@ai-agent-forge/plugin-desktop-macos-input 0.0.0-stage → 0.88.4

package/dist/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../src/shared.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,SAAS,WAAW,CAAC,KAAc,EAAE,MAAe,EAA2B;IAC9E,MAAM,KAAK,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACpD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,KAAgC,CAAC;AAAA,CACxC;AAED,MAAM,UAAU,cAAc,CAC7B,KAAc,EACd,MAAe,EAC6D;IAC5E,OAAO;QACN,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC;QACjC,WAAW,EAAE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,2BAA2B;KACnG,CAAC;AAAA,CACF;AAED,MAAM,UAAU,UAAU,CAAC,KAAc,EAA2B;IACnE,OAAO,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CACxD;AAED,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,KAAa,EAAU;IACrE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IAC7G,OAAO,KAAK,CAAC;AAAA,CACb","sourcesContent":["/**\n * Inlined from agent-forge `src/profile/runtime-capabilities-shared.ts`\n * (D-075 S3 extraction), mirrored from the Windows desktop plugin packages,\n * so this package keeps its dependency closure limited to the plugin SDK and\n * typebox. Semantics are unchanged; the artifact-ref schema helpers stay\n * host-side because desktop tools do not use them. Deliberate copy shared\n * with `plugins/desktop-macos-input/src/shared.ts`; keep both copies in sync.\n */\n\nfunction objectInput(first: unknown, second: unknown): Record<string, unknown> {\n\tconst value = second === undefined ? first : second;\n\tif (value === null || typeof value !== \"object\" || Array.isArray(value)) {\n\t\tthrow new Error(\"Plugin tool input must be an object\");\n\t}\n\treturn value as Record<string, unknown>;\n}\n\nexport function toolInvocation(\n\tfirst: unknown,\n\tsecond: unknown,\n): { readonly input: Record<string, unknown>; readonly operationId: string } {\n\treturn {\n\t\tinput: objectInput(first, second),\n\t\toperationId: typeof first === \"string\" && first.trim() !== \"\" ? first : \"profile-runtime-tool-call\",\n\t};\n}\n\nexport function signalFrom(value: unknown): AbortSignal | undefined {\n\treturn value instanceof AbortSignal ? value : undefined;\n}\n\nexport function nonEmptyString(value: unknown, label: string): string {\n\tif (typeof value !== \"string\" || value.trim() === \"\") throw new Error(`${label} must be a non-empty string`);\n\treturn value;\n}\n"]}

package/dist/types.d.ts

@@ -0,0 +1,223 @@
+import type { PluginResultStatusV1 } from "@agent-forge/plugin-sdk";
+/**
+ * macOS counterpart of the desktop plugin family contract, derived from the
+ * Windows package copies (`plugins/desktop-windows-observe/src/types.ts`,
+ * itself inlined from agent-forge `src/plugins/desktop/types.ts`, D-075 S3)
+ * so this package keeps its dependency closure limited to the plugin SDK and
+ * typebox. This file is a deliberate copy shared (not imported) with
+ * `plugins/desktop-macos-input/src/types.ts`; keep both copies in sync.
+ * Differences from the Windows copies:
+ * - The observation `source` union carries `"macos-ax"` instead of
+ *   `"windows-uia"`; `"mock"` stays the test-fixture source.
+ * - Probe/driver types are `DesktopMacosProbeV1` / `DesktopMacosDriverV1`
+ *   with `driver: "macos-ax"`, plus a read-only driver subset
+ *   (`DesktopMacosReadonlyDriverV1`) so the observe package never carries an
+ *   execute surface.
+ * - `DesktopTargetRefV1` gains the `coordinates` variant used by the input
+ *   package's coordinate click (x/y integer non-negative screen coordinates,
+ *   click-only by ruling); the observe package never consumes it.
+ * - Replay request/result types stay because the capability factory keeps the
+ *   Windows factory contract (optional replay registration when the runtime
+ *   exposes a replay method); the shipped macOS facades expose no replay.
+ */
+/** Stable capability ids owned by the desktop-control plugin family. */
+export type DesktopCapabilityIdV1 = "desktop-session" | "desktop-uia" | "desktop-input" | "desktop-vision" | "desktop-replay";
+export type DesktopSessionIsolationV1 = "mock" | "foreground" | "vm";
+export type DesktopSessionStatusV1 = "ready" | "unavailable" | "stopped";
+export interface DesktopSessionRequestV1 {
+    readonly version: 1;
+    readonly isolation: DesktopSessionIsolationV1;
+    readonly applicationId?: string;
+}
+export interface DesktopSessionV1 {
+    readonly version: 1;
+    readonly sessionId: string;
+    readonly isolation: DesktopSessionIsolationV1;
+    readonly status: DesktopSessionStatusV1;
+    readonly applicationId?: string;
+}
+export interface DesktopErrorV1 {
+    readonly version: 1;
+    readonly code: string;
+    readonly message: string;
+    readonly causeCode?: string;
+}
+export interface DesktopSessionResultV1 {
+    readonly status: Extract<PluginResultStatusV1, "succeeded" | "unsupported" | "failed">;
+    readonly session?: DesktopSessionV1;
+    readonly error?: DesktopErrorV1;
+}
+export interface DesktopWindowIdentityV1 {
+    readonly version: 1;
+    readonly windowId: string;
+    readonly appId: string;
+    readonly title: string;
+    readonly bounds: DesktopBoundsV1;
+}
+export interface DesktopControlIdentityV1 {
+    readonly version: 1;
+    readonly controlId: string;
+    readonly windowId: string;
+    readonly role: string;
+    readonly name: string;
+    readonly bounds: DesktopBoundsV1;
+    readonly enabled: boolean;
+    readonly value?: string;
+}
+export interface DesktopBoundsV1 {
+    readonly x: number;
+    readonly y: number;
+    readonly width: number;
+    readonly height: number;
+}
+export interface DesktopObservationV1 {
+    readonly version: 1;
+    readonly sessionId: string;
+    readonly observationId: string;
+    readonly source: "mock" | "macos-ax";
+    readonly windows: readonly DesktopWindowIdentityV1[];
+    readonly controls: readonly DesktopControlIdentityV1[];
+    readonly focusedControlId?: string;
+}
+export type DesktopTargetRefV1 = {
+    readonly kind: "window";
+    readonly windowId: string;
+} | {
+    readonly kind: "control";
+    readonly controlId: string;
+    readonly windowId?: string;
+}
+/** Screen-coordinate target; input-side click only (x/y integer, non-negative). */
+ | {
+    readonly kind: "coordinates";
+    readonly x: number;
+    readonly y: number;
+};
+export type DesktopActionKindV1 = "focus" | "click" | "type" | "key" | "scroll" | "submit" | "uac" | "password" | "admin" | "payment" | "external-submit";
+/**
+ * Actions that must pause at the host/user boundary before any input is sent.
+ * This policy belongs to the desktop plugin, not Agent Core.
+ */
+export declare const DESKTOP_USER_CONFIRMATION_ACTIONS: readonly ["uac", "password", "admin", "payment", "external-submit"];
+export declare const requiresDesktopUserConfirmation: (kind: DesktopActionKindV1) => boolean;
+export interface DesktopActionV1 {
+    readonly version: 1;
+    readonly kind: DesktopActionKindV1;
+    readonly target?: DesktopTargetRefV1;
+    readonly text?: string;
+    readonly key?: string;
+}
+export type DesktopPostconditionV1 = {
+    readonly kind: "window-exists";
+    readonly windowId: string;
+} | {
+    readonly kind: "control-exists";
+    readonly controlId: string;
+} | {
+    readonly kind: "focused";
+    readonly controlId: string;
+} | {
+    readonly kind: "property-equals";
+    readonly target: DesktopTargetRefV1;
+    readonly property: "enabled" | "value" | "name";
+    readonly expected: boolean | string;
+};
+export interface DesktopOperationRequestV1 {
+    readonly version: 1;
+    readonly operationId: string;
+    readonly sessionId: string;
+    readonly action: DesktopActionV1;
+    readonly postconditions?: readonly DesktopPostconditionV1[];
+    readonly reobserveAfterAction?: boolean;
+}
+export interface DesktopVerificationV1 {
+    readonly status: "passed" | "failed" | "unknown";
+    readonly checks: readonly string[];
+}
+export interface DesktopOperationResultV1 {
+    readonly version: 1;
+    readonly operationId: string;
+    readonly status: PluginResultStatusV1;
+    readonly summary: string;
+    readonly observation?: DesktopObservationV1;
+    readonly verification?: DesktopVerificationV1;
+    readonly error?: DesktopErrorV1;
+}
+export interface DesktopReplayRequestV1 {
+    readonly version: 1;
+    readonly sessionId: string;
+    readonly operations: readonly DesktopOperationRequestV1[];
+    readonly stopOnFailure: boolean;
+}
+/** Returns the first operation id that would cross the replay session boundary. */
+export declare const findDesktopReplaySessionMismatch: (request: DesktopReplayRequestV1) => string | undefined;
+export interface DesktopReplayResultV1 {
+    readonly version: 1;
+    readonly status: Extract<PluginResultStatusV1, "succeeded" | "failed" | "cancelled" | "needs_user">;
+    readonly results: readonly DesktopOperationResultV1[];
+}
+export interface DesktopAdapterV1 {
+    readonly adapterId: string;
+    readonly adapterVersion: string;
+    readonly capabilities: readonly DesktopCapabilityIdV1[];
+    openSession(request: DesktopSessionRequestV1): DesktopSessionResultV1;
+    observe(sessionId: string): DesktopObservationV1 | DesktopOperationResultV1;
+    reobserve(sessionId: string): DesktopObservationV1 | DesktopOperationResultV1;
+    execute(request: DesktopOperationRequestV1): DesktopOperationResultV1;
+    stop(sessionId: string): DesktopSessionV1 | DesktopOperationResultV1;
+    replay(request: DesktopReplayRequestV1): DesktopReplayResultV1;
+}
+/** Result returned by the macOS Accessibility capability probe. */
+export interface DesktopMacosProbeV1 {
+    readonly available: boolean;
+    readonly platform: string;
+    readonly driver: "macos-ax";
+    /** Capabilities that the host can expose without relying on a higher-risk facade. */
+    readonly capabilities?: readonly DesktopCapabilityIdV1[];
+    readonly reason?: string;
+}
+/**
+ * Read-only macOS host boundary used by the observe package's driver.
+ * Implementations may use the Accessibility tree through System Events, an OS
+ * broker, or a test driver. The adapter never invents observations when this
+ * boundary reports unavailable.
+ */
+export interface DesktopMacosReadonlyDriverV1 {
+    readonly driverId: string;
+    readonly driverVersion: string;
+    probe(): DesktopMacosProbeV1;
+    openSession(request: DesktopSessionRequestV1): DesktopSessionResultV1;
+    observe(sessionId: string): DesktopObservationV1 | DesktopOperationResultV1;
+    stop(sessionId: string): DesktopSessionV1 | DesktopOperationResultV1;
+}
+/** Full macOS host boundary used by the input package's driver. */
+export interface DesktopMacosDriverV1 extends DesktopMacosReadonlyDriverV1 {
+    execute(request: DesktopOperationRequestV1): DesktopOperationResultV1;
+}
+/**
+ * Production-safe, read-only desktop boundary. It deliberately omits
+ * execute/replay so a host cannot accidentally expose input through the
+ * observe plugin. The full DesktopAdapter remains a separate test/high-risk
+ * contract.
+ */
+export interface DesktopReadonlyAdapterV1 {
+    readonly adapterId: string;
+    readonly adapterVersion: string;
+    probe(): DesktopMacosProbeV1;
+    openSession(request: DesktopSessionRequestV1): DesktopSessionResultV1;
+    observe(sessionId: string): DesktopObservationV1 | DesktopOperationResultV1;
+    reobserve(sessionId: string): DesktopObservationV1 | DesktopOperationResultV1;
+    stop(sessionId: string): DesktopSessionV1 | DesktopOperationResultV1;
+}
+/**
+ * Production host boundary for intentionally bounded desktop input. This is
+ * separate from DesktopReadonlyAdapterV1 so observing a desktop never
+ * accidentally grants input, and replay is optional: adapters that expose it
+ * keep the session-mismatch gate and the needs-user confirmation per action.
+ * The shipped macOS input facade deliberately exposes no replay method.
+ */
+export interface DesktopFullControlAdapterV1 extends DesktopReadonlyAdapterV1 {
+    execute(request: DesktopOperationRequestV1): DesktopOperationResultV1;
+    replay?(request: DesktopReplayRequestV1): DesktopReplayResultV1;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,wEAAwE;AACxE,MAAM,MAAM,qBAAqB,GAC9B,iBAAiB,GACjB,aAAa,GACb,eAAe,GACf,gBAAgB,GAChB,gBAAgB,CAAC;AAEpB,MAAM,MAAM,yBAAyB,GAAG,MAAM,GAAG,YAAY,GAAG,IAAI,CAAC;AACrE,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,CAAC;AAEzE,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,yBAAyB,CAAC;IAC9C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,yBAAyB,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,oBAAoB,EAAE,WAAW,GAAG,aAAa,GAAG,QAAQ,CAAC,CAAC;IACvF,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;CAChC;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;CACjC;AAED,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACrD,QAAQ,CAAC,QAAQ,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACvD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,MAAM,kBAAkB,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE;AACtF,mFAAmF;GACjF;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5E,MAAM,MAAM,mBAAmB,GAC5B,OAAO,GACP,OAAO,GACP,MAAM,GACN,KAAK,GACL,QAAQ,GACR,QAAQ,GACR,KAAK,GACL,UAAU,GACV,OAAO,GACP,SAAS,GACT,iBAAiB,CAAC;AAErB;;;GAGG;AACH,eAAO,MAAM,iCAAiC,qEAMM,CAAC;AAErD,eAAO,MAAM,+BAA+B,wCACyC,CAAC;AAEtF,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,sBAAsB,GAC/B;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACxD;IACA,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;CACnC,CAAC;AAEL,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC5D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;CACxC;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,YAAY,CAAC,EAAE,qBAAqB,CAAC;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;CAChC;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC1D,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;CAChC;AAED,mFAAmF;AACnF,eAAO,MAAM,gCAAgC,yDAK5C,CAAC;AAEF,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,oBAAoB,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,YAAY,CAAC,CAAC;IACpG,QAAQ,CAAC,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAC;CACtD;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACxD,WAAW,CAAC,OAAO,EAAE,uBAAuB,GAAG,sBAAsB,CAAC;IACtE,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,oBAAoB,GAAG,wBAAwB,CAAC;IAC5E,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,oBAAoB,GAAG,wBAAwB,CAAC;IAC9E,OAAO,CAAC,OAAO,EAAE,yBAAyB,GAAG,wBAAwB,CAAC;IACtE,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,GAAG,wBAAwB,CAAC;IACrE,MAAM,CAAC,OAAO,EAAE,sBAAsB,GAAG,qBAAqB,CAAC;CAC/D;AAED,mEAAmE;AACnE,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,qFAAqF;IACrF,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,KAAK,IAAI,mBAAmB,CAAC;IAC7B,WAAW,CAAC,OAAO,EAAE,uBAAuB,GAAG,sBAAsB,CAAC;IACtE,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,oBAAoB,GAAG,wBAAwB,CAAC;IAC5E,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,GAAG,wBAAwB,CAAC;CACrE;AAED,mEAAmE;AACnE,MAAM,WAAW,oBAAqB,SAAQ,4BAA4B;IACzE,OAAO,CAAC,OAAO,EAAE,yBAAyB,GAAG,wBAAwB,CAAC;CACtE;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,KAAK,IAAI,mBAAmB,CAAC;IAC7B,WAAW,CAAC,OAAO,EAAE,uBAAuB,GAAG,sBAAsB,CAAC;IACtE,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,oBAAoB,GAAG,wBAAwB,CAAC;IAC5E,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,oBAAoB,GAAG,wBAAwB,CAAC;IAC9E,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,GAAG,wBAAwB,CAAC;CACrE;AAED;;;;;;GAMG;AACH,MAAM,WAAW,2BAA4B,SAAQ,wBAAwB;IAC5E,OAAO,CAAC,OAAO,EAAE,yBAAyB,GAAG,wBAAwB,CAAC;IACtE,MAAM,CAAC,CAAC,OAAO,EAAE,sBAAsB,GAAG,qBAAqB,CAAC;CAChE","sourcesContent":["import type { PluginResultStatusV1 } from \"@agent-forge/plugin-sdk\";\n\n/**\n * macOS counterpart of the desktop plugin family contract, derived from the\n * Windows package copies (`plugins/desktop-windows-observe/src/types.ts`,\n * itself inlined from agent-forge `src/plugins/desktop/types.ts`, D-075 S3)\n * so this package keeps its dependency closure limited to the plugin SDK and\n * typebox. This file is a deliberate copy shared (not imported) with\n * `plugins/desktop-macos-input/src/types.ts`; keep both copies in sync.\n * Differences from the Windows copies:\n * - The observation `source` union carries `\"macos-ax\"` instead of\n *   `\"windows-uia\"`; `\"mock\"` stays the test-fixture source.\n * - Probe/driver types are `DesktopMacosProbeV1` / `DesktopMacosDriverV1`\n *   with `driver: \"macos-ax\"`, plus a read-only driver subset\n *   (`DesktopMacosReadonlyDriverV1`) so the observe package never carries an\n *   execute surface.\n * - `DesktopTargetRefV1` gains the `coordinates` variant used by the input\n *   package's coordinate click (x/y integer non-negative screen coordinates,\n *   click-only by ruling); the observe package never consumes it.\n * - Replay request/result types stay because the capability factory keeps the\n *   Windows factory contract (optional replay registration when the runtime\n *   exposes a replay method); the shipped macOS facades expose no replay.\n */\n\n/** Stable capability ids owned by the desktop-control plugin family. */\nexport type DesktopCapabilityIdV1 =\n\t| \"desktop-session\"\n\t| \"desktop-uia\"\n\t| \"desktop-input\"\n\t| \"desktop-vision\"\n\t| \"desktop-replay\";\n\nexport type DesktopSessionIsolationV1 = \"mock\" | \"foreground\" | \"vm\";\nexport type DesktopSessionStatusV1 = \"ready\" | \"unavailable\" | \"stopped\";\n\nexport interface DesktopSessionRequestV1 {\n\treadonly version: 1;\n\treadonly isolation: DesktopSessionIsolationV1;\n\treadonly applicationId?: string;\n}\n\nexport interface DesktopSessionV1 {\n\treadonly version: 1;\n\treadonly sessionId: string;\n\treadonly isolation: DesktopSessionIsolationV1;\n\treadonly status: DesktopSessionStatusV1;\n\treadonly applicationId?: string;\n}\n\nexport interface DesktopErrorV1 {\n\treadonly version: 1;\n\treadonly code: string;\n\treadonly message: string;\n\treadonly causeCode?: string;\n}\n\nexport interface DesktopSessionResultV1 {\n\treadonly status: Extract<PluginResultStatusV1, \"succeeded\" | \"unsupported\" | \"failed\">;\n\treadonly session?: DesktopSessionV1;\n\treadonly error?: DesktopErrorV1;\n}\n\nexport interface DesktopWindowIdentityV1 {\n\treadonly version: 1;\n\treadonly windowId: string;\n\treadonly appId: string;\n\treadonly title: string;\n\treadonly bounds: DesktopBoundsV1;\n}\n\nexport interface DesktopControlIdentityV1 {\n\treadonly version: 1;\n\treadonly controlId: string;\n\treadonly windowId: string;\n\treadonly role: string;\n\treadonly name: string;\n\treadonly bounds: DesktopBoundsV1;\n\treadonly enabled: boolean;\n\treadonly value?: string;\n}\n\nexport interface DesktopBoundsV1 {\n\treadonly x: number;\n\treadonly y: number;\n\treadonly width: number;\n\treadonly height: number;\n}\n\nexport interface DesktopObservationV1 {\n\treadonly version: 1;\n\treadonly sessionId: string;\n\treadonly observationId: string;\n\treadonly source: \"mock\" | \"macos-ax\";\n\treadonly windows: readonly DesktopWindowIdentityV1[];\n\treadonly controls: readonly DesktopControlIdentityV1[];\n\treadonly focusedControlId?: string;\n}\n\nexport type DesktopTargetRefV1 =\n\t| { readonly kind: \"window\"; readonly windowId: string }\n\t| { readonly kind: \"control\"; readonly controlId: string; readonly windowId?: string }\n\t/** Screen-coordinate target; input-side click only (x/y integer, non-negative). */\n\t| { readonly kind: \"coordinates\"; readonly x: number; readonly y: number };\n\nexport type DesktopActionKindV1 =\n\t| \"focus\"\n\t| \"click\"\n\t| \"type\"\n\t| \"key\"\n\t| \"scroll\"\n\t| \"submit\"\n\t| \"uac\"\n\t| \"password\"\n\t| \"admin\"\n\t| \"payment\"\n\t| \"external-submit\";\n\n/**\n * Actions that must pause at the host/user boundary before any input is sent.\n * This policy belongs to the desktop plugin, not Agent Core.\n */\nexport const DESKTOP_USER_CONFIRMATION_ACTIONS = Object.freeze([\n\t\"uac\",\n\t\"password\",\n\t\"admin\",\n\t\"payment\",\n\t\"external-submit\",\n] as const satisfies readonly DesktopActionKindV1[]);\n\nexport const requiresDesktopUserConfirmation = (kind: DesktopActionKindV1): boolean =>\n\t(DESKTOP_USER_CONFIRMATION_ACTIONS as readonly DesktopActionKindV1[]).includes(kind);\n\nexport interface DesktopActionV1 {\n\treadonly version: 1;\n\treadonly kind: DesktopActionKindV1;\n\treadonly target?: DesktopTargetRefV1;\n\treadonly text?: string;\n\treadonly key?: string;\n}\n\nexport type DesktopPostconditionV1 =\n\t| { readonly kind: \"window-exists\"; readonly windowId: string }\n\t| { readonly kind: \"control-exists\"; readonly controlId: string }\n\t| { readonly kind: \"focused\"; readonly controlId: string }\n\t| {\n\t\t\treadonly kind: \"property-equals\";\n\t\t\treadonly target: DesktopTargetRefV1;\n\t\t\treadonly property: \"enabled\" | \"value\" | \"name\";\n\t\t\treadonly expected: boolean | string;\n\t  };\n\nexport interface DesktopOperationRequestV1 {\n\treadonly version: 1;\n\treadonly operationId: string;\n\treadonly sessionId: string;\n\treadonly action: DesktopActionV1;\n\treadonly postconditions?: readonly DesktopPostconditionV1[];\n\treadonly reobserveAfterAction?: boolean;\n}\n\nexport interface DesktopVerificationV1 {\n\treadonly status: \"passed\" | \"failed\" | \"unknown\";\n\treadonly checks: readonly string[];\n}\n\nexport interface DesktopOperationResultV1 {\n\treadonly version: 1;\n\treadonly operationId: string;\n\treadonly status: PluginResultStatusV1;\n\treadonly summary: string;\n\treadonly observation?: DesktopObservationV1;\n\treadonly verification?: DesktopVerificationV1;\n\treadonly error?: DesktopErrorV1;\n}\n\nexport interface DesktopReplayRequestV1 {\n\treadonly version: 1;\n\treadonly sessionId: string;\n\treadonly operations: readonly DesktopOperationRequestV1[];\n\treadonly stopOnFailure: boolean;\n}\n\n/** Returns the first operation id that would cross the replay session boundary. */\nexport const findDesktopReplaySessionMismatch = (request: DesktopReplayRequestV1): string | undefined => {\n\tfor (const operation of request.operations) {\n\t\tif (operation.sessionId !== request.sessionId) return operation.operationId;\n\t}\n\treturn undefined;\n};\n\nexport interface DesktopReplayResultV1 {\n\treadonly version: 1;\n\treadonly status: Extract<PluginResultStatusV1, \"succeeded\" | \"failed\" | \"cancelled\" | \"needs_user\">;\n\treadonly results: readonly DesktopOperationResultV1[];\n}\n\nexport interface DesktopAdapterV1 {\n\treadonly adapterId: string;\n\treadonly adapterVersion: string;\n\treadonly capabilities: readonly DesktopCapabilityIdV1[];\n\topenSession(request: DesktopSessionRequestV1): DesktopSessionResultV1;\n\tobserve(sessionId: string): DesktopObservationV1 | DesktopOperationResultV1;\n\treobserve(sessionId: string): DesktopObservationV1 | DesktopOperationResultV1;\n\texecute(request: DesktopOperationRequestV1): DesktopOperationResultV1;\n\tstop(sessionId: string): DesktopSessionV1 | DesktopOperationResultV1;\n\treplay(request: DesktopReplayRequestV1): DesktopReplayResultV1;\n}\n\n/** Result returned by the macOS Accessibility capability probe. */\nexport interface DesktopMacosProbeV1 {\n\treadonly available: boolean;\n\treadonly platform: string;\n\treadonly driver: \"macos-ax\";\n\t/** Capabilities that the host can expose without relying on a higher-risk facade. */\n\treadonly capabilities?: readonly DesktopCapabilityIdV1[];\n\treadonly reason?: string;\n}\n\n/**\n * Read-only macOS host boundary used by the observe package's driver.\n * Implementations may use the Accessibility tree through System Events, an OS\n * broker, or a test driver. The adapter never invents observations when this\n * boundary reports unavailable.\n */\nexport interface DesktopMacosReadonlyDriverV1 {\n\treadonly driverId: string;\n\treadonly driverVersion: string;\n\tprobe(): DesktopMacosProbeV1;\n\topenSession(request: DesktopSessionRequestV1): DesktopSessionResultV1;\n\tobserve(sessionId: string): DesktopObservationV1 | DesktopOperationResultV1;\n\tstop(sessionId: string): DesktopSessionV1 | DesktopOperationResultV1;\n}\n\n/** Full macOS host boundary used by the input package's driver. */\nexport interface DesktopMacosDriverV1 extends DesktopMacosReadonlyDriverV1 {\n\texecute(request: DesktopOperationRequestV1): DesktopOperationResultV1;\n}\n\n/**\n * Production-safe, read-only desktop boundary. It deliberately omits\n * execute/replay so a host cannot accidentally expose input through the\n * observe plugin. The full DesktopAdapter remains a separate test/high-risk\n * contract.\n */\nexport interface DesktopReadonlyAdapterV1 {\n\treadonly adapterId: string;\n\treadonly adapterVersion: string;\n\tprobe(): DesktopMacosProbeV1;\n\topenSession(request: DesktopSessionRequestV1): DesktopSessionResultV1;\n\tobserve(sessionId: string): DesktopObservationV1 | DesktopOperationResultV1;\n\treobserve(sessionId: string): DesktopObservationV1 | DesktopOperationResultV1;\n\tstop(sessionId: string): DesktopSessionV1 | DesktopOperationResultV1;\n}\n\n/**\n * Production host boundary for intentionally bounded desktop input. This is\n * separate from DesktopReadonlyAdapterV1 so observing a desktop never\n * accidentally grants input, and replay is optional: adapters that expose it\n * keep the session-mismatch gate and the needs-user confirmation per action.\n * The shipped macOS input facade deliberately exposes no replay method.\n */\nexport interface DesktopFullControlAdapterV1 extends DesktopReadonlyAdapterV1 {\n\texecute(request: DesktopOperationRequestV1): DesktopOperationResultV1;\n\treplay?(request: DesktopReplayRequestV1): DesktopReplayResultV1;\n}\n"]}

package/dist/types.js

@@ -0,0 +1,21 @@
+/**
+ * Actions that must pause at the host/user boundary before any input is sent.
+ * This policy belongs to the desktop plugin, not Agent Core.
+ */
+export const DESKTOP_USER_CONFIRMATION_ACTIONS = Object.freeze([
+    "uac",
+    "password",
+    "admin",
+    "payment",
+    "external-submit",
+]);
+export const requiresDesktopUserConfirmation = (kind) => DESKTOP_USER_CONFIRMATION_ACTIONS.includes(kind);
+/** Returns the first operation id that would cross the replay session boundary. */
+export const findDesktopReplaySessionMismatch = (request) => {
+    for (const operation of request.operations) {
+        if (operation.sessionId !== request.sessionId)
+            return operation.operationId;
+    }
+    return undefined;
+};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAqHA;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9D,KAAK;IACL,UAAU;IACV,OAAO;IACP,SAAS;IACT,iBAAiB;CACiC,CAAC,CAAC;AAErD,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,IAAyB,EAAW,EAAE,CACpF,iCAAoE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAoDtF,mFAAmF;AACnF,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,OAA+B,EAAsB,EAAE,CAAC;IACxG,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QAC5C,IAAI,SAAS,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC,WAAW,CAAC;IAC7E,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB,CAAC","sourcesContent":["import type { PluginResultStatusV1 } from \"@agent-forge/plugin-sdk\";\n\n/**\n * macOS counterpart of the desktop plugin family contract, derived from the\n * Windows package copies (`plugins/desktop-windows-observe/src/types.ts`,\n * itself inlined from agent-forge `src/plugins/desktop/types.ts`, D-075 S3)\n * so this package keeps its dependency closure limited to the plugin SDK and\n * typebox. This file is a deliberate copy shared (not imported) with\n * `plugins/desktop-macos-input/src/types.ts`; keep both copies in sync.\n * Differences from the Windows copies:\n * - The observation `source` union carries `\"macos-ax\"` instead of\n *   `\"windows-uia\"`; `\"mock\"` stays the test-fixture source.\n * - Probe/driver types are `DesktopMacosProbeV1` / `DesktopMacosDriverV1`\n *   with `driver: \"macos-ax\"`, plus a read-only driver subset\n *   (`DesktopMacosReadonlyDriverV1`) so the observe package never carries an\n *   execute surface.\n * - `DesktopTargetRefV1` gains the `coordinates` variant used by the input\n *   package's coordinate click (x/y integer non-negative screen coordinates,\n *   click-only by ruling); the observe package never consumes it.\n * - Replay request/result types stay because the capability factory keeps the\n *   Windows factory contract (optional replay registration when the runtime\n *   exposes a replay method); the shipped macOS facades expose no replay.\n */\n\n/** Stable capability ids owned by the desktop-control plugin family. */\nexport type DesktopCapabilityIdV1 =\n\t| \"desktop-session\"\n\t| \"desktop-uia\"\n\t| \"desktop-input\"\n\t| \"desktop-vision\"\n\t| \"desktop-replay\";\n\nexport type DesktopSessionIsolationV1 = \"mock\" | \"foreground\" | \"vm\";\nexport type DesktopSessionStatusV1 = \"ready\" | \"unavailable\" | \"stopped\";\n\nexport interface DesktopSessionRequestV1 {\n\treadonly version: 1;\n\treadonly isolation: DesktopSessionIsolationV1;\n\treadonly applicationId?: string;\n}\n\nexport interface DesktopSessionV1 {\n\treadonly version: 1;\n\treadonly sessionId: string;\n\treadonly isolation: DesktopSessionIsolationV1;\n\treadonly status: DesktopSessionStatusV1;\n\treadonly applicationId?: string;\n}\n\nexport interface DesktopErrorV1 {\n\treadonly version: 1;\n\treadonly code: string;\n\treadonly message: string;\n\treadonly causeCode?: string;\n}\n\nexport interface DesktopSessionResultV1 {\n\treadonly status: Extract<PluginResultStatusV1, \"succeeded\" | \"unsupported\" | \"failed\">;\n\treadonly session?: DesktopSessionV1;\n\treadonly error?: DesktopErrorV1;\n}\n\nexport interface DesktopWindowIdentityV1 {\n\treadonly version: 1;\n\treadonly windowId: string;\n\treadonly appId: string;\n\treadonly title: string;\n\treadonly bounds: DesktopBoundsV1;\n}\n\nexport interface DesktopControlIdentityV1 {\n\treadonly version: 1;\n\treadonly controlId: string;\n\treadonly windowId: string;\n\treadonly role: string;\n\treadonly name: string;\n\treadonly bounds: DesktopBoundsV1;\n\treadonly enabled: boolean;\n\treadonly value?: string;\n}\n\nexport interface DesktopBoundsV1 {\n\treadonly x: number;\n\treadonly y: number;\n\treadonly width: number;\n\treadonly height: number;\n}\n\nexport interface DesktopObservationV1 {\n\treadonly version: 1;\n\treadonly sessionId: string;\n\treadonly observationId: string;\n\treadonly source: \"mock\" | \"macos-ax\";\n\treadonly windows: readonly DesktopWindowIdentityV1[];\n\treadonly controls: readonly DesktopControlIdentityV1[];\n\treadonly focusedControlId?: string;\n}\n\nexport type DesktopTargetRefV1 =\n\t| { readonly kind: \"window\"; readonly windowId: string }\n\t| { readonly kind: \"control\"; readonly controlId: string; readonly windowId?: string }\n\t/** Screen-coordinate target; input-side click only (x/y integer, non-negative). */\n\t| { readonly kind: \"coordinates\"; readonly x: number; readonly y: number };\n\nexport type DesktopActionKindV1 =\n\t| \"focus\"\n\t| \"click\"\n\t| \"type\"\n\t| \"key\"\n\t| \"scroll\"\n\t| \"submit\"\n\t| \"uac\"\n\t| \"password\"\n\t| \"admin\"\n\t| \"payment\"\n\t| \"external-submit\";\n\n/**\n * Actions that must pause at the host/user boundary before any input is sent.\n * This policy belongs to the desktop plugin, not Agent Core.\n */\nexport const DESKTOP_USER_CONFIRMATION_ACTIONS = Object.freeze([\n\t\"uac\",\n\t\"password\",\n\t\"admin\",\n\t\"payment\",\n\t\"external-submit\",\n] as const satisfies readonly DesktopActionKindV1[]);\n\nexport const requiresDesktopUserConfirmation = (kind: DesktopActionKindV1): boolean =>\n\t(DESKTOP_USER_CONFIRMATION_ACTIONS as readonly DesktopActionKindV1[]).includes(kind);\n\nexport interface DesktopActionV1 {\n\treadonly version: 1;\n\treadonly kind: DesktopActionKindV1;\n\treadonly target?: DesktopTargetRefV1;\n\treadonly text?: string;\n\treadonly key?: string;\n}\n\nexport type DesktopPostconditionV1 =\n\t| { readonly kind: \"window-exists\"; readonly windowId: string }\n\t| { readonly kind: \"control-exists\"; readonly controlId: string }\n\t| { readonly kind: \"focused\"; readonly controlId: string }\n\t| {\n\t\t\treadonly kind: \"property-equals\";\n\t\t\treadonly target: DesktopTargetRefV1;\n\t\t\treadonly property: \"enabled\" | \"value\" | \"name\";\n\t\t\treadonly expected: boolean | string;\n\t  };\n\nexport interface DesktopOperationRequestV1 {\n\treadonly version: 1;\n\treadonly operationId: string;\n\treadonly sessionId: string;\n\treadonly action: DesktopActionV1;\n\treadonly postconditions?: readonly DesktopPostconditionV1[];\n\treadonly reobserveAfterAction?: boolean;\n}\n\nexport interface DesktopVerificationV1 {\n\treadonly status: \"passed\" | \"failed\" | \"unknown\";\n\treadonly checks: readonly string[];\n}\n\nexport interface DesktopOperationResultV1 {\n\treadonly version: 1;\n\treadonly operationId: string;\n\treadonly status: PluginResultStatusV1;\n\treadonly summary: string;\n\treadonly observation?: DesktopObservationV1;\n\treadonly verification?: DesktopVerificationV1;\n\treadonly error?: DesktopErrorV1;\n}\n\nexport interface DesktopReplayRequestV1 {\n\treadonly version: 1;\n\treadonly sessionId: string;\n\treadonly operations: readonly DesktopOperationRequestV1[];\n\treadonly stopOnFailure: boolean;\n}\n\n/** Returns the first operation id that would cross the replay session boundary. */\nexport const findDesktopReplaySessionMismatch = (request: DesktopReplayRequestV1): string | undefined => {\n\tfor (const operation of request.operations) {\n\t\tif (operation.sessionId !== request.sessionId) return operation.operationId;\n\t}\n\treturn undefined;\n};\n\nexport interface DesktopReplayResultV1 {\n\treadonly version: 1;\n\treadonly status: Extract<PluginResultStatusV1, \"succeeded\" | \"failed\" | \"cancelled\" | \"needs_user\">;\n\treadonly results: readonly DesktopOperationResultV1[];\n}\n\nexport interface DesktopAdapterV1 {\n\treadonly adapterId: string;\n\treadonly adapterVersion: string;\n\treadonly capabilities: readonly DesktopCapabilityIdV1[];\n\topenSession(request: DesktopSessionRequestV1): DesktopSessionResultV1;\n\tobserve(sessionId: string): DesktopObservationV1 | DesktopOperationResultV1;\n\treobserve(sessionId: string): DesktopObservationV1 | DesktopOperationResultV1;\n\texecute(request: DesktopOperationRequestV1): DesktopOperationResultV1;\n\tstop(sessionId: string): DesktopSessionV1 | DesktopOperationResultV1;\n\treplay(request: DesktopReplayRequestV1): DesktopReplayResultV1;\n}\n\n/** Result returned by the macOS Accessibility capability probe. */\nexport interface DesktopMacosProbeV1 {\n\treadonly available: boolean;\n\treadonly platform: string;\n\treadonly driver: \"macos-ax\";\n\t/** Capabilities that the host can expose without relying on a higher-risk facade. */\n\treadonly capabilities?: readonly DesktopCapabilityIdV1[];\n\treadonly reason?: string;\n}\n\n/**\n * Read-only macOS host boundary used by the observe package's driver.\n * Implementations may use the Accessibility tree through System Events, an OS\n * broker, or a test driver. The adapter never invents observations when this\n * boundary reports unavailable.\n */\nexport interface DesktopMacosReadonlyDriverV1 {\n\treadonly driverId: string;\n\treadonly driverVersion: string;\n\tprobe(): DesktopMacosProbeV1;\n\topenSession(request: DesktopSessionRequestV1): DesktopSessionResultV1;\n\tobserve(sessionId: string): DesktopObservationV1 | DesktopOperationResultV1;\n\tstop(sessionId: string): DesktopSessionV1 | DesktopOperationResultV1;\n}\n\n/** Full macOS host boundary used by the input package's driver. */\nexport interface DesktopMacosDriverV1 extends DesktopMacosReadonlyDriverV1 {\n\texecute(request: DesktopOperationRequestV1): DesktopOperationResultV1;\n}\n\n/**\n * Production-safe, read-only desktop boundary. It deliberately omits\n * execute/replay so a host cannot accidentally expose input through the\n * observe plugin. The full DesktopAdapter remains a separate test/high-risk\n * contract.\n */\nexport interface DesktopReadonlyAdapterV1 {\n\treadonly adapterId: string;\n\treadonly adapterVersion: string;\n\tprobe(): DesktopMacosProbeV1;\n\topenSession(request: DesktopSessionRequestV1): DesktopSessionResultV1;\n\tobserve(sessionId: string): DesktopObservationV1 | DesktopOperationResultV1;\n\treobserve(sessionId: string): DesktopObservationV1 | DesktopOperationResultV1;\n\tstop(sessionId: string): DesktopSessionV1 | DesktopOperationResultV1;\n}\n\n/**\n * Production host boundary for intentionally bounded desktop input. This is\n * separate from DesktopReadonlyAdapterV1 so observing a desktop never\n * accidentally grants input, and replay is optional: adapters that expose it\n * keep the session-mismatch gate and the needs-user confirmation per action.\n * The shipped macOS input facade deliberately exposes no replay method.\n */\nexport interface DesktopFullControlAdapterV1 extends DesktopReadonlyAdapterV1 {\n\texecute(request: DesktopOperationRequestV1): DesktopOperationResultV1;\n\treplay?(request: DesktopReplayRequestV1): DesktopReplayResultV1;\n}\n"]}

package/package.json

@@ -1,6 +1,57 @@
 {
-  "name": "@ai-agent-forge/plugin-desktop-macos-input",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+	"name": "@ai-agent-forge/plugin-desktop-macos-input",
+	"version": "0.88.4",
+	"description": "Bounded macOS desktop input capability plugin for Agent Forge (desktop_execute; no replay)",
+	"type": "module",
+	"main": "./dist/index.js",
+	"types": "./dist/index.d.ts",
+	"exports": {
+		".": {
+			"types": "./dist/index.d.ts",
+			"import": "./dist/index.js"
+		}
+	},
+	"files": [
+		"dist",
+		"MANUAL.md",
+		"agent-forge.json",
+		"plugin.json",
+		"README.md"
+	],
+	"scripts": {
+		"clean": "shx rm -rf dist",
+		"build": "tsgo -p tsconfig.build.json",
+		"test": "vitest --run",
+		"prepublishOnly": "npm run clean && npm run build"
+	},
+	"keywords": [
+		"agent-forge",
+		"plugin",
+		"desktop",
+		"macos",
+		"accessibility",
+		"input"
+	],
+	"author": "Agent Forge contributors",
+	"license": "MIT",
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/agent-forge/agent-forge.git",
+		"directory": "plugins/desktop-macos-input"
+	},
+	"bugs": {
+		"url": "https://github.com/agent-forge/agent-forge/issues"
+	},
+	"homepage": "https://github.com/agent-forge/agent-forge#readme",
+	"engines": {
+		"node": ">=22.19.0"
+	},
+	"dependencies": {
+		"typebox": "1.3.27",
+		"@ai-agent-forge/plugin-sdk": "^0.88.4"
+	},
+	"devDependencies": {
+		"shx": "0.4.0",
+		"vitest": "4.1.11"
+	}
+}

package/plugin.json

@@ -0,0 +1,20 @@
+{
+	"id": "agent-forge.plugin.desktop-macos-input",
+	"version": "0.88.4",
+	"apiVersion": "1-draft",
+	"entry": "./dist/entry.js",
+	"hostVersion": ">=0.84.4",
+	"description": "macOS 桌面真实输入:CGEvent HID 级鼠标点击/移动与键盘注入、AX 元素动作,observe→act→reobserve 闭环",
+	"activation": "on-demand",
+	"manual": "./MANUAL.md",
+	"requiredCapabilities": [
+		"tools"
+	],
+	"provides": [
+		{
+			"id": "desktop-input",
+			"version": 1,
+			"kind": "contribution"
+		}
+	]
+}