type.String();\nconst N = Type.Number();\nconst O = Type.Optional;\nconst values = <T extends string>(items: T[]) => Type.Union(items.map((item) => Type.Literal(item)));\nconst Json = Type.Unknown({\n  description:\n    'Desktop provider JSON value. Targets, observations and action results are supplied by the admitted Desktop provider.',\n});\nconst Target = Type.Record(S, Json);\nconst Error = Type.Object({ code: S, message: S });\nconst Artifact = Type.Object({\n  artifactId: S,\n  status: values(['ready', 'failed']),\n  sizeBytes: O(N),\n  downloadUrl: O(S),\n  previewUrl: O(S),\n  actionCount: O(N),\n  completedAt: O(S),\n  failure: O(Error),\n});\nexport const ComputerStateSchema = Type.Object({\n  sessionId: S,\n  revision: N,\n  wake: N,\n  phase: values(['inactive', 'awaiting_confirmation', 'activating', 'active', 'stopping', 'failed']),\n  requestId: O(S),\n  target: O(Target),\n  durationMs: O(N),\n  expiresAt: O(N),\n  failure: O(Error),\n  artifact: O(Artifact),\n});\nconst Reference = { snapshotId: Type.String({ minLength: 1 }), elementRef: Type.String({ minLength: 1 }) };\nexport const ComputerActionSchema = Type.Union([\n  Type.Object({ kind: values(['press', 'focus']), ...Reference }, { additionalProperties: false }),\n  Type.Object({ kind: Type.Literal('set_value'), ...Reference, value: S }, { additionalProperties: false }),\n  Type.Object(\n    {\n      kind: Type.Literal('scroll'),\n      ...Reference,\n      direction: values(['up', 'down', 'left', 'right']),\n      amount: values(['line', 'page']),\n    },\n    { additionalProperties: false },\n  ),\n]);\nconst internal = (\n  method: 'GET' | 'POST',\n  path: string,\n  output: object,\n  body?: object,\n  status = 200,\n): PoHttpContract => ({\n  id: `computer.${path.slice(1).replaceAll('/', '.')}`,\n  scope: 'session',\n  basePath: 'computer-use',\n  path,\n  method,\n  authentication: 'owner',\n  description: `Computer use broker ${path}. Requires the host-issued ${path.startsWith('/agent/') ? 'agent' : 'hub'} bearer token.`,\n  availability: 'Internal broker route; ordinary browser credentials are insufficient.',\n  parameters: [{ name: 'Authorization', in: 'header', required: true, schema: Type.String({ pattern: '^Bearer .+' }) }],\n  ...(body ? { body: { required: true, contentType: 'application/json', schema: body } } : {}),\n  responses: jsonApiResponses(output, status),\n});\nexport const apiContracts = defineApiContract({\n  version: 1,\n  dynamic: ['Desktop provider target extensions, observations and operation results are runtime-defined JSON.'],\n  http: [\n    {\n      id: 'computer.activation.state',\n      scope: 'session',\n      basePath: 'computer-use',\n      path: '/activate',\n      method: 'GET',\n      authentication: 'owner',\n      description: 'Read state as the matching pending requester or approved recording reader.',\n      responses: jsonApiResponses(ComputerStateSchema),\n    },\n    {\n      id: 'computer.activation.cancel',\n      scope: 'session',\n      basePath: 'computer-use',\n      path: '/activate',\n      method: 'DELETE',\n      authentication: 'owner',\n      description: 'Cancel only the matching requester pending activation.',\n      responses: jsonApiResponses(ComputerStateSchema, 202),\n    },\n    {\n      id: 'computer.activate',\n      scope: 'session',\n      basePath: 'computer-use',\n      path: '/activate',\n      method: 'POST',\n      authentication: 'owner',\n      description:\n        'Request confirmed Desktop access with admitted caller and remote step-up context. A remote caller may omit target so the local Mac selects the window.',\n      body: {\n        required: true,\n        contentType: 'application/json',\n        schema: Type.Object({\n          target: O(Type.Object({ windowId: S, bundleId: S })),\n          durationMs: Type.Integer({ minimum: 1000, maximum: 1800000 }),\n        }),\n      },\n      responses: jsonApiResponses(ComputerStateSchema, 202),\n    },\n    {\n      id: 'computer.artifact',\n      scope: 'session',\n      basePath: 'computer-use',\n      path: '/artifact',\n      method: 'GET',\n      authentication: 'owner',\n      description: 'Read at most 1 MiB of a recording belonging to this session and approved caller.',\n      parameters: [\n        { name: 'artifactId', in: 'query', required: true, schema: S },\n        { name: 'offset', in: 'query', required: true, schema: Type.Integer({ minimum: 0 }) },\n      ],\n      responses: {\n        206: {\n          description: 'Bounded recording bytes.',\n          contentType: 'video/mp4',\n          schema: Type.String({ format: 'binary' }),\n        },\n      },\n    },\n    internal('GET', '/agent/state', ComputerStateSchema),\n    internal('GET', '/hub/state', ComputerStateSchema),\n    internal('POST', '/agent/observe', Json),\n    internal('POST', '/agent/action', Json, ComputerActionSchema),\n    internal('POST', '/agent/stop', ComputerStateSchema, undefined, 202),\n    internal(\n      'GET',\n      '/hub/activation',\n      Type.Union([\n        Type.Null(),\n        Type.Object({\n          requestId: S,\n          target: Target,\n          durationSeconds: N,\n          createdAt: N,\n          confirmationExpiresAt: N,\n          caller: Type.Object({ locality: values(['local', 'remote']), stepUp: S }),\n        }),\n      ]),\n    ),\n    internal('GET', '/hub/authorization', Type.Union([Type.Null(), Type.Object({ grantId: S, expiresAt: O(N) })])),\n    internal(\n      'GET',\n      '/hub/next',\n      Type.Union([\n        Type.Null(),\n        Type.Object({ id: S, operation: values(['observe', 'act']), payload: O(Json), grantId: S, sequence: O(N) }),\n      ]),\n    ),\n    internal('POST', '/hub/complete', ComputerStateSchema, Type.Object({ id: S, error: O(S), result: O(Json) })),\n    internal(\n      'POST',\n      '/hub/stop',\n      ComputerStateSchema,\n      Type.Object({ error: O(S), host: O(Type.Object({ grantId: S, expiresAt: N })), artifact: O(Artifact) }),\n    ),\n  ],\n  sockets: (['global', 'workspace'] as const).flatMap((scope) => [\n    {\n      id: 'computer.state',\n      scope,\n      service: 'po.hub',\n      member: 'computer_use_state',\n      kind: 'channel',\n      direction: 'server-to-client',\n      description: 'Computer use channel payload.',\n      input: Type.Object({ state: ComputerStateSchema, targets: Type.Array(Target), busy: O(Type.Literal(true)) }),\n    },\n    {\n      id: 'computer.command',\n      scope,\n      service: 'po.hub',\n      member: 'computer_use_state',\n      kind: 'channel',\n      direction: 'client-to-server',\n      description: 'Computer use browser channel command.',\n      input: Type.Object({ action: values(['status', 'targets', 'stop', 'artifacts']) }),\n    },\n  ]),\n});\nexport default apiContracts;\n"],"mappings":";;;AAGA,MAAM,IAAI,KAAK,OAAO;AACtB,MAAM,IAAI,KAAK,OAAO;AACtB,MAAM,IAAI,KAAK;AACf,MAAM,UAA4B,UAAe,KAAK,MAAM,MAAM,KAAK,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC;AACnG,MAAM,OAAO,KAAK,QAAQ,EACxB,aACE,uHACJ,CAAC;AACD,MAAM,SAAS,KAAK,OAAO,GAAG,IAAI;AAClC,MAAM,QAAQ,KAAK,OAAO;CAAE,MAAM;CAAG,SAAS;AAAE,CAAC;AACjD,MAAM,WAAW,KAAK,OAAO;CAC3B,YAAY;CACZ,QAAQ,OAAO,CAAC,SAAS,QAAQ,CAAC;CAClC,WAAW,EAAE,CAAC;CACd,aAAa,EAAE,CAAC;CAChB,YAAY,EAAE,CAAC;CACf,aAAa,EAAE,CAAC;CAChB,aAAa,EAAE,CAAC;CAChB,SAAS,EAAE,KAAK;AAClB,CAAC;AACD,MAAa,sBAAsB,KAAK,OAAO;CAC7C,WAAW;CACX,UAAU;CACV,MAAM;CACN,OAAO,OAAO;EAAC;EAAY;EAAyB;EAAc;EAAU;EAAY;CAAQ,CAAC;CACjG,WAAW,EAAE,CAAC;CACd,QAAQ,EAAE,MAAM;CAChB,YAAY,EAAE,CAAC;CACf,WAAW,EAAE,CAAC;CACd,SAAS,EAAE,KAAK;CAChB,UAAU,EAAE,QAAQ;AACtB,CAAC;AACD,MAAM,YAAY;CAAE,YAAY,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAAG,YAAY,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AAAE;AACzG,MAAa,uBAAuB,KAAK,MAAM;CAC7C,KAAK,OAAO;EAAE,MAAM,OAAO,CAAC,SAAS,OAAO,CAAC;EAAG,GAAG;CAAU,GAAG,EAAE,sBAAsB,MAAM,CAAC;CAC/F,KAAK,OAAO;EAAE,MAAM,KAAK,QAAQ,WAAW;EAAG,GAAG;EAAW,OAAO;CAAE,GAAG,EAAE,sBAAsB,MAAM,CAAC;CACxG,KAAK,OACH;EACE,MAAM,KAAK,QAAQ,QAAQ;EAC3B,GAAG;EACH,WAAW,OAAO;GAAC;GAAM;GAAQ;GAAQ;EAAO,CAAC;EACjD,QAAQ,OAAO,CAAC,QAAQ,MAAM,CAAC;CACjC,GACA,EAAE,sBAAsB,MAAM,CAChC;AACF,CAAC;AACD,MAAM,YACJ,QACA,MACA,QACA,MACA,SAAS,SACW;CACpB,IAAI,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,KAAK,GAAG;CACjD,OAAO;CACP,UAAU;CACV;CACA;CACA,gBAAgB;CAChB,aAAa,uBAAuB,KAAK,6BAA6B,KAAK,WAAW,SAAS,IAAI,UAAU,MAAM;CACnH,cAAc;CACd,YAAY,CAAC;EAAE,MAAM;EAAiB,IAAI;EAAU,UAAU;EAAM,QAAQ,KAAK,OAAO,EAAE,SAAS,aAAa,CAAC;CAAE,CAAC;CACpH,GAAI,OAAO,EAAE,MAAM;EAAE,UAAU;EAAM,aAAa;EAAoB,QAAQ;CAAK,EAAE,IAAI,CAAC;CAC1F,WAAW,iBAAiB,QAAQ,MAAM;AAC5C;AACA,MAAa,eAAe,kBAAkB;CAC5C,SAAS;CACT,SAAS,CAAC,kGAAkG;CAC5G,MAAM;EACJ;GACE,IAAI;GACJ,OAAO;GACP,UAAU;GACV,MAAM;GACN,QAAQ;GACR,gBAAgB;GAChB,aAAa;GACb,WAAW,iBAAiB,mBAAmB;EACjD;EACA;GACE,IAAI;GACJ,OAAO;GACP,UAAU;GACV,MAAM;GACN,QAAQ;GACR,gBAAgB;GAChB,aAAa;GACb,WAAW,iBAAiB,qBAAqB,GAAG;EACtD;EACA;GACE,IAAI;GACJ,OAAO;GACP,UAAU;GACV,MAAM;GACN,QAAQ;GACR,gBAAgB;GAChB,aACE;GACF,MAAM;IACJ,UAAU;IACV,aAAa;IACb,QAAQ,KAAK,OAAO;KAClB,QAAQ,EAAE,KAAK,OAAO;MAAE,UAAU;MAAG,UAAU;KAAE,CAAC,CAAC;KACnD,YAAY,KAAK,QAAQ;MAAE,SAAS;MAAM,SAAS;KAAQ,CAAC;IAC9D,CAAC;GACH;GACA,WAAW,iBAAiB,qBAAqB,GAAG;EACtD;EACA;GACE,IAAI;GACJ,OAAO;GACP,UAAU;GACV,MAAM;GACN,QAAQ;GACR,gBAAgB;GAChB,aAAa;GACb,YAAY,CACV;IAAE,MAAM;IAAc,IAAI;IAAS,UAAU;IAAM,QAAQ;GAAE,GAC7D;IAAE,MAAM;IAAU,IAAI;IAAS,UAAU;IAAM,QAAQ,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;GAAE,CACtF;GACA,WAAW,EACT,KAAK;IACH,aAAa;IACb,aAAa;IACb,QAAQ,KAAK,OAAO,EAAE,QAAQ,SAAS,CAAC;GAC1C,EACF;EACF;EACA,SAAS,OAAO,gBAAgB,mBAAmB;EACnD,SAAS,OAAO,cAAc,mBAAmB;EACjD,SAAS,QAAQ,kBAAkB,IAAI;EACvC,SAAS,QAAQ,iBAAiB,MAAM,oBAAoB;EAC5D,SAAS,QAAQ,eAAe,qBAAqB,KAAA,GAAW,GAAG;EACnE,SACE,OACA,mBACA,KAAK,MAAM,CACT,KAAK,KAAK,GACV,KAAK,OAAO;GACV,WAAW;GACX,QAAQ;GACR,iBAAiB;GACjB,WAAW;GACX,uBAAuB;GACvB,QAAQ,KAAK,OAAO;IAAE,UAAU,OAAO,CAAC,SAAS,QAAQ,CAAC;IAAG,QAAQ;GAAE,CAAC;EAC1E,CAAC,CACH,CAAC,CACH;EACA,SAAS,OAAO,sBAAsB,KAAK,MAAM,CAAC,KAAK,KAAK,GAAG,KAAK,OAAO;GAAE,SAAS;GAAG,WAAW,EAAE,CAAC;EAAE,CAAC,CAAC,CAAC,CAAC;EAC7G,SACE,OACA,aACA,KAAK,MAAM,CACT,KAAK,KAAK,GACV,KAAK,OAAO;GAAE,IAAI;GAAG,WAAW,OAAO,CAAC,WAAW,KAAK,CAAC;GAAG,SAAS,EAAE,IAAI;GAAG,SAAS;GAAG,UAAU,EAAE,CAAC;EAAE,CAAC,CAC5G,CAAC,CACH;EACA,SAAS,QAAQ,iBAAiB,qBAAqB,KAAK,OAAO;GAAE,IAAI;GAAG,OAAO,EAAE,CAAC;GAAG,QAAQ,EAAE,IAAI;EAAE,CAAC,CAAC;EAC3G,SACE,QACA,aACA,qBACA,KAAK,OAAO;GAAE,OAAO,EAAE,CAAC;GAAG,MAAM,EAAE,KAAK,OAAO;IAAE,SAAS;IAAG,WAAW;GAAE,CAAC,CAAC;GAAG,UAAU,EAAE,QAAQ;EAAE,CAAC,CACxG;CACF;CACA,SAAU,CAAC,UAAU,WAAW,CAAC,CAAW,SAAS,UAAU,CAC7D;EACE,IAAI;EACJ;EACA,SAAS;EACT,QAAQ;EACR,MAAM;EACN,WAAW;EACX,aAAa;EACb,OAAO,KAAK,OAAO;GAAE,OAAO;GAAqB,SAAS,KAAK,MAAM,MAAM;GAAG,MAAM,EAAE,KAAK,QAAQ,IAAI,CAAC;EAAE,CAAC;CAC7G,GACA;EACE,IAAI;EACJ;EACA,SAAS;EACT,QAAQ;EACR,MAAM;EACN,WAAW;EACX,aAAa;EACb,OAAO,KAAK,OAAO,EAAE,QAAQ,OAAO;GAAC;GAAU;GAAW;GAAQ;EAAW,CAAC,EAAE,CAAC;CACnF,CACF,CAAC;AACH,CAAC"}
+{"version":3,"file":"apiContracts.mjs","names":[],"sources":["../src/schemas/apiContracts.ts"],"sourcesContent":["import { defineApiContract, jsonApiResponses, type PoHttpContract } from '@agimon-ai/po-core/apiContracts';\nimport { Type } from 'typebox';\n\nconst S = Type.String();\nconst N = Type.Number();\nconst O = Type.Optional;\nconst values = <T extends string>(items: T[]) => Type.Union(items.map((item) => Type.Literal(item)));\nconst Json = Type.Unknown({\n  description:\n    'Desktop provider JSON value. Targets, observations and action results are supplied by the admitted Desktop provider.',\n});\nconst Target = Type.Record(S, Json);\nconst Error = Type.Object({ code: S, message: S });\nconst Artifact = Type.Object({\n  artifactId: S,\n  status: values(['ready', 'failed']),\n  sizeBytes: O(N),\n  downloadUrl: O(S),\n  previewUrl: O(S),\n  actionCount: O(N),\n  completedAt: O(S),\n  failure: O(Error),\n});\nexport const ComputerStateSchema = Type.Object({\n  sessionId: S,\n  revision: N,\n  wake: N,\n  phase: values(['inactive', 'awaiting_confirmation', 'activating', 'active', 'stopping', 'failed']),\n  requestId: O(S),\n  target: O(Target),\n  durationMs: O(N),\n  expiresAt: O(N),\n  failure: O(Error),\n  artifact: O(Artifact),\n});\nconst Permission = values(['accessibility', 'screen-recording', 'microphone', 'automation', 'full-disk-access']);\nconst PermissionState = values(['granted', 'denied', 'not-determined', 'per-app']);\nexport const DesktopPermissionStatesSchema = Type.Object({\n  accessibility: PermissionState,\n  'screen-recording': PermissionState,\n  microphone: PermissionState,\n  automation: PermissionState,\n  'full-disk-access': PermissionState,\n});\nconst Reference = { snapshotId: Type.String({ minLength: 1 }), elementRef: Type.String({ minLength: 1 }) };\nexport const ComputerActionSchema = Type.Union([\n  Type.Object({ kind: values(['press', 'focus']), ...Reference }, { additionalProperties: false }),\n  Type.Object({ kind: Type.Literal('set_value'), ...Reference, value: S }, { additionalProperties: false }),\n  Type.Object(\n    {\n      kind: Type.Literal('scroll'),\n      ...Reference,\n      direction: values(['up', 'down', 'left', 'right']),\n      amount: values(['line', 'page']),\n    },\n    { additionalProperties: false },\n  ),\n]);\nconst internal = (\n  method: 'GET' | 'POST',\n  path: string,\n  output: object,\n  body?: object,\n  status = 200,\n): PoHttpContract => ({\n  id: `computer.${path.slice(1).replaceAll('/', '.')}`,\n  scope: 'session',\n  basePath: 'computer-use',\n  path,\n  method,\n  authentication: 'owner',\n  description: `Computer use broker ${path}. Requires the host-issued ${path.startsWith('/agent/') ? 'agent' : 'hub'} bearer token.`,\n  availability: 'Internal broker route; ordinary browser credentials are insufficient.',\n  parameters: [{ name: 'Authorization', in: 'header', required: true, schema: Type.String({ pattern: '^Bearer .+' }) }],\n  ...(body ? { body: { required: true, contentType: 'application/json', schema: body } } : {}),\n  responses: jsonApiResponses(output, status),\n});\nexport const apiContracts = defineApiContract({\n  version: 1,\n  dynamic: ['Desktop provider target extensions, observations and operation results are runtime-defined JSON.'],\n  http: [\n    ...(['global', 'workspace', 'session'] as const).flatMap((scope) =>\n      (['GET', 'POST'] as const).map((method) => ({\n        id: `computer.permissions.${method === 'GET' ? 'read' : 'request'}`,\n        scope,\n        basePath: 'desktop-permissions',\n        path: '/',\n        method,\n        authentication: 'owner' as const,\n        description:\n          method === 'GET'\n            ? 'Read the Mac-owned permission states. Requires an authorized local Desktop caller or trusted remote caller.'\n            : 'Ask macOS for one named permission. Requires an authorized local Desktop caller or remote passkey step-up.',\n        availability: 'Requires Po Desktop to be running this server; otherwise returns 404.',\n        ...(method === 'POST'\n          ? {\n              body: {\n                required: true,\n                contentType: 'application/json',\n                schema: Type.Object({ permission: Permission }),\n              },\n            }\n          : {}),\n        responses: {\n          ...jsonApiResponses(DesktopPermissionStatesSchema),\n          '502': { description: 'Desktop permission request failed.', schema: Type.Object({ error: S }) },\n        },\n      })),\n    ),\n    {\n      id: 'computer.activation.state',\n      scope: 'session',\n      basePath: 'computer-use',\n      path: '/activate',\n      method: 'GET',\n      authentication: 'owner',\n      description: 'Read state as the matching pending requester or approved recording reader.',\n      responses: jsonApiResponses(ComputerStateSchema),\n    },\n    {\n      id: 'computer.activation.cancel',\n      scope: 'session',\n      basePath: 'computer-use',\n      path: '/activate',\n      method: 'DELETE',\n      authentication: 'owner',\n      description: 'Cancel only the matching requester pending activation.',\n      responses: jsonApiResponses(ComputerStateSchema, 202),\n    },\n    {\n      id: 'computer.activate',\n      scope: 'session',\n      basePath: 'computer-use',\n      path: '/activate',\n      method: 'POST',\n      authentication: 'owner',\n      description:\n        'Request confirmed Desktop access with admitted caller and remote step-up context. A remote caller may omit target so the local Mac selects the window.',\n      body: {\n        required: true,\n        contentType: 'application/json',\n        schema: Type.Object({\n          target: O(Type.Object({ windowId: S, bundleId: S })),\n          durationMs: Type.Integer({ minimum: 1000, maximum: 1800000 }),\n        }),\n      },\n      responses: jsonApiResponses(ComputerStateSchema, 202),\n    },\n    {\n      id: 'computer.artifact',\n      scope: 'session',\n      basePath: 'computer-use',\n      path: '/artifact',\n      method: 'GET',\n      authentication: 'owner',\n      description: 'Read at most 1 MiB of a recording belonging to this session and approved caller.',\n      parameters: [\n        { name: 'artifactId', in: 'query', required: true, schema: S },\n        { name: 'offset', in: 'query', required: true, schema: Type.Integer({ minimum: 0 }) },\n      ],\n      responses: {\n        206: {\n          description: 'Bounded recording bytes.',\n          contentType: 'video/mp4',\n          schema: Type.String({ format: 'binary' }),\n        },\n      },\n    },\n    internal('GET', '/agent/state', ComputerStateSchema),\n    internal('GET', '/hub/state', ComputerStateSchema),\n    internal('POST', '/agent/observe', Json),\n    internal('POST', '/agent/action', Json, ComputerActionSchema),\n    internal('POST', '/agent/stop', ComputerStateSchema, undefined, 202),\n    internal(\n      'GET',\n      '/hub/activation',\n      Type.Union([\n        Type.Null(),\n        Type.Object({\n          requestId: S,\n          target: Target,\n          durationSeconds: N,\n          createdAt: N,\n          confirmationExpiresAt: N,\n          caller: Type.Object({ locality: values(['local', 'remote']), stepUp: S }),\n        }),\n      ]),\n    ),\n    internal('GET', '/hub/authorization', Type.Union([Type.Null(), Type.Object({ grantId: S, expiresAt: O(N) })])),\n    internal(\n      'GET',\n      '/hub/next',\n      Type.Union([\n        Type.Null(),\n        Type.Object({ id: S, operation: values(['observe', 'act']), payload: O(Json), grantId: S, sequence: O(N) }),\n      ]),\n    ),\n    internal('POST', '/hub/complete', ComputerStateSchema, Type.Object({ id: S, error: O(S), result: O(Json) })),\n    internal(\n      'POST',\n      '/hub/stop',\n      ComputerStateSchema,\n      Type.Object({ error: O(S), host: O(Type.Object({ grantId: S, expiresAt: N })), artifact: O(Artifact) }),\n    ),\n  ],\n  sockets: (['global', 'workspace'] as const).flatMap((scope) => [\n    {\n      id: 'computer.state',\n      scope,\n      service: 'po.hub',\n      member: 'computer_use_state',\n      kind: 'channel',\n      direction: 'server-to-client',\n      description: 'Computer use channel payload.',\n      input: Type.Object({ state: ComputerStateSchema, targets: Type.Array(Target), busy: O(Type.Literal(true)) }),\n    },\n    {\n      id: 'computer.command',\n      scope,\n      service: 'po.hub',\n      member: 'computer_use_state',\n      kind: 'channel',\n      direction: 'client-to-server',\n      description: 'Computer use browser channel command.',\n      input: Type.Object({ action: values(['status', 'targets', 'stop', 'artifacts']) }),\n    },\n  ]),\n});\nexport default apiContracts;\n"],"mappings":";;;AAGA,MAAM,IAAI,KAAK,OAAO;AACtB,MAAM,IAAI,KAAK,OAAO;AACtB,MAAM,IAAI,KAAK;AACf,MAAM,UAA4B,UAAe,KAAK,MAAM,MAAM,KAAK,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC;AACnG,MAAM,OAAO,KAAK,QAAQ,EACxB,aACE,uHACJ,CAAC;AACD,MAAM,SAAS,KAAK,OAAO,GAAG,IAAI;AAClC,MAAM,QAAQ,KAAK,OAAO;CAAE,MAAM;CAAG,SAAS;AAAE,CAAC;AACjD,MAAM,WAAW,KAAK,OAAO;CAC3B,YAAY;CACZ,QAAQ,OAAO,CAAC,SAAS,QAAQ,CAAC;CAClC,WAAW,EAAE,CAAC;CACd,aAAa,EAAE,CAAC;CAChB,YAAY,EAAE,CAAC;CACf,aAAa,EAAE,CAAC;CAChB,aAAa,EAAE,CAAC;CAChB,SAAS,EAAE,KAAK;AAClB,CAAC;AACD,MAAa,sBAAsB,KAAK,OAAO;CAC7C,WAAW;CACX,UAAU;CACV,MAAM;CACN,OAAO,OAAO;EAAC;EAAY;EAAyB;EAAc;EAAU;EAAY;CAAQ,CAAC;CACjG,WAAW,EAAE,CAAC;CACd,QAAQ,EAAE,MAAM;CAChB,YAAY,EAAE,CAAC;CACf,WAAW,EAAE,CAAC;CACd,SAAS,EAAE,KAAK;CAChB,UAAU,EAAE,QAAQ;AACtB,CAAC;AACD,MAAM,aAAa,OAAO;CAAC;CAAiB;CAAoB;CAAc;CAAc;AAAkB,CAAC;AAC/G,MAAM,kBAAkB,OAAO;CAAC;CAAW;CAAU;CAAkB;AAAS,CAAC;AACjF,MAAa,gCAAgC,KAAK,OAAO;CACvD,eAAe;CACf,oBAAoB;CACpB,YAAY;CACZ,YAAY;CACZ,oBAAoB;AACtB,CAAC;AACD,MAAM,YAAY;CAAE,YAAY,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAAG,YAAY,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AAAE;AACzG,MAAa,uBAAuB,KAAK,MAAM;CAC7C,KAAK,OAAO;EAAE,MAAM,OAAO,CAAC,SAAS,OAAO,CAAC;EAAG,GAAG;CAAU,GAAG,EAAE,sBAAsB,MAAM,CAAC;CAC/F,KAAK,OAAO;EAAE,MAAM,KAAK,QAAQ,WAAW;EAAG,GAAG;EAAW,OAAO;CAAE,GAAG,EAAE,sBAAsB,MAAM,CAAC;CACxG,KAAK,OACH;EACE,MAAM,KAAK,QAAQ,QAAQ;EAC3B,GAAG;EACH,WAAW,OAAO;GAAC;GAAM;GAAQ;GAAQ;EAAO,CAAC;EACjD,QAAQ,OAAO,CAAC,QAAQ,MAAM,CAAC;CACjC,GACA,EAAE,sBAAsB,MAAM,CAChC;AACF,CAAC;AACD,MAAM,YACJ,QACA,MACA,QACA,MACA,SAAS,SACW;CACpB,IAAI,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,KAAK,GAAG;CACjD,OAAO;CACP,UAAU;CACV;CACA;CACA,gBAAgB;CAChB,aAAa,uBAAuB,KAAK,6BAA6B,KAAK,WAAW,SAAS,IAAI,UAAU,MAAM;CACnH,cAAc;CACd,YAAY,CAAC;EAAE,MAAM;EAAiB,IAAI;EAAU,UAAU;EAAM,QAAQ,KAAK,OAAO,EAAE,SAAS,aAAa,CAAC;CAAE,CAAC;CACpH,GAAI,OAAO,EAAE,MAAM;EAAE,UAAU;EAAM,aAAa;EAAoB,QAAQ;CAAK,EAAE,IAAI,CAAC;CAC1F,WAAW,iBAAiB,QAAQ,MAAM;AAC5C;AACA,MAAa,eAAe,kBAAkB;CAC5C,SAAS;CACT,SAAS,CAAC,kGAAkG;CAC5G,MAAM;EACJ,GAAI;GAAC;GAAU;GAAa;EAAS,CAAC,CAAW,SAAS,UACvD,CAAC,OAAO,MAAM,CAAC,CAAW,KAAK,YAAY;GAC1C,IAAI,wBAAwB,WAAW,QAAQ,SAAS;GACxD;GACA,UAAU;GACV,MAAM;GACN;GACA,gBAAgB;GAChB,aACE,WAAW,QACP,gHACA;GACN,cAAc;GACd,GAAI,WAAW,SACX,EACE,MAAM;IACJ,UAAU;IACV,aAAa;IACb,QAAQ,KAAK,OAAO,EAAE,YAAY,WAAW,CAAC;GAChD,EACF,IACA,CAAC;GACL,WAAW;IACT,GAAG,iBAAiB,6BAA6B;IACjD,OAAO;KAAE,aAAa;KAAsC,QAAQ,KAAK,OAAO,EAAE,OAAO,EAAE,CAAC;IAAE;GAChG;EACF,EAAE,CACJ;EACA;GACE,IAAI;GACJ,OAAO;GACP,UAAU;GACV,MAAM;GACN,QAAQ;GACR,gBAAgB;GAChB,aAAa;GACb,WAAW,iBAAiB,mBAAmB;EACjD;EACA;GACE,IAAI;GACJ,OAAO;GACP,UAAU;GACV,MAAM;GACN,QAAQ;GACR,gBAAgB;GAChB,aAAa;GACb,WAAW,iBAAiB,qBAAqB,GAAG;EACtD;EACA;GACE,IAAI;GACJ,OAAO;GACP,UAAU;GACV,MAAM;GACN,QAAQ;GACR,gBAAgB;GAChB,aACE;GACF,MAAM;IACJ,UAAU;IACV,aAAa;IACb,QAAQ,KAAK,OAAO;KAClB,QAAQ,EAAE,KAAK,OAAO;MAAE,UAAU;MAAG,UAAU;KAAE,CAAC,CAAC;KACnD,YAAY,KAAK,QAAQ;MAAE,SAAS;MAAM,SAAS;KAAQ,CAAC;IAC9D,CAAC;GACH;GACA,WAAW,iBAAiB,qBAAqB,GAAG;EACtD;EACA;GACE,IAAI;GACJ,OAAO;GACP,UAAU;GACV,MAAM;GACN,QAAQ;GACR,gBAAgB;GAChB,aAAa;GACb,YAAY,CACV;IAAE,MAAM;IAAc,IAAI;IAAS,UAAU;IAAM,QAAQ;GAAE,GAC7D;IAAE,MAAM;IAAU,IAAI;IAAS,UAAU;IAAM,QAAQ,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;GAAE,CACtF;GACA,WAAW,EACT,KAAK;IACH,aAAa;IACb,aAAa;IACb,QAAQ,KAAK,OAAO,EAAE,QAAQ,SAAS,CAAC;GAC1C,EACF;EACF;EACA,SAAS,OAAO,gBAAgB,mBAAmB;EACnD,SAAS,OAAO,cAAc,mBAAmB;EACjD,SAAS,QAAQ,kBAAkB,IAAI;EACvC,SAAS,QAAQ,iBAAiB,MAAM,oBAAoB;EAC5D,SAAS,QAAQ,eAAe,qBAAqB,KAAA,GAAW,GAAG;EACnE,SACE,OACA,mBACA,KAAK,MAAM,CACT,KAAK,KAAK,GACV,KAAK,OAAO;GACV,WAAW;GACX,QAAQ;GACR,iBAAiB;GACjB,WAAW;GACX,uBAAuB;GACvB,QAAQ,KAAK,OAAO;IAAE,UAAU,OAAO,CAAC,SAAS,QAAQ,CAAC;IAAG,QAAQ;GAAE,CAAC;EAC1E,CAAC,CACH,CAAC,CACH;EACA,SAAS,OAAO,sBAAsB,KAAK,MAAM,CAAC,KAAK,KAAK,GAAG,KAAK,OAAO;GAAE,SAAS;GAAG,WAAW,EAAE,CAAC;EAAE,CAAC,CAAC,CAAC,CAAC;EAC7G,SACE,OACA,aACA,KAAK,MAAM,CACT,KAAK,KAAK,GACV,KAAK,OAAO;GAAE,IAAI;GAAG,WAAW,OAAO,CAAC,WAAW,KAAK,CAAC;GAAG,SAAS,EAAE,IAAI;GAAG,SAAS;GAAG,UAAU,EAAE,CAAC;EAAE,CAAC,CAC5G,CAAC,CACH;EACA,SAAS,QAAQ,iBAAiB,qBAAqB,KAAK,OAAO;GAAE,IAAI;GAAG,OAAO,EAAE,CAAC;GAAG,QAAQ,EAAE,IAAI;EAAE,CAAC,CAAC;EAC3G,SACE,QACA,aACA,qBACA,KAAK,OAAO;GAAE,OAAO,EAAE,CAAC;GAAG,MAAM,EAAE,KAAK,OAAO;IAAE,SAAS;IAAG,WAAW;GAAE,CAAC,CAAC;GAAG,UAAU,EAAE,QAAQ;EAAE,CAAC,CACxG;CACF;CACA,SAAU,CAAC,UAAU,WAAW,CAAC,CAAW,SAAS,UAAU,CAC7D;EACE,IAAI;EACJ;EACA,SAAS;EACT,QAAQ;EACR,MAAM;EACN,WAAW;EACX,aAAa;EACb,OAAO,KAAK,OAAO;GAAE,OAAO;GAAqB,SAAS,KAAK,MAAM,MAAM;GAAG,MAAM,EAAE,KAAK,QAAQ,IAAI,CAAC;EAAE,CAAC;CAC7G,GACA;EACE,IAAI;EACJ;EACA,SAAS;EACT,QAAQ;EACR,MAAM;EACN,WAAW;EACX,aAAa;EACb,OAAO,KAAK,OAAO,EAAE,QAAQ,OAAO;GAAC;GAAU;GAAW;GAAQ;EAAW,CAAC,EAAE,CAAC;CACnF,CACF,CAAC;AACH,CAAC"}

package/dist/extensions/native.mjs

@@ -1,19 +1,47 @@
-import { defineActivityGroup, defineChannelFile, defineNativePlugin, defineSessionStore } from "@agimon-ai/po-core/native";
+import { createApiClient, defineActivityGroup, defineChannelFile, defineFill, defineNativePlugin, defineSessionStore, nativeApiTransport, sessionApiAddress } from "@agimon-ai/po-core/native";
+import { View } from "react-native-unistyles/components/native/View";
+import { Text } from "react-native-unistyles/components/native/Text";
+import { Button, fontOf } from "@agimon-ai/po-native-components";
+import { useCallback, useEffect, useRef, useState, useSyncExternalStore } from "react";
+import { StyleSheet } from "react-native-unistyles";
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 //#region src/types/computerUseApi.ts
 const computerUseChannelType = "computer_use_state";
+const COMPUTER_USE_STATUS_KEY = "po-computer-use";
+const COMPUTER_USE_DEFAULT_DURATION_MS = 3e5;
+/**
+* Every path this API answers on, below its mount.
+*
+* The typed route table in `./apiRoutes` is built from this, the dispatcher
+* reads that table, and the hub channel addresses the broker with these same
+* strings, so a route cannot move on one side alone.
+*/
+const COMPUTER_USE_ROUTES = {
+	activate: "/activate",
+	artifact: "/artifact",
+	agentState: "/agent/state",
+	agentObserve: "/agent/observe",
+	agentAction: "/agent/action",
+	agentStop: "/agent/stop",
+	hubState: "/hub/state",
+	hubActivation: "/hub/activation",
+	hubAuthorization: "/hub/authorization",
+	hubNext: "/hub/next",
+	hubComplete: "/hub/complete",
+	hubStop: "/hub/stop"
+};
 //#endregion
 //#region src/extensions/workspaces/sessions/(frontend)/activity-group/computer-use.native.ts
-/** Computer control remains a desktop capability, including when its status is reported to a phone. */
+/** Remote clients request control from the Desktop host through their session Activity. */
 var computer_use_native_default$1 = defineActivityGroup({
 	name: "computer-use",
 	keys: "c e",
 	order: 70,
-	statusKey: "po-computer-use",
+	statusKey: COMPUTER_USE_STATUS_KEY,
 	hideWhenEmpty: true,
-	desktopOnly: true,
 	marksBackgroundWork: false
 });
-const computerUse = defineSessionStore({
+const computerUse$1 = defineSessionStore({
 	state: {
 		sessionId: "",
 		revision: 0,
@@ -25,7 +53,7 @@ const computerUse = defineSessionStore({
 function isRecord(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-const computerUseChannel = computerUse.channel({
+const computerUseChannel = computerUse$1.channel({
 	channel: computerUseChannelType,
 	parse(input) {
 		if (!isRecord(input) || !isRecord(input.state) || !Array.isArray(input.targets)) return null;
@@ -38,6 +66,309 @@ const computerUseChannel = computerUse.channel({
 //#region src/extensions/workspaces/sessions/(frontend)/channel/computer-use.native.ts
 var computer_use_native_default = defineChannelFile(computerUseChannel);
 //#endregion
+//#region src/types/apiRoutes.ts
+/**
+* This package's routes, as data.
+*
+* No scope and no base path: the build reads both off
+* `src/extensions/workspaces/sessions/(backend)/api/computer-use/`, so the
+* mount is stated once, by the folder that creates it.
+*
+* The paths come from `COMPUTER_USE_ROUTES` rather than being written out
+* again. That table already addressed the broker from the hub channel and from
+* the broker's own dispatcher, and a second copy here is exactly the
+* disagreement this file exists to prevent. The dispatcher now reads this
+* table, so the page, the broker and the hub all resolve one set of strings.
+*
+* Activation, status, cancellation and recording reads are reachable from a browser. The `/agent/` and `/hub/` routes
+* each demand a host-issued bearer token and answer 404 without one; they are
+* declared here because they are this API's surface, not because a page calls
+* them.
+*/
+const routes = {
+	artifact: {
+		method: "GET",
+		path: COMPUTER_USE_ROUTES.artifact,
+		query: ["artifactId", "offset"],
+		raw: true
+	},
+	activationState: {
+		method: "GET",
+		path: COMPUTER_USE_ROUTES.activate,
+		response: void 0
+	},
+	cancelActivation: {
+		method: "DELETE",
+		path: COMPUTER_USE_ROUTES.activate,
+		response: void 0
+	},
+	activate: {
+		method: "POST",
+		path: COMPUTER_USE_ROUTES.activate,
+		response: void 0
+	},
+	agentState: {
+		method: "GET",
+		path: COMPUTER_USE_ROUTES.agentState,
+		response: void 0
+	},
+	/** Answers whatever the admitted Desktop provider returned, which is runtime-defined JSON. */
+	agentObserve: {
+		method: "POST",
+		path: COMPUTER_USE_ROUTES.agentObserve,
+		response: void 0
+	},
+	agentAction: {
+		method: "POST",
+		path: COMPUTER_USE_ROUTES.agentAction,
+		response: void 0
+	},
+	agentStop: {
+		method: "POST",
+		path: COMPUTER_USE_ROUTES.agentStop,
+		response: void 0
+	},
+	hubState: {
+		method: "GET",
+		path: COMPUTER_USE_ROUTES.hubState,
+		response: void 0
+	},
+	/** Null until a reader has confirmed one; reading it moves the session to `activating`. */
+	hubActivation: {
+		method: "GET",
+		path: COMPUTER_USE_ROUTES.hubActivation,
+		response: void 0
+	},
+	hubAuthorization: {
+		method: "GET",
+		path: COMPUTER_USE_ROUTES.hubAuthorization,
+		response: void 0
+	},
+	hubNext: {
+		method: "GET",
+		path: COMPUTER_USE_ROUTES.hubNext,
+		response: void 0
+	},
+	hubComplete: {
+		method: "POST",
+		path: COMPUTER_USE_ROUTES.hubComplete,
+		response: void 0
+	},
+	hubStop: {
+		method: "POST",
+		path: COMPUTER_USE_ROUTES.hubStop,
+		response: void 0
+	},
+	/** Desktop's macOS permission states, served by the hub's `desktop-permissions` mount. */
+	desktopPermissions: {
+		method: "GET",
+		path: "/",
+		response: void 0
+	},
+	/** Asks macOS for the body's permission on the Mac running Desktop; answers the states after. */
+	requestDesktopPermission: {
+		method: "POST",
+		path: "/",
+		response: void 0
+	}
+};
+const computerUse = createApiClient(routes, {
+	scopes: ["session"],
+	basePath: "computer-use",
+	transport: nativeApiTransport,
+	sessionAddress: sessionApiAddress
+});
+createApiClient(routes, {
+	scopes: [
+		"global",
+		"workspace",
+		"session"
+	],
+	basePath: "desktop-permissions",
+	transport: nativeApiTransport,
+	sessionAddress: sessionApiAddress
+});
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/fill/_components/ComputerUsePanel.native.tsx
+function ComputerUseView({ state, busy = false, error, submitting = false, onActivate, onCancel, onStop }) {
+	const pending = state.phase === "awaiting_confirmation" || state.phase === "activating";
+	const active = state.phase === "active" || state.phase === "stopping";
+	const failure = error ?? state.failure?.message;
+	return /* @__PURE__ */ jsxs(View, {
+		style: styles.panel,
+		children: [
+			/* @__PURE__ */ jsx(Text, {
+				style: styles.detail,
+				accessibilityLiveRegion: "polite",
+				children: state.phase.replaceAll("_", " ")
+			}),
+			busy ? /* @__PURE__ */ jsx(Text, {
+				style: styles.detail,
+				children: "Computer use is busy in another session."
+			}) : null,
+			failure ? /* @__PURE__ */ jsx(Text, {
+				style: styles.error,
+				accessibilityRole: "alert",
+				children: failure
+			}) : null,
+			pending ? /* @__PURE__ */ jsxs(Fragment, { children: [
+				/* @__PURE__ */ jsx(Text, {
+					style: styles.text,
+					children: "Desktop activation is pending."
+				}),
+				/* @__PURE__ */ jsx(Text, {
+					style: styles.detail,
+					children: "Choose and confirm an application window on your Mac."
+				}),
+				/* @__PURE__ */ jsx(Button, {
+					variant: "outline",
+					disabled: submitting,
+					onPress: onCancel,
+					children: "Cancel activation"
+				})
+			] }) : active ? /* @__PURE__ */ jsxs(Fragment, { children: [state.target ? /* @__PURE__ */ jsx(Text, {
+				style: styles.text,
+				children: `${typeof state.target.applicationName === "string" ? state.target.applicationName : "Application"}: ${typeof state.target.windowTitle === "string" ? state.target.windowTitle : "Window"}`
+			}) : null, /* @__PURE__ */ jsx(Button, {
+				variant: "outline",
+				disabled: submitting || state.phase === "stopping",
+				onPress: onStop,
+				children: "Stop computer use"
+			})] }) : /* @__PURE__ */ jsxs(Fragment, { children: [/* @__PURE__ */ jsx(Text, {
+				style: styles.detail,
+				children: "Request 5 minutes of control. Your Mac asks you to choose and confirm a window."
+			}), /* @__PURE__ */ jsx(Button, {
+				variant: "primary",
+				disabled: busy || submitting,
+				onPress: onActivate,
+				children: "Choose window on Mac"
+			})] })
+		]
+	});
+}
+function SessionPanel({ sessionId, sendSessionFrame }) {
+	const subscribe = useCallback((listener) => {
+		const subscription = computerUse$1.store.subscribe(listener);
+		return () => subscription.unsubscribe();
+	}, []);
+	const session = useSyncExternalStore(subscribe, () => computerUse$1.select(computerUse$1.store.state, sessionId));
+	const [error, setError] = useState();
+	const [submitting, setSubmitting] = useState(false);
+	const requests = useRef(null);
+	const update = (state) => computerUse$1.update(sessionId, (current) => state.revision >= current.state.revision ? {
+		...current,
+		state
+	} : current);
+	useEffect(() => {
+		const controller = new AbortController();
+		requests.current = controller;
+		let timer;
+		sendSessionFrame(sessionId, {
+			type: computerUseChannelType,
+			payload: { action: "status" }
+		});
+		const poll = async () => {
+			try {
+				const result = await computerUse.session(sessionId).activationState({ signal: controller.signal });
+				if (result.ok && !controller.signal.aborted) computerUse$1.update(sessionId, (current) => result.data.revision >= current.state.revision ? {
+					...current,
+					state: result.data
+				} : current);
+			} catch {
+				if (!controller.signal.aborted) setError("The session is unreachable.");
+			}
+			if (!controller.signal.aborted) timer = setTimeout(() => void poll(), 2e3);
+		};
+		poll();
+		return () => {
+			controller.abort();
+			clearTimeout(timer);
+		};
+	}, [sessionId, sendSessionFrame]);
+	const submit = async (action) => {
+		const signal = requests.current?.signal;
+		if (!signal || signal.aborted || submitting) return;
+		setError(void 0);
+		setSubmitting(true);
+		try {
+			const client = computerUse.session(sessionId);
+			const result = action === "activate" ? await client.activate({
+				body: { durationMs: COMPUTER_USE_DEFAULT_DURATION_MS },
+				signal
+			}) : await client.cancelActivation({ signal });
+			if (signal.aborted) return;
+			if (result.ok) update(result.data);
+			else setError(result.status === 0 ? "The session is unreachable." : result.error || "The activation request failed.");
+		} catch {
+			if (!signal.aborted) setError("The activation request is unavailable.");
+		} finally {
+			if (!signal.aborted) setSubmitting(false);
+		}
+	};
+	return /* @__PURE__ */ jsx(ComputerUseView, {
+		state: session.state,
+		busy: session.busy,
+		error,
+		submitting,
+		onActivate: () => void submit("activate"),
+		onCancel: () => void submit("cancel"),
+		onStop: () => {
+			setError(void 0);
+			try {
+				sendSessionFrame(sessionId, {
+					type: computerUseChannelType,
+					payload: { action: "stop" }
+				});
+			} catch {
+				setError("The stop request is unavailable.");
+			}
+		}
+	});
+}
+function ComputerUsePanel(props) {
+	return props.sessionId === null ? /* @__PURE__ */ jsx(Text, {
+		style: styles.detail,
+		children: "Select a session."
+	}) : /* @__PURE__ */ jsx(SessionPanel, {
+		...props,
+		sessionId: props.sessionId
+	}, props.sessionId);
+}
+const styles = StyleSheet.create((theme) => ({
+	panel: {
+		gap: theme.spacing(3),
+		uni__dependencies: [0]
+	},
+	text: {
+		fontFamily: fontOf(theme.fontFamily.sans),
+		fontSize: theme.fontSize.base,
+		lineHeight: theme.lineHeightRelaxed.base,
+		color: theme.colors.text,
+		uni__dependencies: [0]
+	},
+	detail: {
+		fontFamily: fontOf(theme.fontFamily.sans),
+		fontSize: theme.fontSize.sm,
+		lineHeight: theme.lineHeightRelaxed.sm,
+		color: theme.colors.dim,
+		uni__dependencies: [0]
+	},
+	error: {
+		fontFamily: fontOf(theme.fontFamily.sans),
+		fontSize: theme.fontSize.base,
+		lineHeight: theme.lineHeightRelaxed.base,
+		color: theme.colors.red,
+		uni__dependencies: [0]
+	}
+}));
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/fill/ComputerUse.activity.computer-use.native.tsx
+var ComputerUse_activity_computer_use_native_default = defineFill({
+	id: "computer-use",
+	slot: "activity.computer-use",
+	component: ComputerUsePanel
+});
+//#endregion
 //#region generated/native.ts
 const via = (identity, value) => value === void 0 ? void 0 : {
 	...identity,
@@ -51,6 +382,12 @@ const nativePlugin = defineNativePlugin({
 		},
 		get channels() {
 			return [via({ channel: "computer_use" }, computer_use_native_default)];
+		},
+		get fills() {
+			return [via({
+				slot: "activity.computer-use",
+				id: "computer-use"
+			}, ComputerUse_activity_computer_use_native_default)];
 		}
 	}
 });