@anionex/dsh-computer-use 0.1.0

package/lib/leases.js

@@ -0,0 +1,259 @@
+/** Session-sidecar read leases, durable denials, and per-turn control leases. */
+import { z } from 'zod';
+import { defineDomain, domainTable } from '@deepseek-ai/dsh-storage-domain';
+import { approvalPolicy } from "./approval-policy.js";
+import { ComputerUseError } from "./errors.js";
+const nonNegativeSafeInteger = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
+const leaseScopeSchema = z.union([z.literal('read'), z.literal('control')]);
+const sessionIdentitySchema = z.object({
+    createdAt: nonNegativeSafeInteger,
+    cwd: z.string().optional(),
+});
+const deniedLeaseSchema = z.object({
+    bundleId: z.string().min(1),
+    scope: leaseScopeSchema,
+});
+/** Runtime validation for the whole-Session Computer Use sidecar row. */
+export const computerUseSessionStateSchema = z.object({
+    session: sessionIdentitySchema,
+    readGrants: z.array(z.string().min(1)),
+    denied: z.array(deniedLeaseSchema),
+}).superRefine((row, ctx) => {
+    const readGrants = new Set();
+    row.readGrants.forEach((bundleId, index) => {
+        if (readGrants.has(bundleId)) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['readGrants', index],
+                message: `duplicate Computer Use read grant '${bundleId}'`,
+            });
+        }
+        readGrants.add(bundleId);
+    });
+    const denials = new Set();
+    row.denied.forEach((denial, index) => {
+        const key = `${denial.scope}\0${denial.bundleId}`;
+        if (denials.has(key)) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['denied', index],
+                message: `duplicate Computer Use ${denial.scope} denial '${denial.bundleId}'`,
+            });
+        }
+        denials.add(key);
+    });
+});
+/** One lifecycle-bound Computer Use sidecar record per Session id. */
+export const computerUseStateDomainSpec = defineDomain({
+    name: 'computer_use_state',
+    version: 0,
+    tables: {
+        sessions: domainTable(computerUseSessionStateSchema),
+    },
+});
+function currentTurn(events) {
+    for (let index = events.length - 1; index >= 0; index -= 1) {
+        const event = events[index];
+        if (event?.type === 'turn/end')
+            return undefined;
+        if (event?.type === 'turn/start')
+            return event.data.turn;
+    }
+    return undefined;
+}
+function identityOf(header) {
+    return Object.freeze({
+        createdAt: header.createdAt,
+        ...(header.cwd === undefined ? {} : { cwd: header.cwd }),
+    });
+}
+function sameIdentity(row, header) {
+    return row.session.createdAt === header.createdAt && row.session.cwd === header.cwd;
+}
+function stateSnapshot(header, readGrants, denied) {
+    const readGrantSnapshot = Object.freeze([...readGrants]);
+    const deniedSnapshot = Object.freeze([...denied].map(item => Object.freeze({ ...item })));
+    return Object.freeze({
+        session: identityOf(header),
+        readGrants: readGrantSnapshot,
+        denied: deniedSnapshot,
+    });
+}
+function configuredAccess(config, bundleId, scope) {
+    if (config.allowAllApps)
+        return true;
+    return config.grants.find(grant => grant.bundleId === bundleId)?.[scope] === true;
+}
+function boundedFailure(error) {
+    return (error instanceof Error ? error.message : String(error)).slice(0, 500);
+}
+/** Applies configured app policy and routes missing leases through DSH approval. */
+export class ComputerLeaseManager {
+    ctx;
+    config;
+    storage;
+    storageFiber;
+    decisionTails = new Map();
+    mutationTails = new Map();
+    controlGrants = new WeakMap();
+    constructor(ctx, config) {
+        this.ctx = ctx;
+        this.config = config;
+        this.storageFiber = ctx.inject(['storageDomain'], async (storageCtx) => {
+            const domain = await storageCtx.storageDomain.open(computerUseStateDomainSpec);
+            const binding = { table: domain.table('sessions') };
+            this.storage = binding;
+            return async () => {
+                if (this.storage === binding)
+                    this.storage = undefined;
+                await Promise.all(this.mutationTails.values());
+                await domain.close();
+            };
+        });
+        ctx.effect(() => () => this.storageFiber.dispose(), 'dsh-computer-use: optional lease sidecar');
+    }
+    /** Wait for an already-composed storage-domain service to finish opening. */
+    async initialize() {
+        await this.prepareStorage();
+    }
+    /** Ensure one Agent may read or control one exact running application. */
+    async ensure(agent, app, scope, toolName, callId, signal) {
+        if (configuredAccess(this.config(), app.bundleId, scope))
+            return 'configured';
+        return await this.enqueueDecision(agent.session.id, async () => {
+            if (configuredAccess(this.config(), app.bundleId, scope))
+                return 'configured';
+            return await this.ensureInteractive(agent, app, scope, toolName, callId, signal);
+        });
+    }
+    /** Forget process-local control grants when their Agent is disposed. */
+    releaseAgent(agent) {
+        this.controlGrants.delete(agent);
+    }
+    async ensureInteractive(agent, app, scope, toolName, callId, signal) {
+        await this.prepareStorage();
+        const turn = currentTurn(agent.session.events);
+        if (turn === undefined) {
+            throw new ComputerUseError('COMPUTER_PERMISSION_REQUIRED', `${scope} access for ${app.name} must be requested inside an open Agent turn`);
+        }
+        if (scope === 'control' && this.controlGrants.get(agent)?.get(app.bundleId) === turn) {
+            return 'approved';
+        }
+        const stored = this.currentState(agent);
+        if (scope === 'read' && stored?.readGrants.includes(app.bundleId) === true) {
+            return 'approved';
+        }
+        if (stored?.denied.some(denial => denial.bundleId === app.bundleId && denial.scope === scope) === true) {
+            throw new ComputerUseError('COMPUTER_PERMISSION_REQUIRED', `${scope} access for ${app.name} was rejected earlier in this Session; do not retry without new user instructions`);
+        }
+        if (approvalPolicy(this.ctx, agent) === 'never') {
+            throw new ComputerUseError('COMPUTER_PERMISSION_REQUIRED', `${scope} access for ${app.name} is blocked because approval prompts are disabled in this Session (approval/policy: never, e.g. the danger-full-access preset); add "${app.bundleId}" to the computer-use grants in Settings, or switch the permission preset to one with approval ask`);
+        }
+        if (scope === 'read' && this.storage === undefined) {
+            throw this.storageRequired(app, scope, 'a Session-wide interactive read grant');
+        }
+        const outcome = await this.ctx.approval.request({
+            agent,
+            toolName,
+            ...(callId === undefined ? {} : { callId }),
+            reason: scope === 'read'
+                ? `Allow this Agent to inspect the Accessibility state and requested screenshot of ${app.name} (${app.bundleId}) for this Session.`
+                : `Allow this Agent to send UI input to ${app.name} (${app.bundleId}) for the current turn.`,
+            signal,
+        });
+        if (outcome === 'cancelled') {
+            throw new ComputerUseError('COMPUTER_CANCELLED', `${scope} access request for ${app.name} was cancelled`);
+        }
+        if (outcome === 'rejected') {
+            if (this.storage === undefined) {
+                throw this.storageRequired(app, scope, 'the rejected interactive decision');
+            }
+            await this.persist(agent, app, { kind: 'denied', scope });
+            throw new ComputerUseError('COMPUTER_PERMISSION_REQUIRED', `${scope} access for ${app.name} was not granted (rejected); do not retry in this Session without new user instructions`);
+        }
+        if (outcome !== 'allowed-once') {
+            throw new ComputerUseError('COMPUTER_PERMISSION_REQUIRED', `${scope} access for ${app.name} was not granted (${outcome})`);
+        }
+        if (scope === 'control') {
+            let grants = this.controlGrants.get(agent);
+            if (grants === undefined) {
+                grants = new Map();
+                this.controlGrants.set(agent, grants);
+            }
+            grants.set(app.bundleId, turn);
+            return 'approved';
+        }
+        await this.persist(agent, app, { kind: 'read-granted' });
+        return 'approved';
+    }
+    currentState(agent) {
+        const row = this.storage?.table.get(agent.session.id);
+        return row !== undefined && sameIdentity(row, agent.session.header) ? row : undefined;
+    }
+    async prepareStorage() {
+        if (this.storage !== undefined)
+            return this.storage;
+        if (this.ctx.get('storageDomain') === undefined)
+            return undefined;
+        await this.storageFiber;
+        return this.storage;
+    }
+    async persist(agent, app, decision) {
+        const purpose = decision.kind === 'read-granted'
+            ? 'the Session-wide read grant'
+            : `the Session-wide ${decision.scope} denial`;
+        try {
+            const participated = await this.ctx.sessions.flush(agent.session);
+            if (!participated) {
+                throw new Error('no Session persistence listener participated in ctx.sessions.flush');
+            }
+            await this.enqueueMutation(agent.session.id, async () => {
+                const binding = this.storage;
+                if (binding === undefined)
+                    throw this.storageRequired(app, decision.kind === 'read-granted' ? 'read' : decision.scope, purpose);
+                const current = binding.table.get(agent.session.id);
+                const row = current !== undefined && sameIdentity(current, agent.session.header)
+                    ? current
+                    : stateSnapshot(agent.session.header, [], []);
+                const readGrants = new Set(row.readGrants);
+                const denied = [...row.denied];
+                if (decision.kind === 'read-granted') {
+                    readGrants.add(app.bundleId);
+                }
+                else if (!denied.some(item => item.bundleId === app.bundleId && item.scope === decision.scope)) {
+                    denied.push({ bundleId: app.bundleId, scope: decision.scope });
+                }
+                await binding.table.put(agent.session.id, stateSnapshot(agent.session.header, readGrants, denied));
+            });
+        }
+        catch (error) {
+            if (error instanceof ComputerUseError)
+                throw error;
+            throw new ComputerUseError('COMPUTER_PERMISSION_REQUIRED', `${purpose} for ${app.name} could not be persisted after the approval audit: ${boundedFailure(error)}; configure working Session persistence and @deepseek-ai/dsh-storage-domain before retrying`, { cause: error });
+        }
+    }
+    storageRequired(app, scope, purpose) {
+        return new ComputerUseError('COMPUTER_PERMISSION_REQUIRED', `${scope} access for ${app.name} requires ctx.storageDomain to persist ${purpose}; compose @deepseek-ai/dsh-storage-domain or add an exact static grant for "${app.bundleId}" before retrying`);
+    }
+    enqueueDecision(sessionId, operation) {
+        const previous = this.decisionTails.get(sessionId) ?? Promise.resolve();
+        const result = previous.then(operation);
+        const tail = result.then(() => undefined, () => undefined);
+        this.decisionTails.set(sessionId, tail);
+        return result.finally(() => {
+            if (this.decisionTails.get(sessionId) === tail)
+                this.decisionTails.delete(sessionId);
+        });
+    }
+    enqueueMutation(sessionId, operation) {
+        const previous = this.mutationTails.get(sessionId) ?? Promise.resolve();
+        const result = previous.then(operation);
+        const tail = result.then(() => undefined, () => undefined);
+        this.mutationTails.set(sessionId, tail);
+        return result.finally(() => {
+            if (this.mutationTails.get(sessionId) === tail)
+                this.mutationTails.delete(sessionId);
+        });
+    }
+}
+//# sourceMappingURL=leases.js.map

package/lib/leases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leases.js","sourceRoot":"","sources":["../src/leases.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAG3E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAErD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAG9C,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;AAC1F,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;AAE3E,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,SAAS,EAAE,sBAAsB;IACjC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAA;AAKF,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,KAAK,EAAE,gBAAgB;CACxB,CAAC,CAAA;AAKF,yEAAyE;AACzE,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,OAAO,EAAE,qBAAqB;IAC9B,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;CACnC,CAAC,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAA;IACpC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QACzC,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,YAAY,EAAE,KAAK,CAAC;gBAC3B,OAAO,EAAE,sCAAsC,QAAQ,GAAG;aAC3D,CAAC,CAAA;QACJ,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QACnC,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAA;QACjD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC;gBACvB,OAAO,EAAE,0BAA0B,MAAM,CAAC,KAAK,YAAY,MAAM,CAAC,QAAQ,GAAG;aAC9E,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAKF,sEAAsE;AACtE,MAAM,CAAC,MAAM,0BAA0B,GAAG,YAAY,CAAC;IACrD,IAAI,EAAE,oBAAoB;IAC1B,OAAO,EAAE,CAAC;IACV,MAAM,EAAE;QACN,QAAQ,EAAE,WAAW,CAAqC,6BAA6B,CAAC;KACzF;CACF,CAAC,CAAA;AAMF,SAAS,WAAW,CAAC,MAA+B;IAClD,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;QAC3B,IAAI,KAAK,EAAE,IAAI,KAAK,UAAU;YAAE,OAAO,SAAS,CAAA;QAChD,IAAI,KAAK,EAAE,IAAI,KAAK,YAAY;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAA;IAC1D,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,MAAqB;IACvC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;KACzD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAA4B,EAAE,MAAqB;IACvE,OAAO,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAA;AACrF,CAAC;AAED,SAAS,aAAa,CACpB,MAAqB,EACrB,UAA4B,EAC5B,MAAwC;IAExC,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,UAAU,CAAC,CAAwB,CAAA;IAC/E,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAwC,CAAA;IAChI,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC;QAC3B,UAAU,EAAE,iBAAiB;QAC7B,MAAM,EAAE,cAAc;KACvB,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAiC,EAAE,QAAgB,EAAE,KAAyB;IACtG,IAAI,MAAM,CAAC,YAAY;QAAE,OAAO,IAAI,CAAA;IACpC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,CAAA;AACnF,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AAC/E,CAAC;AAKD,oFAAoF;AACpF,MAAM,OAAO,oBAAoB;IAQZ;IACA;IARX,OAAO,CAA4B;IAC1B,YAAY,CAA4B;IACxC,aAAa,GAAG,IAAI,GAAG,EAA4B,CAAA;IACnD,aAAa,GAAG,IAAI,GAAG,EAA4B,CAAA;IACnD,aAAa,GAAG,IAAI,OAAO,EAA8B,CAAA;IAE1E,YACmB,GAAY,EACZ,MAAuC;QADvC,QAAG,GAAH,GAAG,CAAS;QACZ,WAAM,GAAN,MAAM,CAAiC;QAExD,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,UAAmB,EAAE,EAAE;YAC9E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAA;YAC9E,MAAM,OAAO,GAAmB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAA;YACnE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;YACtB,OAAO,KAAK,IAAI,EAAE;gBAChB,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO;oBAAE,IAAI,CAAC,OAAO,GAAG,SAAS,CAAA;gBACtD,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAA;gBAC9C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;YACtB,CAAC,CAAA;QACH,CAAC,CAAC,CAAA;QACF,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,0CAA0C,CAAC,CAAA;IACjG,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,UAAU;QACd,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;IAC7B,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,MAAM,CACV,KAAY,EACZ,GAAwB,EACxB,KAAyB,EACzB,QAAgB,EAChB,MAA0B,EAC1B,MAAmB;QAEnB,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC;YAAE,OAAO,YAAY,CAAA;QAC7E,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;YAC7D,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC;gBAAE,OAAO,YAAY,CAAA;YAC7E,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;QAClF,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,wEAAwE;IACxE,YAAY,CAAC,KAAY;QACvB,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAClC,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,KAAY,EACZ,GAAwB,EACxB,KAAyB,EACzB,QAAgB,EAChB,MAA0B,EAC1B,MAAmB;QAEnB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC3B,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC9C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,gBAAgB,CAAC,8BAA8B,EAAE,GAAG,KAAK,eAAe,GAAG,CAAC,IAAI,8CAA8C,CAAC,CAAA;QAC3I,CAAC;QAED,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;YACrF,OAAO,UAAU,CAAA;QACnB,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;QACvC,IAAI,KAAK,KAAK,MAAM,IAAI,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3E,OAAO,UAAU,CAAA;QACnB,CAAC;QACD,IAAI,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YACvG,MAAM,IAAI,gBAAgB,CACxB,8BAA8B,EAC9B,GAAG,KAAK,eAAe,GAAG,CAAC,IAAI,mFAAmF,CACnH,CAAA;QACH,CAAC;QAED,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,OAAO,EAAE,CAAC;YAChD,MAAM,IAAI,gBAAgB,CACxB,8BAA8B,EAC9B,GAAG,KAAK,eAAe,GAAG,CAAC,IAAI,wIAAwI,GAAG,CAAC,QAAQ,oGAAoG,CACxR,CAAA;QACH,CAAC;QAED,IAAI,KAAK,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACnD,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,uCAAuC,CAAC,CAAA;QACjF,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC9C,KAAK;YACL,QAAQ;YACR,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,MAAM,EAAE,KAAK,KAAK,MAAM;gBACtB,CAAC,CAAC,mFAAmF,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,QAAQ,qBAAqB;gBACnI,CAAC,CAAC,wCAAwC,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,QAAQ,yBAAyB;YAC9F,MAAM;SACP,CAAC,CAAA;QACF,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YAC5B,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,GAAG,KAAK,uBAAuB,GAAG,CAAC,IAAI,gBAAgB,CAAC,CAAA;QAC3G,CAAC;QACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,mCAAmC,CAAC,CAAA;YAC7E,CAAC;YACD,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;YACzD,MAAM,IAAI,gBAAgB,CAAC,8BAA8B,EAAE,GAAG,KAAK,eAAe,GAAG,CAAC,IAAI,yFAAyF,CAAC,CAAA;QACtL,CAAC;QACD,IAAI,OAAO,KAAK,cAAc,EAAE,CAAC;YAC/B,MAAM,IAAI,gBAAgB,CAAC,8BAA8B,EAAE,GAAG,KAAK,eAAe,GAAG,CAAC,IAAI,qBAAqB,OAAO,GAAG,CAAC,CAAA;QAC5H,CAAC;QAED,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAC1C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,GAAG,IAAI,GAAG,EAAE,CAAA;gBAClB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;YACvC,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;YAC9B,OAAO,UAAU,CAAA;QACnB,CAAC;QAED,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAA;QACxD,OAAO,UAAU,CAAA;IACnB,CAAC;IAEO,YAAY,CAAC,KAAY;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACrD,OAAO,GAAG,KAAK,SAAS,IAAI,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;IACvF,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,OAAO,CAAA;QACnD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QACjE,MAAM,IAAI,CAAC,YAAY,CAAA;QACvB,OAAO,IAAI,CAAC,OAAO,CAAA;IACrB,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,KAAY,EACZ,GAAwB,EACxB,QAAkF;QAElF,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,KAAK,cAAc;YAC9C,CAAC,CAAC,6BAA6B;YAC/B,CAAC,CAAC,oBAAoB,QAAQ,CAAC,KAAK,SAAS,CAAA;QAC/C,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACjE,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAA;YACvF,CAAC;YACD,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;gBACtD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;gBAC5B,IAAI,OAAO,KAAK,SAAS;oBAAE,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;gBAC/H,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;gBACnD,MAAM,GAAG,GAAG,OAAO,KAAK,SAAS,IAAI,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;oBAC9E,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;gBAC/C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;gBAC1C,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAA;gBAC9B,IAAI,QAAQ,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;oBACrC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBAC9B,CAAC;qBAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBACjG,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;gBAChE,CAAC;gBACD,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAA;YACpG,CAAC,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,gBAAgB;gBAAE,MAAM,KAAK,CAAA;YAClD,MAAM,IAAI,gBAAgB,CACxB,8BAA8B,EAC9B,GAAG,OAAO,QAAQ,GAAG,CAAC,IAAI,qDAAqD,cAAc,CAAC,KAAK,CAAC,6FAA6F,EACjM,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAA;QACH,CAAC;IACH,CAAC;IAEO,eAAe,CACrB,GAAwB,EACxB,KAAyB,EACzB,OAAe;QAEf,OAAO,IAAI,gBAAgB,CACzB,8BAA8B,EAC9B,GAAG,KAAK,eAAe,GAAG,CAAC,IAAI,0CAA0C,OAAO,+EAA+E,GAAG,CAAC,QAAQ,mBAAmB,CAC/L,CAAA;IACH,CAAC;IAEO,eAAe,CAAI,SAAoB,EAAE,SAA2B;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAA;QACvE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC1D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QACvC,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;YACzB,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,IAAI;gBAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QACtF,CAAC,CAAC,CAAA;IACJ,CAAC;IAEO,eAAe,CAAI,SAAoB,EAAE,SAA2B;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAA;QACvE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC1D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QACvC,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;YACzB,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,IAAI;gBAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QACtF,CAAC,CAAC,CAAA;IACJ,CAAC;CACF"}

package/lib/providers/macos.js

@@ -0,0 +1,148 @@
+/** macOS Accessibility/CoreGraphics/ScreenCaptureKit provider for `ctx.computerUse`. */
+import { setTimeout as delay } from 'node:timers/promises';
+import { Service } from '@deepseek-ai/cordis';
+import { Config, COMPUTER_USE_SETTINGS_NAMESPACE, resolveConfig, } from "../config.js";
+import { ComputerUseError } from "../errors.js";
+import { ComputerUseService } from "../service.js";
+import { NativeHelperClient } from "./native-helper.js";
+/** Fixed-command native backend. */
+class MacOSBackend {
+    config;
+    name = 'macos-ax';
+    client;
+    constructor(ctx, config) {
+        this.config = config;
+        this.client = new NativeHelperClient(ctx, config);
+    }
+    get helperPath() {
+        return this.client.helperPath;
+    }
+    async resolveApp(selector, signal) {
+        return await this.client.invoke({ command: 'resolve-app', selector }, signal);
+    }
+    async listApps(signal) {
+        return await this.client.invoke({ command: 'list-apps' }, signal);
+    }
+    async observe(app, options, signal) {
+        return await this.client.invoke({
+            command: 'observe',
+            app,
+            options,
+        }, signal);
+    }
+    async act(request, signal) {
+        return await this.client.invoke({
+            command: 'act',
+            request: {
+                ...request,
+                actionTimeoutMs: this.config.actionTimeoutMs,
+                limits: {
+                    maxNodes: this.config.maxNodes,
+                    maxDepth: this.config.maxDepth,
+                    maxTextBytes: this.config.maxTextBytes,
+                },
+            },
+        }, signal);
+    }
+    async visualizeCursor(action, phase, signal) {
+        if (this.config.interaction.cursorVisualization !== 'visible')
+            return;
+        const autoHideMs = this.config.interaction.cursorAutoHideMs;
+        const move = async (point, durationMs) => {
+            await this.client.cursorCommand({
+                op: 'move',
+                x: point.x,
+                y: point.y,
+                durationMs,
+                autoHideMs,
+                targetPid: action.targetPid,
+                targetWindowNumber: action.targetWindowNumber,
+                targetWindowFrame: action.targetWindowFrame,
+            }, signal);
+        };
+        if (phase === 'after') {
+            if (action.kind === 'drag')
+                await this.client.cursorCommand({
+                    op: 'release',
+                    autoHideMs,
+                    targetPid: action.targetPid,
+                    targetWindowNumber: action.targetWindowNumber,
+                    targetWindowFrame: action.targetWindowFrame,
+                }, signal);
+            return;
+        }
+        const start = action.kind === 'drag' ? action.from : action.to;
+        if (start === undefined)
+            return;
+        await move(start, this.config.interaction.cursorMotionMs);
+        if (this.config.interaction.cursorMotionMs > 0) {
+            await delay(this.config.interaction.cursorMotionMs, undefined, { signal });
+        }
+        if (action.kind === 'scroll')
+            return;
+        await this.client.cursorCommand({
+            op: 'press',
+            autoHideMs,
+            targetPid: action.targetPid,
+            targetWindowNumber: action.targetWindowNumber,
+            targetWindowFrame: action.targetWindowFrame,
+            sustainedPress: action.kind === 'drag',
+        }, signal);
+        if (action.kind === 'drag') {
+            await move(action.to, Math.max(this.config.interaction.cursorMotionMs, 240));
+        }
+    }
+    async dispose() {
+        await this.client.dispose();
+    }
+    async health(signal) {
+        const prepared = await this.client.prepare(signal);
+        const health = await this.client.invoke({ command: 'health' }, signal);
+        return {
+            helperVersion: health.helperVersion || prepared.version,
+            helperSha256: prepared.sha256,
+            accessibility: health.accessibility,
+            screenRecording: health.screenRecording,
+        };
+    }
+    async openSettings(kind, signal) {
+        await this.client.invoke({ command: 'open-settings', kind }, signal);
+    }
+}
+/** Cordis Service provider loaded by the Bundle before the model-facing consumer. */
+export class MacOSComputerUseProvider extends ComputerUseService {
+    static inject = ['subprocess', 'approval', 'settings', 'sessions', 'agents'];
+    static Config = Config;
+    settings;
+    constructor(ctx, config = {}) {
+        if (process.platform !== 'darwin') {
+            throw new ComputerUseError('COMPUTER_UNSUPPORTED_PLATFORM', `dsh-computer-use 0.1.0 supports macOS only; current platform is ${process.platform}`);
+        }
+        const settings = ctx.settings.register(COMPUTER_USE_SETTINGS_NAMESPACE, Config, {
+            base: config,
+            applies: 'live',
+            validate: (value) => { resolveConfig(value); },
+        });
+        const resolved = resolveConfig(settings.get());
+        super(ctx, new MacOSBackend(ctx, resolved), resolved);
+        this.settings = settings;
+        ctx.effect(() => this.settings.watch(async (next) => {
+            const candidate = resolveConfig(next);
+            const backend = new MacOSBackend(ctx, candidate);
+            try {
+                await this.reconfigure(backend, candidate);
+            }
+            catch (error) {
+                await backend.dispose();
+                throw error;
+            }
+        }), 'dsh-computer-use: Settings watch');
+        ctx.effect(() => ctx.on('agent/disposed', ({ agent }) => { this.releaseAgent(agent); }), 'dsh-computer-use: Agent cleanup');
+    }
+    /** Verify helper integrity and permissions before the service is injectable. */
+    async [Service.init]() {
+        await this.initialize();
+    }
+}
+export default MacOSComputerUseProvider;
+//# sourceMappingURL=macos.js.map

package/lib/providers/macos.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"macos.js","sourceRoot":"","sources":["../../src/providers/macos.ts"],"names":[],"mappings":"AAAA,wFAAwF;AAExF,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,OAAO,EAAgB,MAAM,qBAAqB,CAAA;AAc3D,OAAO,EACL,MAAM,EACN,+BAA+B,EAC/B,aAAa,GAGd,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAA;AAElD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAUvD,oCAAoC;AACpC,MAAM,YAAY;IAI2B;IAHlC,IAAI,GAAG,UAAmB,CAAA;IAC1B,MAAM,CAAoB;IAEnC,YAAY,GAAY,EAAmB,MAAiC;QAAjC,WAAM,GAAN,MAAM,CAA2B;QAC1E,IAAI,CAAC,MAAM,GAAG,IAAI,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IACnD,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAA6B,EAAE,MAAmB;QACjE,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAsB,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAA;IACpG,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAmB;QAChC,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAuB,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,MAAM,CAAC,CAAA;IACzF,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAwB,EAAE,OAA8B,EAAE,MAAmB;QACzF,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAoB;YACjD,OAAO,EAAE,SAAS;YAClB,GAAG;YACH,OAAO;SACR,EAAE,MAAM,CAAC,CAAA;IACZ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAA6B,EAAE,MAAmB;QAC1D,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAsB;YACnD,OAAO,EAAE,KAAK;YACd,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;gBAC5C,MAAM,EAAE;oBACN,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;oBAC9B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;oBAC9B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;iBACvC;aACF;SACF,EAAE,MAAM,CAAC,CAAA;IACZ,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAA2B,EAAE,KAAyB,EAAE,MAAmB;QAC/F,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,mBAAmB,KAAK,SAAS;YAAE,OAAM;QACrE,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAA;QAC3D,MAAM,IAAI,GAAG,KAAK,EAAE,KAA+B,EAAE,UAAkB,EAAiB,EAAE;YACxF,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;gBAC9B,EAAE,EAAE,MAAM;gBACV,CAAC,EAAE,KAAK,CAAC,CAAC;gBACV,CAAC,EAAE,KAAK,CAAC,CAAC;gBACV,UAAU;gBACV,UAAU;gBACV,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;gBAC7C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;aAC5C,EAAE,MAAM,CAAC,CAAA;QACZ,CAAC,CAAA;QACD,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACtB,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;gBAAE,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;oBAC1D,EAAE,EAAE,SAAS;oBACb,UAAU;oBACV,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;oBAC7C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;iBAC5C,EAAE,MAAM,CAAC,CAAA;YACV,OAAM;QACR,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAA;QAC9D,IAAI,KAAK,KAAK,SAAS;YAAE,OAAM;QAC/B,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,CAAA;QACzD,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QAC5E,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAM;QACpC,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;YAC9B,EAAE,EAAE,OAAO;YACX,UAAU;YACV,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,cAAc,EAAE,MAAM,CAAC,IAAI,KAAK,MAAM;SACvC,EAAE,MAAM,CAAC,CAAA;QACV,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAA;QAC9E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAA;IAC7B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAmB;QAC9B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAA;QACpF,OAAO;YACL,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,QAAQ,CAAC,OAAO;YACvD,YAAY,EAAE,QAAQ,CAAC,MAAM;YAC7B,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,eAAe,EAAE,MAAM,CAAC,eAAe;SACxC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAA0C,EAAE,MAAmB;QAChF,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAO,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,CAAA;IAC5E,CAAC;CACF;AAED,qFAAqF;AACrF,MAAM,OAAO,wBAAyB,SAAQ,kBAAkB;IAC9D,MAAM,CAAC,MAAM,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAA;IAC5E,MAAM,CAAC,MAAM,GAAG,MAAM,CAAA;IAEL,QAAQ,CAAA;IAEzB,YAAY,GAAY,EAAE,SAA4B,EAAE;QACtD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,gBAAgB,CAAC,+BAA+B,EAAE,mEAAmE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAA;QACpJ,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,+BAA+B,EAAE,MAAM,EAAE;YAC9E,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,MAAM;YACf,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;SAC9C,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAA;QAC9C,KAAK,CAAC,GAAG,EAAE,IAAI,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAA;QACrD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YAClD,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;YACrC,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;YAChD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;YAC5C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;gBACvB,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC,CAAC,EAAE,kCAAkC,CAAC,CAAA;QACvC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC,CAAC,EAAE,iCAAiC,CAAC,CAAA;IAC5H,CAAC;IAED,gFAAgF;IACtE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QAC5B,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;IACzB,CAAC;;AAGH,eAAe,wBAAwB,CAAA"}