@ashx-j/lunr 0.2.25 → 0.2.27

package/dist/node-runtime/{chunk-YDO2F2IA.js → chunk-ZEVFBFNF.js}

@@ -1,12 +1,7 @@
 import { createRequire as __lunrRequire } from "node:module"; const require = __lunrRequire(import.meta.url);
 import {
-  DEFAULT_MAX_BYTES,
-  DEFAULT_MAX_LINES,
-  formatSize,
-  truncateHead,
-  truncateLine,
-  truncateTail
-} from "./chunk-53YJI7JU.js";
+  withFileMutationQueue
+} from "./chunk-YSB6URMT.js";
 import {
   GroupedCallText,
   getTextOutput,
@@ -21,37 +16,91 @@ import {
   toolGroupTree,
   toolStatusDot,
   toolStatusDotFromContext
-} from "./chunk-5ZQXRPMC.js";
+} from "./chunk-6ZZHGUSA.js";
+import {
+  DEFAULT_MAX_BYTES,
+  DEFAULT_MAX_LINES,
+  formatSize,
+  truncateHead,
+  truncateLine,
+  truncateTail
+} from "./chunk-53YJI7JU.js";
 import {
   processImage
-} from "./chunk-AD6VXAO7.js";
+} from "./chunk-IAZSK7KK.js";
+import {
+  getPermissionMode,
+  resetPermissions
+} from "./chunk-APVM5NEU.js";
+import {
+  pathExists,
+  resolveReadPathAsync,
+  resolveToCwd
+} from "./chunk-F2V2F4ZG.js";
 import {
   markExited,
   register
-} from "./chunk-KKUTQQV7.js";
+} from "./chunk-RYRGL7P4.js";
 import {
   getShellConfig,
   getShellEnv,
   killProcessTree,
   trackDetachedChildPid,
   untrackDetachedChildPid
-} from "./chunk-CSFI6YXL.js";
+} from "./chunk-ES6PBSIE.js";
 import {
   keyHint
-} from "./chunk-GS42T6MX.js";
+} from "./chunk-QW3AAHWN.js";
 import {
   getLanguageFromPath,
   highlightCode,
   theme
-} from "./chunk-RDDAZOMU.js";
+} from "./chunk-JL4HYQXK.js";
 import {
   APP_NAME,
   formatPathRelativeToCwdOrAbsolute,
   getBinDir,
   getReadmePath,
-  resolvePath,
   waitForChildProcess
-} from "./chunk-FQMM2EZ2.js";
+} from "./chunk-64XTQNLA.js";
+
+// packages/coding-agent/dist/core/subagent-permission-inherit.js
+var SUBAGENT_CHILD_ENV = "PI_SUBAGENT_CHILD", SUBAGENT_CHILD_PERMISSION_ENV = "PI_SUBAGENT_CHILD_PERMISSION";
+var READ_ONLY_WRITE_SPAWN_ERROR = 'Cannot launch a full-access child in read-only mode. Relaunch with permissions: "read-only".';
+function isSubagentChildProcess(env = process.env) {
+  return env[SUBAGENT_CHILD_ENV] === "1";
+}
+function parseParentPermissionMode(value) {
+  if (value === "yolo" || value === "auto" || value === "read-only")
+    return value;
+  if (value === "plan")
+    return "read-only";
+  if (value === "manual")
+    return "yolo";
+}
+function parseChildPermission(value) {
+  if (value === "full" || value === "read-only")
+    return value;
+}
+function resolveRequestedChildPermission(requested) {
+  return requested === "read-only" ? "read-only" : "full";
+}
+function resolveChildRuntimePermissionMode(childPermission) {
+  return parseChildPermission(childPermission) === "read-only" ? "read-only" : "auto";
+}
+function snapshotParentPermissionMode(sessionId) {
+  return getPermissionMode(sessionId);
+}
+function resolveChildPermissions(parentMode, requested) {
+  let requestedPermission = resolveRequestedChildPermission(requested);
+  return parseParentPermissionMode(parentMode) === "read-only" && requestedPermission === "full" ? { ok: !1, requested: requestedPermission, error: READ_ONLY_WRITE_SPAWN_ERROR } : { ok: !0, requested: requestedPermission, effective: requestedPermission };
+}
+function applyInheritedSubagentPermissions(env = process.env) {
+  if (!isSubagentChildProcess(env))
+    return;
+  let childMode = resolveChildRuntimePermissionMode(env[SUBAGENT_CHILD_PERMISSION_ENV]);
+  return resetPermissions(childMode), childMode;
+}
 
 // packages/coding-agent/dist/modes/interactive/components/visual-truncate.js
 import { Text } from "@ashx-j/lunr-tui";
@@ -137,11 +186,11 @@ var OutputAccumulator = class {
     if (!this.tempFileStream)
       return;
     let stream = this.tempFileStream;
-    this.tempFileStream = void 0, await new Promise((resolve2, reject) => {
+    this.tempFileStream = void 0, await new Promise((resolve, reject) => {
       let onError = (error) => {
         stream.off("finish", onFinish), reject(error);
       }, onFinish = () => {
-        stream.off("error", onError), resolve2();
+        stream.off("error", onError), resolve();
       };
       stream.once("error", onError), stream.once("finish", onFinish), stream.end();
     });
@@ -974,73 +1023,8 @@ function renderDiff(diffText, _options = {}) {
 }
 
 // packages/coding-agent/dist/core/tools/edit-diff.js
-import { constants as constants3 } from "fs";
-import { access as access2, readFile } from "fs/promises";
-
-// packages/coding-agent/dist/core/tools/path-utils.js
-import { accessSync, constants as constants2 } from "node:fs";
-import { access } from "node:fs/promises";
-var NARROW_NO_BREAK_SPACE = "\u202F";
-function tryMacOSScreenshotPath(filePath) {
-  return filePath.replace(/ (AM|PM)\./gi, `${NARROW_NO_BREAK_SPACE}$1.`);
-}
-function tryNFDVariant(filePath) {
-  return filePath.normalize("NFD");
-}
-function tryCurlyQuoteVariant(filePath) {
-  return filePath.replace(/'/g, "\u2019");
-}
-function fileExists(filePath) {
-  try {
-    return accessSync(filePath, constants2.F_OK), !0;
-  } catch {
-    return !1;
-  }
-}
-async function pathExists(filePath) {
-  try {
-    return await access(filePath, constants2.F_OK), !0;
-  } catch {
-    return !1;
-  }
-}
-function resolveToCwd(filePath, cwd) {
-  return resolvePath(filePath, cwd, { normalizeUnicodeSpaces: !0, stripAtPrefix: !0 });
-}
-function resolveReadPath(filePath, cwd) {
-  let resolved = resolveToCwd(filePath, cwd);
-  if (fileExists(resolved))
-    return resolved;
-  let amPmVariant = tryMacOSScreenshotPath(resolved);
-  if (amPmVariant !== resolved && fileExists(amPmVariant))
-    return amPmVariant;
-  let nfdVariant = tryNFDVariant(resolved);
-  if (nfdVariant !== resolved && fileExists(nfdVariant))
-    return nfdVariant;
-  let curlyVariant = tryCurlyQuoteVariant(resolved);
-  if (curlyVariant !== resolved && fileExists(curlyVariant))
-    return curlyVariant;
-  let nfdCurlyVariant = tryCurlyQuoteVariant(nfdVariant);
-  return nfdCurlyVariant !== resolved && fileExists(nfdCurlyVariant) ? nfdCurlyVariant : resolved;
-}
-async function resolveReadPathAsync(filePath, cwd) {
-  let resolved = resolveToCwd(filePath, cwd);
-  if (await pathExists(resolved))
-    return resolved;
-  let amPmVariant = tryMacOSScreenshotPath(resolved);
-  if (amPmVariant !== resolved && await pathExists(amPmVariant))
-    return amPmVariant;
-  let nfdVariant = tryNFDVariant(resolved);
-  if (nfdVariant !== resolved && await pathExists(nfdVariant))
-    return nfdVariant;
-  let curlyVariant = tryCurlyQuoteVariant(resolved);
-  if (curlyVariant !== resolved && await pathExists(curlyVariant))
-    return curlyVariant;
-  let nfdCurlyVariant = tryCurlyQuoteVariant(nfdVariant);
-  return nfdCurlyVariant !== resolved && await pathExists(nfdCurlyVariant) ? nfdCurlyVariant : resolved;
-}
-
-// packages/coding-agent/dist/core/tools/edit-diff.js
+import { constants as constants2 } from "fs";
+import { access, readFile } from "fs/promises";
 function detectLineEnding(content) {
   let crlfIdx = content.indexOf(`\r
 `), lfIdx = content.indexOf(`
@@ -1270,7 +1254,7 @@ async function computeEditsDiff(path3, edits, cwd) {
   let absolutePath = resolveToCwd(path3, cwd);
   try {
     try {
-      await access2(absolutePath, constants3.R_OK);
+      await access(absolutePath, constants2.R_OK);
     } catch (error) {
       let errorMessage = error instanceof Error && "code" in error ? `Error code: ${error.code}` : String(error);
       return { error: `Could not edit file: ${path3}. ${errorMessage}.` };
@@ -1282,45 +1266,9 @@ async function computeEditsDiff(path3, edits, cwd) {
   }
 }
 
-// packages/coding-agent/dist/core/tools/file-mutation-queue.js
-import { realpath } from "node:fs/promises";
-import { resolve } from "node:path";
-var fileMutationQueues = /* @__PURE__ */ new Map(), registrationQueue = Promise.resolve();
-function isMissingPathError(error) {
-  return typeof error == "object" && error !== null && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR");
-}
-async function getMutationQueueKey(filePath) {
-  let resolvedPath = resolve(filePath);
-  try {
-    return await realpath(resolvedPath);
-  } catch (error) {
-    if (isMissingPathError(error))
-      return resolvedPath;
-    throw error;
-  }
-}
-async function withFileMutationQueue(filePath, fn) {
-  let registration = registrationQueue.then(async () => {
-    let key2 = await getMutationQueueKey(filePath), currentQueue2 = fileMutationQueues.get(key2) ?? Promise.resolve(), releaseNext2, nextQueue = new Promise((resolveQueue) => {
-      releaseNext2 = resolveQueue;
-    }), chainedQueue2 = currentQueue2.then(() => nextQueue);
-    return fileMutationQueues.set(key2, chainedQueue2), { key: key2, currentQueue: currentQueue2, chainedQueue: chainedQueue2, releaseNext: releaseNext2 };
-  });
-  registrationQueue = registration.then(() => {
-  }, () => {
-  });
-  let { key, currentQueue, chainedQueue, releaseNext } = await registration;
-  await currentQueue;
-  try {
-    return await fn();
-  } finally {
-    releaseNext(), fileMutationQueues.get(key) === chainedQueue && fileMutationQueues.delete(key);
-  }
-}
-
 // packages/coding-agent/dist/core/tools/edit.js
 import { Box, Container as Container2, Spacer, Text as Text3 } from "@ashx-j/lunr-tui";
-import { constants as constants4 } from "fs";
+import { constants as constants3 } from "fs";
 import { access as fsAccess2, readFile as fsReadFile, writeFile as fsWriteFile } from "fs/promises";
 import { Type as Type2 } from "typebox";
 var replaceEditSchema = Type2.Object({
@@ -1336,7 +1284,7 @@ var replaceEditSchema = Type2.Object({
 }, {}), defaultEditOperations = {
   readFile: (path3) => fsReadFile(path3),
   writeFile: (path3, content) => fsWriteFile(path3, content, "utf-8"),
-  access: (path3) => fsAccess2(path3, constants4.R_OK | constants4.W_OK)
+  access: (path3) => fsAccess2(path3, constants3.R_OK | constants3.W_OK)
 };
 function prepareEditArguments(input) {
   if (!input || typeof input != "object")
@@ -1772,7 +1720,7 @@ function createFindToolDefinition(cwd, options) {
     promptSnippet: "Find files by glob pattern (respects .gitignore)",
     parameters: findSchema,
     async execute(_toolCallId, { pattern, path: searchDir, limit }, signal, _onUpdate, _ctx) {
-      return new Promise((resolve2, reject) => {
+      return new Promise((resolve, reject) => {
         if (signal?.aborted) {
           reject(new Error("Operation aborted"));
           return;
@@ -1803,7 +1751,7 @@ function createFindToolDefinition(cwd, options) {
                 return;
               }
               if (results.length === 0) {
-                settle(() => resolve2({
+                settle(() => resolve({
                   content: [{ type: "text", text: "No files found matching pattern" }],
                   details: void 0
                 }));
@@ -1813,7 +1761,7 @@ function createFindToolDefinition(cwd, options) {
 `), truncation = truncateHead(rawOutput, { maxLines: Number.MAX_SAFE_INTEGER }), resultOutput = truncation.content, details = {}, notices = [];
               resultLimitReached && (notices.push(`${effectiveLimit} results limit reached`), details.resultLimitReached = effectiveLimit), truncation.truncated && (notices.push(`${formatSize(51200)} limit reached`), details.truncation = truncation), notices.length > 0 && (resultOutput += `
 
-[${notices.join(". ")}]`), settle(() => resolve2({
+[${notices.join(". ")}]`), settle(() => resolve({
                 content: [{ type: "text", text: resultOutput }],
                 details: Object.keys(details).length > 0 ? details : void 0
               }));
@@ -1870,7 +1818,7 @@ function createFindToolDefinition(cwd, options) {
                 }
               }
               if (!output) {
-                settle(() => resolve2({
+                settle(() => resolve({
                   content: [{ type: "text", text: "No files found matching pattern" }],
                   details: void 0
                 }));
@@ -1888,7 +1836,7 @@ function createFindToolDefinition(cwd, options) {
 `), truncation = truncateHead(rawOutput, { maxLines: Number.MAX_SAFE_INTEGER }), resultOutput = truncation.content, details = {}, notices = [];
               resultLimitReached && (notices.push(`${effectiveLimit} results limit reached. Use limit=${effectiveLimit * 2} for more, or refine pattern`), details.resultLimitReached = effectiveLimit), truncation.truncated && (notices.push(`${formatSize(51200)} limit reached`), details.truncation = truncation), notices.length > 0 && (resultOutput += `
 
-[${notices.join(". ")}]`), settle(() => resolve2({
+[${notices.join(". ")}]`), settle(() => resolve({
                 content: [{ type: "text", text: resultOutput }],
                 details: Object.keys(details).length > 0 ? details : void 0
               }));
@@ -1982,7 +1930,7 @@ function createGrepToolDefinition(cwd, options) {
     promptSnippet: "Search file contents for patterns (respects .gitignore)",
     parameters: grepSchema,
     async execute(_toolCallId, { pattern, path: searchDir, glob, ignoreCase, literal, context, limit }, signal, _onUpdate, _ctx) {
-      return new Promise((resolve2, reject) => {
+      return new Promise((resolve, reject) => {
         if (signal?.aborted) {
           reject(new Error("Operation aborted"));
           return;
@@ -2075,7 +2023,7 @@ function createGrepToolDefinition(cwd, options) {
                 return;
               }
               if (matchCount === 0) {
-                settle(() => resolve2({ content: [{ type: "text", text: "No matches found" }], details: void 0 }));
+                settle(() => resolve({ content: [{ type: "text", text: "No matches found" }], details: void 0 }));
                 return;
               }
               for (let match of matches)
@@ -2091,7 +2039,7 @@ function createGrepToolDefinition(cwd, options) {
 `), truncation = truncateHead(rawOutput, { maxLines: Number.MAX_SAFE_INTEGER }), output = truncation.content, details = {}, notices = [];
               matchLimitReached && (notices.push(`${effectiveLimit} matches limit reached. Use limit=${effectiveLimit * 2} for more, or refine pattern`), details.matchLimitReached = effectiveLimit), truncation.truncated && (notices.push(`${formatSize(51200)} limit reached`), details.truncation = truncation), linesTruncated && (notices.push(`Some lines truncated to ${500} chars. Use read tool to see full lines`), details.linesTruncated = !0), notices.length > 0 && (output += `
 
-[${notices.join(". ")}]`), settle(() => resolve2({
+[${notices.join(". ")}]`), settle(() => resolve({
                 content: [{ type: "text", text: output }],
                 details: Object.keys(details).length > 0 ? details : void 0
               }));
@@ -2167,7 +2115,7 @@ function createLsToolDefinition(cwd, options) {
     promptSnippet: "List directory contents",
     parameters: lsSchema,
     async execute(_toolCallId, { path: path3, limit }, signal, _onUpdate, _ctx) {
-      return new Promise((resolve2, reject) => {
+      return new Promise((resolve, reject) => {
         if (signal?.aborted) {
           reject(new Error("Operation aborted"));
           return;
@@ -2207,14 +2155,14 @@ function createLsToolDefinition(cwd, options) {
               results.push(entry + suffix);
             }
             if (signal?.removeEventListener("abort", onAbort), results.length === 0) {
-              resolve2({ content: [{ type: "text", text: "(empty directory)" }], details: void 0 });
+              resolve({ content: [{ type: "text", text: "(empty directory)" }], details: void 0 });
               return;
             }
             let rawOutput = results.join(`
 `), truncation = truncateHead(rawOutput, { maxLines: Number.MAX_SAFE_INTEGER }), output = truncation.content, details = {}, notices = [];
             entryLimitReached && (notices.push(`${effectiveLimit} entries limit reached. Use limit=${effectiveLimit * 2} for more`), details.entryLimitReached = effectiveLimit), truncation.truncated && (notices.push(`${formatSize(51200)} limit reached`), details.truncation = truncation), notices.length > 0 && (output += `
 
-[${notices.join(". ")}]`), resolve2({
+[${notices.join(". ")}]`), resolve({
               content: [{ type: "text", text: output }],
               details: Object.keys(details).length > 0 ? details : void 0
             });
@@ -2246,9 +2194,9 @@ function createLsTool(cwd, options) {
 }
 
 // packages/coding-agent/dist/core/tools/read.js
-import { basename, dirname, isAbsolute, relative, resolve as resolvePath2, sep } from "node:path";
+import { basename, dirname, isAbsolute, relative, resolve as resolvePath, sep } from "node:path";
 import { Text as Text7 } from "@ashx-j/lunr-tui";
-import { constants as constants5 } from "fs";
+import { constants as constants4 } from "fs";
 import { access as fsAccess3, readFile as fsReadFile3 } from "fs/promises";
 import { Type as Type6 } from "typebox";
 
@@ -2330,7 +2278,7 @@ var readSchema = Type6.Object({
   limit: Type6.Optional(Type6.Number({ description: "Maximum number of lines to read" }))
 }), COMPACT_RESOURCE_FILE_NAMES = /* @__PURE__ */ new Set(["AGENTS.md", "AGENTS.MD", "CLAUDE.md", "CLAUDE.MD"]), defaultReadOperations = {
   readFile: (path3) => fsReadFile3(path3),
-  access: (path3) => fsAccess3(path3, constants5.R_OK),
+  access: (path3) => fsAccess3(path3, constants4.R_OK),
   detectImageMimeType: detectSupportedImageMimeTypeFromFile
 };
 function formatReadLineRange(args, theme2) {
@@ -2357,7 +2305,7 @@ function toPosixPath2(filePath) {
   return filePath.split(sep).join("/");
 }
 function getPiDocsClassification(absolutePath) {
-  let packageRoot = dirname(getReadmePath()), relativePath = relative(resolvePath2(packageRoot), resolvePath2(absolutePath));
+  let packageRoot = dirname(getReadmePath()), relativePath = relative(resolvePath(packageRoot), resolvePath(absolutePath));
   if (relativePath === "" || relativePath === ".." || relativePath.startsWith(`..${sep}`) || isAbsolute(relativePath))
     return;
   let label = toPosixPath2(relativePath);
@@ -2402,7 +2350,7 @@ function createReadToolDefinition(cwd, options) {
     promptGuidelines: ["Use read to examine files instead of cat or sed."],
     parameters: readSchema,
     async execute(_toolCallId, { path: path3, offset, limit }, signal, _onUpdate, ctx) {
-      return new Promise((resolve2, reject) => {
+      return new Promise((resolve, reject) => {
         if (signal?.aborted) {
           reject(new Error("Operation aborted"));
           return;
@@ -2468,7 +2416,7 @@ ${nonVisionImageNote}`), content = [{ type: "text", text: textNote }];
             }
             if (aborted)
               return;
-            signal?.removeEventListener("abort", onAbort), resolve2({ content, details });
+            signal?.removeEventListener("abort", onAbort), resolve({ content, details });
           } catch (error) {
             signal?.removeEventListener("abort", onAbort), aborted || reject(error);
           }
@@ -2678,15 +2626,20 @@ function createReadOnlyTools(cwd, options) {
 export {
   wrapToolDefinition,
   createToolDefinitionFromAgentTool,
+  SUBAGENT_CHILD_PERMISSION_ENV,
+  READ_ONLY_WRITE_SPAWN_ERROR,
+  isSubagentChildProcess,
+  resolveChildRuntimePermissionMode,
+  snapshotParentPermissionMode,
+  resolveChildPermissions,
+  applyInheritedSubagentPermissions,
   truncateToVisualLines,
   createLocalBashOperations,
   createBashToolDefinition,
   createBashTool,
   renderDiff,
-  resolveReadPath,
   generateUnifiedPatch,
   generateDiffString,
-  withFileMutationQueue,
   createEditToolDefinition,
   createEditTool,
   getToolPath,

package/dist/node-runtime/chunk-ZIQUS5QO.js

@@ -0,0 +1,180 @@
+import { createRequire as __lunrRequire } from "node:module"; const require = __lunrRequire(import.meta.url);
+import {
+  require_proper_lockfile
+} from "./chunk-URD2SLIT.js";
+import {
+  getPackageDir
+} from "./chunk-64XTQNLA.js";
+import {
+  __toESM
+} from "./chunk-BRJX2PRC.js";
+
+// packages/coding-agent/dist/core/computer-use/runtime.js
+var import_proper_lockfile = __toESM(require_proper_lockfile(), 1);
+import { execFile } from "node:child_process";
+import { createHash, randomUUID } from "node:crypto";
+import { createReadStream } from "node:fs";
+import { lstat, mkdir, readdir, readFile, readlink, realpath, rename, rm } from "node:fs/promises";
+import { createRequire } from "node:module";
+import { userInfo } from "node:os";
+import { dirname, isAbsolute, join, relative, resolve } from "node:path";
+import { promisify } from "node:util";
+
+// packages/coding-agent/dist/core/computer-use/release.generated.js
+var computerRelease = {
+  version: "0.28.1",
+  tag: "cua-driver-rs-v0.28.1",
+  sourceCommit: "d8028a7943087ee258dc1b4d19dc12a7cd27669c",
+  repository: "https://github.com/trycua/cua",
+  prerelease: !0,
+  approval: "production-approved",
+  artifacts: [
+    {
+      platform: "win32",
+      arch: "x64",
+      packageName: "@ashx-j/lunr-computer-win32-x64",
+      name: "cua-driver-rs-0.28.1-windows-x86_64-binary.zip",
+      bytes: 28930759,
+      sha256: "ab90418a54f84102f549cde4537daef3a0e20ba8254b7e24524a50fc5f4174d3"
+    },
+    {
+      platform: "win32",
+      arch: "arm64",
+      packageName: "@ashx-j/lunr-computer-win32-arm64",
+      name: "cua-driver-rs-0.28.1-windows-arm64-binary.zip",
+      bytes: 27246194,
+      sha256: "d260e6110e029680d543d317f3c3c09569475f8d65855fcedda202e2ee989bf0"
+    },
+    {
+      platform: "darwin",
+      arch: "arm64",
+      packageName: "@ashx-j/lunr-computer-darwin-arm64",
+      name: "cua-driver-rs-0.28.1-darwin-arm64.tar.gz",
+      bytes: 70074352,
+      sha256: "b3cb3781feb9855dfcdd616bc5c9c8e627453e3e16a073c1446326691a549b24"
+    }
+  ]
+};
+
+// packages/coding-agent/dist/core/computer-use/runtime.js
+var exec = promisify(execFile), CUA_VERSION = computerRelease.version;
+async function resolveRuntimeArchive(packageDirectory = getPackageDir(), platform = process.platform, arch = process.arch) {
+  let payload = computerRelease.artifacts.find((item) => item.platform === platform && item.arch === arch);
+  if (!payload)
+    throw new Error("Computer use is unsupported on this platform or architecture.");
+  let archive = join(packageDirectory, "native", "computer-use", payload.name);
+  try {
+    await lstat(archive);
+  } catch (error) {
+    if (!(error instanceof Error && "code" in error && error.code === "ENOENT"))
+      throw error;
+    let manifestPath;
+    try {
+      manifestPath = createRequire(join(packageDirectory, "package.json")).resolve(`${payload.packageName}/package.json`);
+    } catch {
+      throw new Error("Computer-use payload is missing. Reinstall lunR with optional dependencies enabled. No runtime was downloaded.");
+    }
+    let manifest = JSON.parse(await readFile(manifestPath, "utf8")), cli = JSON.parse(await readFile(join(packageDirectory, "package.json"), "utf8"));
+    if (manifest.name !== payload.packageName || manifest.version !== cli.version)
+      throw new Error("Computer-use payload package version does not match lunR. Reinstall lunR with optional dependencies enabled.");
+    archive = join(dirname(manifestPath), payload.name);
+  }
+  let info = await lstat(archive);
+  if (!info.isFile() || info.isSymbolicLink() || info.size !== payload.bytes)
+    throw new Error("Bundled computer-use archive is not a regular file of the pinned size.");
+  return { archive, sha256: payload.sha256 };
+}
+function runtimeEnvironment(inherited = process.env) {
+  return {
+    ...Object.fromEntries(Object.entries(inherited).filter((entry) => entry[1] !== void 0 && !entry[0].toUpperCase().startsWith("CUA_"))),
+    CUA_DRIVER_RS_TELEMETRY_ENABLED: "false",
+    CUA_DRIVER_RS_UPDATE_CHECK: "false",
+    CUA_DRIVER_PERMISSION_MODE: "standard",
+    CUA_DRIVER_DISABLE_UNRESTRICTED: "true"
+  };
+}
+async function digest(path, signal) {
+  let hash = createHash("sha256");
+  for await (let chunk of createReadStream(path, { signal }))
+    hash.update(chunk);
+  return hash.digest("hex");
+}
+async function assertOwnedPath(path) {
+  let current = resolve(path);
+  for (; ; ) {
+    try {
+      if ((await lstat(current)).isSymbolicLink() || resolve(await realpath(current)).toLowerCase() !== current.toLowerCase())
+        throw new Error(`Computer runtime path redirects elsewhere: ${current}`);
+    } catch (error) {
+      if (!(error instanceof Error && "code" in error && error.code === "ENOENT"))
+        throw error;
+    }
+    let parent = dirname(current);
+    if (parent === current)
+      return;
+    current = parent;
+  }
+}
+async function runtimeInventory(root, signal) {
+  let inventory = {};
+  async function walk(path) {
+    for (let item of await readdir(path, { withFileTypes: !0 })) {
+      let entry = join(path, item.name), key = relative(root, entry);
+      if (item.isSymbolicLink()) {
+        let target = await readlink(entry), resolved = relative(root, resolve(dirname(entry), target));
+        if (isAbsolute(target) || resolved === ".." || resolved.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || isAbsolute(resolved))
+          throw new Error("Runtime symlink escapes its bundle.");
+        inventory[key] = `link:${target}`;
+      } else if (item.isDirectory())
+        await assertOwnedPath(entry), inventory[key] = "directory", await walk(entry);
+      else if (item.isFile())
+        await assertOwnedPath(entry), inventory[key] = await digest(entry, signal);
+      else
+        throw new Error("Unexpected runtime filesystem entry.");
+    }
+  }
+  return await walk(root), Object.fromEntries(Object.entries(inventory).sort(([a], [b]) => a.localeCompare(b)));
+}
+async function installRuntime(signal) {
+  signal?.throwIfAborted();
+  let platform = `${process.platform}-${process.arch}`, { archive, sha256 } = await resolveRuntimeArchive();
+  if (process.platform === "win32" && process.env.SESSIONNAME === "Services")
+    throw new Error("Computer use requires a logged-in interactive desktop.");
+  if (await digest(archive, signal) !== sha256)
+    throw new Error("Bundled computer-use archive failed SHA-256 verification.");
+  let root = join(userInfo().homedir, ".lunr", "desktop");
+  await assertOwnedPath(root), await mkdir(root, { recursive: !0, mode: 448 });
+  let release = await import_proper_lockfile.default.lock(root, { retries: 0, stale: 12e4 }), temporary = join(root, `extract-${randomUUID()}`), destination = join(root, `runtime-${platform}`);
+  try {
+    await assertOwnedPath(destination), await mkdir(temporary, { mode: 448 }), await exec(process.platform === "win32" ? join(process.env.SystemRoot ?? "C:\\Windows", "System32", "tar.exe") : "/usr/bin/tar", ["-xf", archive, "-C", temporary], {
+      timeout: 3e4,
+      windowsHide: !0,
+      signal
+    });
+    let extracted = process.platform === "darwin" ? join(temporary, `cua-driver-rs-${CUA_VERSION}-darwin-arm64`) : temporary, expected = await runtimeInventory(extracted, signal);
+    try {
+      if (await lstat(destination), JSON.stringify(await runtimeInventory(destination, signal)) !== JSON.stringify(expected))
+        throw new Error("Cached computer runtime differs from the verified archive. Remove the inactive lunR runtime directory before reinstalling; it was not executed or overwritten.");
+    } catch (error) {
+      if (!(error instanceof Error && "code" in error && error.code === "ENOENT"))
+        throw error;
+      await rename(extracted, destination);
+    }
+    if (signal?.throwIfAborted(), process.platform === "darwin") {
+      let app = join(destination, "CuaDriver.app");
+      return await exec("/usr/bin/codesign", ["--verify", "--deep", "--strict", app], { timeout: 15e3, signal }), { app, command: join(app, "Contents", "MacOS", "cua-driver") };
+    }
+    return { command: join(destination, "cua-driver.exe") };
+  } finally {
+    await rm(temporary, { recursive: !0, force: !0 }), await release();
+  }
+}
+
+export {
+  CUA_VERSION,
+  resolveRuntimeArchive,
+  runtimeEnvironment,
+  assertOwnedPath,
+  runtimeInventory,
+  installRuntime
+};

package/dist/node-runtime/cli-runtime.js

@@ -2,13 +2,13 @@
 import { createRequire as __lunrRequire } from "node:module"; const require = __lunrRequire(import.meta.url);
 import {
   parseArgs
-} from "./chunk-E24EO34J.js";
+} from "./chunk-WPXUR3HE.js";
 import {
   markStartupMilestone
 } from "./chunk-CCZJ3PYY.js";
 import {
   isNodeBundle
-} from "./chunk-FQMM2EZ2.js";
+} from "./chunk-64XTQNLA.js";
 import "./chunk-Q4Q6D4IY.js";
 import "./chunk-BRJX2PRC.js";
 
@@ -57,14 +57,14 @@ var args = process.argv.slice(2), startupBenchmark = process.env.PI_STARTUP_BENC
 markStartupMilestone("mode_routed");
 var startupView;
 if (preloadMode === "interactive") {
-  let { InteractiveView } = await import("./interactive-view-NGFAMHPW.js");
+  let { InteractiveView } = await import("./interactive-view-K33PM4OS.js");
   startupView = new InteractiveView(), startupView.start(), await startupView.waitForFirstFrame(), startupView.isExitRequested && process.exit(0);
 }
 var startRuntime = async () => {
   let importStarted = performance.now();
   try {
     let [{ APP_NAME }, { main }, { noteImportMain }] = await Promise.all([
-      import("./config-QDD5PUE2.js"),
+      import("./config-CU7M7BTK.js"),
       import("./main.js"),
       import("./timings-UAD5BEAS.js")
     ]);