@ashx-j/lunr 0.2.25 → 0.2.27

package/dist/utils/paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/utils/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,IAAI,eAAe,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACxF,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,MAAM,cAAc,GAAG,0CAA0C,CAAC;AAelE;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAU;IACtD,IAAI,CAAC;QACJ,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AAAA,CACD;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa,EAAW;IACnD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,wGAAwG;IACxG,IACC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAC1B,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAC1B,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;QAC7B,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QAC3B,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC5B,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EACzB,CAAC;QACF,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,OAAO,GAAqB,EAAE,EAAU;IACpF,IAAI,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACrD,IAAI,OAAO,CAAC,sBAAsB,EAAE,CAAC;QACpC,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,OAAO,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;QAC1C,IAAI,UAAU,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACpC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACnG,OAAO,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC;IACF,CAAC;IAED,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,OAAO,aAAa,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,UAAU,CAAC;AAAA,CAClB;AAED,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,OAAO,GAAW,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,GAAqB,EAAE,EAAU;IACnH,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,iBAAiB,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;AAAA,CAC7G;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,GAAW,EAAsB;IACrF,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACzD,MAAM,WAAW,GAChB,YAAY,KAAK,EAAE;QACnB,CAAC,YAAY,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;IAE9F,OAAO,WAAW,CAAC,CAAC,CAAC,YAAY,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CACrD;AAED,MAAM,UAAU,iCAAiC,CAAC,QAAgB,EAAE,GAAW,EAAU;IACxF,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAChD,OAAO,CAAC,kBAAkB,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAAA,CACpF;AAED,MAAM,UAAU,0BAA0B,CAAC,IAAY,EAAQ;IAC9D,MAAM,KAAK,GACV,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC5B,CAAC,CAAC,CAAC,qBAAqB,EAAE,iCAAiC,CAAC;QAC5D,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC7B,CAAC,CAAC,CAAC,0BAA0B,CAAC;YAC9B,CAAC,CAAC,EAAE,CAAC;IAER,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACnC,gBAAgB,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5F,CAAC;aAAM,CAAC;YACP,gBAAgB,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrG,CAAC;IACF,CAAC;AAAA,CACD","sourcesContent":["import { realpathSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { isAbsolute, join, resolve as nodeResolvePath, relative, sep } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { spawnProcessSync } from \"./child-process.ts\";\n\nconst UNICODE_SPACES = /[\\u00A0\\u2000-\\u200A\\u202F\\u205F\\u3000]/g;\n\nexport interface PathInputOptions {\n\t/** Trim leading/trailing whitespace before normalization. */\n\ttrim?: boolean;\n\t/** Expand leading `~` to a home directory. Defaults to true. */\n\texpandTilde?: boolean;\n\t/** Home directory used for `~` expansion. Defaults to `os.homedir()`. */\n\thomeDir?: string;\n\t/** Strip a leading `@`, used for CLI @file paths. */\n\tstripAtPrefix?: boolean;\n\t/** Normalize unicode space variants to regular spaces. */\n\tnormalizeUnicodeSpaces?: boolean;\n}\n\n/**\n * Resolve a path to its canonical (real) form, following symlinks.\n * Falls back to the raw path if resolution fails (e.g. the target does\n * not exist yet), so that callers never crash on missing filesystem\n * entries.\n */\nexport function canonicalizePath(path: string): string {\n\ttry {\n\t\treturn realpathSync(path);\n\t} catch {\n\t\treturn path;\n\t}\n}\n\n/**\n * Returns true if the value is NOT a package source (npm:, git:, etc.)\n * or a remote URL protocol. Bare names, relative paths, and file: URLs\n * are considered local.\n */\nexport function isLocalPath(value: string): boolean {\n\tconst trimmed = value.trim();\n\t// Known non-local prefixes. file: URLs are local paths and are intentionally resolved by resolvePath().\n\tif (\n\t\ttrimmed.startsWith(\"npm:\") ||\n\t\ttrimmed.startsWith(\"git:\") ||\n\t\ttrimmed.startsWith(\"github:\") ||\n\t\ttrimmed.startsWith(\"http:\") ||\n\t\ttrimmed.startsWith(\"https:\") ||\n\t\ttrimmed.startsWith(\"ssh:\")\n\t) {\n\t\treturn false;\n\t}\n\treturn true;\n}\n\nexport function normalizePath(input: string, options: PathInputOptions = {}): string {\n\tlet normalized = options.trim ? input.trim() : input;\n\tif (options.normalizeUnicodeSpaces) {\n\t\tnormalized = normalized.replace(UNICODE_SPACES, \" \");\n\t}\n\tif (options.stripAtPrefix && normalized.startsWith(\"@\")) {\n\t\tnormalized = normalized.slice(1);\n\t}\n\n\tif (options.expandTilde ?? true) {\n\t\tconst home = options.homeDir ?? homedir();\n\t\tif (normalized === \"~\") return home;\n\t\tif (normalized.startsWith(\"~/\") || (process.platform === \"win32\" && normalized.startsWith(\"~\\\\\"))) {\n\t\t\treturn join(home, normalized.slice(2));\n\t\t}\n\t}\n\n\tif (/^file:\\/\\//.test(normalized)) {\n\t\treturn fileURLToPath(normalized);\n\t}\n\n\treturn normalized;\n}\n\nexport function resolvePath(input: string, baseDir: string = process.cwd(), options: PathInputOptions = {}): string {\n\tconst normalized = normalizePath(input, options);\n\tconst normalizedBaseDir = normalizePath(baseDir);\n\treturn isAbsolute(normalized) ? nodeResolvePath(normalized) : nodeResolvePath(normalizedBaseDir, normalized);\n}\n\nexport function getCwdRelativePath(filePath: string, cwd: string): string | undefined {\n\tconst resolvedCwd = resolvePath(cwd);\n\tconst resolvedPath = resolvePath(filePath, resolvedCwd);\n\tconst relativePath = relative(resolvedCwd, resolvedPath);\n\tconst isInsideCwd =\n\t\trelativePath === \"\" ||\n\t\t(relativePath !== \"..\" && !relativePath.startsWith(`..${sep}`) && !isAbsolute(relativePath));\n\n\treturn isInsideCwd ? relativePath || \".\" : undefined;\n}\n\nexport function formatPathRelativeToCwdOrAbsolute(filePath: string, cwd: string): string {\n\tconst absolutePath = resolvePath(filePath, cwd);\n\treturn (getCwdRelativePath(absolutePath, cwd) ?? absolutePath).split(sep).join(\"/\");\n}\n\nexport function markPathIgnoredByCloudSync(path: string): void {\n\tconst attrs =\n\t\tprocess.platform === \"darwin\"\n\t\t\t? [\"com.dropbox.ignored\", \"com.apple.fileprovider.ignore#P\"]\n\t\t\t: process.platform === \"linux\"\n\t\t\t\t? [\"user.com.dropbox.ignored\"]\n\t\t\t\t: [];\n\n\tfor (const attr of attrs) {\n\t\tif (process.platform === \"darwin\") {\n\t\t\tspawnProcessSync(\"xattr\", [\"-w\", attr, \"1\", path], { encoding: \"utf-8\", stdio: \"ignore\" });\n\t\t} else {\n\t\t\tspawnProcessSync(\"setfattr\", [\"-n\", attr, \"-v\", \"1\", path], { encoding: \"utf-8\", stdio: \"ignore\" });\n\t\t}\n\t}\n}\n"]}
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/utils/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,IAAI,eAAe,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC3G,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,MAAM,cAAc,GAAG,0CAA0C,CAAC;AAelE;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAU;IACtD,IAAI,CAAC;QACJ,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AAAA,CACD;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAU;IAC5D,IAAI,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,SAAS,CAAC;QACT,IAAI,CAAC;YACJ,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACtG,uEAAuE;YACvE,oEAAoE;YACpE,IAAI,CAAC;gBACJ,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC,cAAc,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,EAAE,CAAC,CAAC;YACxG,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACpB,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ;oBACvG,MAAM,SAAS,CAAC;YAClB,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,MAAM,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACrC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACnC,QAAQ,GAAG,MAAM,CAAC;QACnB,CAAC;IACF,CAAC;AAAA,CACD;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa,EAAW;IACnD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,wGAAwG;IACxG,IACC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAC1B,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAC1B,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;QAC7B,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QAC3B,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC5B,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EACzB,CAAC;QACF,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,OAAO,GAAqB,EAAE,EAAU;IACpF,IAAI,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACrD,IAAI,OAAO,CAAC,sBAAsB,EAAE,CAAC;QACpC,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,OAAO,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;QAC1C,IAAI,UAAU,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACpC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACnG,OAAO,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC;IACF,CAAC;IAED,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,OAAO,aAAa,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,UAAU,CAAC;AAAA,CAClB;AAED,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,OAAO,GAAW,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,GAAqB,EAAE,EAAU;IACnH,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,iBAAiB,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;AAAA,CAC7G;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,GAAW,EAAsB;IACrF,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACzD,MAAM,WAAW,GAChB,YAAY,KAAK,EAAE;QACnB,CAAC,YAAY,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;IAE9F,OAAO,WAAW,CAAC,CAAC,CAAC,YAAY,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CACrD;AAED,MAAM,UAAU,iCAAiC,CAAC,QAAgB,EAAE,GAAW,EAAU;IACxF,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAChD,OAAO,CAAC,kBAAkB,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAAA,CACpF;AAED,MAAM,UAAU,0BAA0B,CAAC,IAAY,EAAQ;IAC9D,MAAM,KAAK,GACV,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC5B,CAAC,CAAC,CAAC,qBAAqB,EAAE,iCAAiC,CAAC;QAC5D,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC7B,CAAC,CAAC,CAAC,0BAA0B,CAAC;YAC9B,CAAC,CAAC,EAAE,CAAC;IAER,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACnC,gBAAgB,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5F,CAAC;aAAM,CAAC;YACP,gBAAgB,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrG,CAAC;IACF,CAAC;AAAA,CACD","sourcesContent":["import { lstatSync, realpathSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { basename, dirname, isAbsolute, join, resolve as nodeResolvePath, relative, sep } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { spawnProcessSync } from \"./child-process.ts\";\n\nconst UNICODE_SPACES = /[\\u00A0\\u2000-\\u200A\\u202F\\u205F\\u3000]/g;\n\nexport interface PathInputOptions {\n\t/** Trim leading/trailing whitespace before normalization. */\n\ttrim?: boolean;\n\t/** Expand leading `~` to a home directory. Defaults to true. */\n\texpandTilde?: boolean;\n\t/** Home directory used for `~` expansion. Defaults to `os.homedir()`. */\n\thomeDir?: string;\n\t/** Strip a leading `@`, used for CLI @file paths. */\n\tstripAtPrefix?: boolean;\n\t/** Normalize unicode space variants to regular spaces. */\n\tnormalizeUnicodeSpaces?: boolean;\n}\n\n/**\n * Resolve a path to its canonical (real) form, following symlinks.\n * Falls back to the raw path if resolution fails (e.g. the target does\n * not exist yet), so that callers never crash on missing filesystem\n * entries.\n */\nexport function canonicalizePath(path: string): string {\n\ttry {\n\t\treturn realpathSync(path);\n\t} catch {\n\t\treturn path;\n\t}\n}\n\n/** Resolve an existing target, or the nearest existing parent of a new target.\n * Permission checks must not fall back to an unresolved alias on other I/O errors.\n */\nexport function canonicalizeTargetPath(path: string): string {\n\tlet ancestor = nodeResolvePath(path);\n\tconst suffix: string[] = [];\n\tfor (;;) {\n\t\ttry {\n\t\t\treturn join(realpathSync(ancestor), ...suffix);\n\t\t} catch (error) {\n\t\t\tif (!error || typeof error !== \"object\" || !(\"code\" in error) || error.code !== \"ENOENT\") throw error;\n\t\t\t// A dangling link is an existing alias with an unresolved destination.\n\t\t\t// Reject it instead of treating it as an ordinary missing filename.\n\t\t\ttry {\n\t\t\t\tif (lstatSync(ancestor).isSymbolicLink()) throw new Error(`Cannot resolve symbolic link: ${ancestor}`);\n\t\t\t} catch (statError) {\n\t\t\t\tif (!statError || typeof statError !== \"object\" || !(\"code\" in statError) || statError.code !== \"ENOENT\")\n\t\t\t\t\tthrow statError;\n\t\t\t}\n\t\t\tconst parent = dirname(ancestor);\n\t\t\tif (parent === ancestor) throw error;\n\t\t\tsuffix.unshift(basename(ancestor));\n\t\t\tancestor = parent;\n\t\t}\n\t}\n}\n\n/**\n * Returns true if the value is NOT a package source (npm:, git:, etc.)\n * or a remote URL protocol. Bare names, relative paths, and file: URLs\n * are considered local.\n */\nexport function isLocalPath(value: string): boolean {\n\tconst trimmed = value.trim();\n\t// Known non-local prefixes. file: URLs are local paths and are intentionally resolved by resolvePath().\n\tif (\n\t\ttrimmed.startsWith(\"npm:\") ||\n\t\ttrimmed.startsWith(\"git:\") ||\n\t\ttrimmed.startsWith(\"github:\") ||\n\t\ttrimmed.startsWith(\"http:\") ||\n\t\ttrimmed.startsWith(\"https:\") ||\n\t\ttrimmed.startsWith(\"ssh:\")\n\t) {\n\t\treturn false;\n\t}\n\treturn true;\n}\n\nexport function normalizePath(input: string, options: PathInputOptions = {}): string {\n\tlet normalized = options.trim ? input.trim() : input;\n\tif (options.normalizeUnicodeSpaces) {\n\t\tnormalized = normalized.replace(UNICODE_SPACES, \" \");\n\t}\n\tif (options.stripAtPrefix && normalized.startsWith(\"@\")) {\n\t\tnormalized = normalized.slice(1);\n\t}\n\n\tif (options.expandTilde ?? true) {\n\t\tconst home = options.homeDir ?? homedir();\n\t\tif (normalized === \"~\") return home;\n\t\tif (normalized.startsWith(\"~/\") || (process.platform === \"win32\" && normalized.startsWith(\"~\\\\\"))) {\n\t\t\treturn join(home, normalized.slice(2));\n\t\t}\n\t}\n\n\tif (/^file:\\/\\//.test(normalized)) {\n\t\treturn fileURLToPath(normalized);\n\t}\n\n\treturn normalized;\n}\n\nexport function resolvePath(input: string, baseDir: string = process.cwd(), options: PathInputOptions = {}): string {\n\tconst normalized = normalizePath(input, options);\n\tconst normalizedBaseDir = normalizePath(baseDir);\n\treturn isAbsolute(normalized) ? nodeResolvePath(normalized) : nodeResolvePath(normalizedBaseDir, normalized);\n}\n\nexport function getCwdRelativePath(filePath: string, cwd: string): string | undefined {\n\tconst resolvedCwd = resolvePath(cwd);\n\tconst resolvedPath = resolvePath(filePath, resolvedCwd);\n\tconst relativePath = relative(resolvedCwd, resolvedPath);\n\tconst isInsideCwd =\n\t\trelativePath === \"\" ||\n\t\t(relativePath !== \"..\" && !relativePath.startsWith(`..${sep}`) && !isAbsolute(relativePath));\n\n\treturn isInsideCwd ? relativePath || \".\" : undefined;\n}\n\nexport function formatPathRelativeToCwdOrAbsolute(filePath: string, cwd: string): string {\n\tconst absolutePath = resolvePath(filePath, cwd);\n\treturn (getCwdRelativePath(absolutePath, cwd) ?? absolutePath).split(sep).join(\"/\");\n}\n\nexport function markPathIgnoredByCloudSync(path: string): void {\n\tconst attrs =\n\t\tprocess.platform === \"darwin\"\n\t\t\t? [\"com.dropbox.ignored\", \"com.apple.fileprovider.ignore#P\"]\n\t\t\t: process.platform === \"linux\"\n\t\t\t\t? [\"user.com.dropbox.ignored\"]\n\t\t\t\t: [];\n\n\tfor (const attr of attrs) {\n\t\tif (process.platform === \"darwin\") {\n\t\t\tspawnProcessSync(\"xattr\", [\"-w\", attr, \"1\", path], { encoding: \"utf-8\", stdio: \"ignore\" });\n\t\t} else {\n\t\t\tspawnProcessSync(\"setfattr\", [\"-n\", attr, \"-v\", \"1\", path], { encoding: \"utf-8\", stdio: \"ignore\" });\n\t\t}\n\t}\n}\n"]}

package/dist/utils/sanitize-terminal-text.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Remove terminal instructions from untrusted display source before applying styles.
+ * Stored messages and explicit clipboard payloads must retain their original source.
+ * This is not for rendered output, which can contain trusted links and image protocols.
+ */
+export declare function sanitizeTerminalText(source: string): string;
+//# sourceMappingURL=sanitize-terminal-text.d.ts.map

package/dist/utils/sanitize-terminal-text.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-terminal-text.d.ts","sourceRoot":"","sources":["../../src/utils/sanitize-terminal-text.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAmD3D","sourcesContent":["/**\n * Remove terminal instructions from untrusted display source before applying styles.\n * Stored messages and explicit clipboard payloads must retain their original source.\n * This is not for rendered output, which can contain trusted links and image protocols.\n */\nexport function sanitizeTerminalText(source: string): string {\n\tif (!/[\\x00-\\x08\\x0b-\\x1f\\x7f-\\x9f]/.test(source)) return source;\n\n\tconst parts: string[] = [];\n\tlet index = 0;\n\tlet plainStart = 0;\n\twhile (index < source.length) {\n\t\tconst code = source.charCodeAt(index);\n\t\tif (code === 9 || code === 10 || (code >= 32 && (code < 127 || code > 159))) {\n\t\t\tindex++;\n\t\t\tcontinue;\n\t\t}\n\t\tparts.push(source.slice(plainStart, index));\n\t\tindex++;\n\t\tif (code === 13) {\n\t\t\t// CR is a terminal cursor instruction. Preserve logical source line endings.\n\t\t\tif (source.charCodeAt(index) === 10) index++;\n\t\t\tparts.push(\"\\n\");\n\t\t} else {\n\t\t\tlet sequence = code;\n\t\t\tif (code === 27 && index < source.length) {\n\t\t\t\tconst next = source.charCodeAt(index);\n\t\t\t\tif (next >= 64 && next <= 95) {\n\t\t\t\t\tsequence = next + 64; // ESC form of a C1 control.\n\t\t\t\t\tindex++;\n\t\t\t\t} else {\n\t\t\t\t\t// ESC intermediates and final byte, including charset selection and RIS.\n\t\t\t\t\twhile (source.charCodeAt(index) >= 32 && source.charCodeAt(index) <= 47) index++;\n\t\t\t\t\tif (source.charCodeAt(index) >= 48 && source.charCodeAt(index) <= 126) index++;\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (sequence === 155) {\n\t\t\t\t// CSI parameters, intermediates and final byte. Incomplete prefixes stay inert.\n\t\t\t\twhile (source.charCodeAt(index) >= 32 && source.charCodeAt(index) <= 63) index++;\n\t\t\t\tif (source.charCodeAt(index) >= 64 && source.charCodeAt(index) <= 126) index++;\n\t\t\t} else if ([144, 152, 157, 158, 159].includes(sequence)) {\n\t\t\t\t// DCS, SOS, OSC, PM and APC are opaque strings, including split streaming prefixes.\n\t\t\t\twhile (index < source.length) {\n\t\t\t\t\tconst next = source.charCodeAt(index++);\n\t\t\t\t\tif (next === 156 || (sequence === 157 && next === 7)) break;\n\t\t\t\t\tif (next === 27 && source.charCodeAt(index) === 92) {\n\t\t\t\t\t\tindex++;\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\tplainStart = index;\n\t}\n\tparts.push(source.slice(plainStart));\n\treturn parts.join(\"\");\n}\n"]}

package/dist/utils/sanitize-terminal-text.js

@@ -0,0 +1,67 @@
+/**
+ * Remove terminal instructions from untrusted display source before applying styles.
+ * Stored messages and explicit clipboard payloads must retain their original source.
+ * This is not for rendered output, which can contain trusted links and image protocols.
+ */
+export function sanitizeTerminalText(source) {
+    if (!/[\x00-\x08\x0b-\x1f\x7f-\x9f]/.test(source))
+        return source;
+    const parts = [];
+    let index = 0;
+    let plainStart = 0;
+    while (index < source.length) {
+        const code = source.charCodeAt(index);
+        if (code === 9 || code === 10 || (code >= 32 && (code < 127 || code > 159))) {
+            index++;
+            continue;
+        }
+        parts.push(source.slice(plainStart, index));
+        index++;
+        if (code === 13) {
+            // CR is a terminal cursor instruction. Preserve logical source line endings.
+            if (source.charCodeAt(index) === 10)
+                index++;
+            parts.push("\n");
+        }
+        else {
+            let sequence = code;
+            if (code === 27 && index < source.length) {
+                const next = source.charCodeAt(index);
+                if (next >= 64 && next <= 95) {
+                    sequence = next + 64; // ESC form of a C1 control.
+                    index++;
+                }
+                else {
+                    // ESC intermediates and final byte, including charset selection and RIS.
+                    while (source.charCodeAt(index) >= 32 && source.charCodeAt(index) <= 47)
+                        index++;
+                    if (source.charCodeAt(index) >= 48 && source.charCodeAt(index) <= 126)
+                        index++;
+                }
+            }
+            if (sequence === 155) {
+                // CSI parameters, intermediates and final byte. Incomplete prefixes stay inert.
+                while (source.charCodeAt(index) >= 32 && source.charCodeAt(index) <= 63)
+                    index++;
+                if (source.charCodeAt(index) >= 64 && source.charCodeAt(index) <= 126)
+                    index++;
+            }
+            else if ([144, 152, 157, 158, 159].includes(sequence)) {
+                // DCS, SOS, OSC, PM and APC are opaque strings, including split streaming prefixes.
+                while (index < source.length) {
+                    const next = source.charCodeAt(index++);
+                    if (next === 156 || (sequence === 157 && next === 7))
+                        break;
+                    if (next === 27 && source.charCodeAt(index) === 92) {
+                        index++;
+                        break;
+                    }
+                }
+            }
+        }
+        plainStart = index;
+    }
+    parts.push(source.slice(plainStart));
+    return parts.join("");
+}
+//# sourceMappingURL=sanitize-terminal-text.js.map

package/dist/utils/sanitize-terminal-text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-terminal-text.js","sourceRoot":"","sources":["../../src/utils/sanitize-terminal-text.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAU;IAC5D,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAEjE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,OAAO,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,GAAG,IAAI,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;YAC7E,KAAK,EAAE,CAAC;YACR,SAAS;QACV,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;QAC5C,KAAK,EAAE,CAAC;QACR,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YACjB,6EAA6E;YAC7E,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE;gBAAE,KAAK,EAAE,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;aAAM,CAAC;YACP,IAAI,QAAQ,GAAG,IAAI,CAAC;YACpB,IAAI,IAAI,KAAK,EAAE,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;gBACtC,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;oBAC9B,QAAQ,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,4BAA4B;oBAClD,KAAK,EAAE,CAAC;gBACT,CAAC;qBAAM,CAAC;oBACP,yEAAyE;oBACzE,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE;wBAAE,KAAK,EAAE,CAAC;oBACjF,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,GAAG;wBAAE,KAAK,EAAE,CAAC;gBAChF,CAAC;YACF,CAAC;YACD,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;gBACtB,gFAAgF;gBAChF,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE;oBAAE,KAAK,EAAE,CAAC;gBACjF,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,GAAG;oBAAE,KAAK,EAAE,CAAC;YAChF,CAAC;iBAAM,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzD,oFAAoF;gBACpF,OAAO,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;oBAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;oBACxC,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,QAAQ,KAAK,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC;wBAAE,MAAM;oBAC5D,IAAI,IAAI,KAAK,EAAE,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;wBACpD,KAAK,EAAE,CAAC;wBACR,MAAM;oBACP,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QACD,UAAU,GAAG,KAAK,CAAC;IACpB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAAA,CACtB","sourcesContent":["/**\n * Remove terminal instructions from untrusted display source before applying styles.\n * Stored messages and explicit clipboard payloads must retain their original source.\n * This is not for rendered output, which can contain trusted links and image protocols.\n */\nexport function sanitizeTerminalText(source: string): string {\n\tif (!/[\\x00-\\x08\\x0b-\\x1f\\x7f-\\x9f]/.test(source)) return source;\n\n\tconst parts: string[] = [];\n\tlet index = 0;\n\tlet plainStart = 0;\n\twhile (index < source.length) {\n\t\tconst code = source.charCodeAt(index);\n\t\tif (code === 9 || code === 10 || (code >= 32 && (code < 127 || code > 159))) {\n\t\t\tindex++;\n\t\t\tcontinue;\n\t\t}\n\t\tparts.push(source.slice(plainStart, index));\n\t\tindex++;\n\t\tif (code === 13) {\n\t\t\t// CR is a terminal cursor instruction. Preserve logical source line endings.\n\t\t\tif (source.charCodeAt(index) === 10) index++;\n\t\t\tparts.push(\"\\n\");\n\t\t} else {\n\t\t\tlet sequence = code;\n\t\t\tif (code === 27 && index < source.length) {\n\t\t\t\tconst next = source.charCodeAt(index);\n\t\t\t\tif (next >= 64 && next <= 95) {\n\t\t\t\t\tsequence = next + 64; // ESC form of a C1 control.\n\t\t\t\t\tindex++;\n\t\t\t\t} else {\n\t\t\t\t\t// ESC intermediates and final byte, including charset selection and RIS.\n\t\t\t\t\twhile (source.charCodeAt(index) >= 32 && source.charCodeAt(index) <= 47) index++;\n\t\t\t\t\tif (source.charCodeAt(index) >= 48 && source.charCodeAt(index) <= 126) index++;\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (sequence === 155) {\n\t\t\t\t// CSI parameters, intermediates and final byte. Incomplete prefixes stay inert.\n\t\t\t\twhile (source.charCodeAt(index) >= 32 && source.charCodeAt(index) <= 63) index++;\n\t\t\t\tif (source.charCodeAt(index) >= 64 && source.charCodeAt(index) <= 126) index++;\n\t\t\t} else if ([144, 152, 157, 158, 159].includes(sequence)) {\n\t\t\t\t// DCS, SOS, OSC, PM and APC are opaque strings, including split streaming prefixes.\n\t\t\t\twhile (index < source.length) {\n\t\t\t\t\tconst next = source.charCodeAt(index++);\n\t\t\t\t\tif (next === 156 || (sequence === 157 && next === 7)) break;\n\t\t\t\t\tif (next === 27 && source.charCodeAt(index) === 92) {\n\t\t\t\t\t\tindex++;\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\tplainStart = index;\n\t}\n\tparts.push(source.slice(plainStart));\n\treturn parts.join(\"\");\n}\n"]}

package/docs/browser.md

@@ -14,7 +14,7 @@ Use **Browser** in `/settings` to turn it off or on. Turning it off immediately
 lunr browser install
 ```
 
-`lunr setup` also installs matching Chromium automatically, including for Node-based standalone layouts. `PLAYWRIGHT_BROWSERS_PATH` selects an alternate cache and must be consistent between installation and execution. Linux may require Chromium system libraries; install those through your OS administrator. lunR does not install OS packages or disable Chromium's sandbox. Standalone compiled Bun browser installation has not been validated.
+`lunr setup` also installs matching Chromium automatically, including for Node-based standalone layouts. `PLAYWRIGHT_BROWSERS_PATH` selects an alternate cache and must be consistent between installation and execution. Linux may require Chromium system libraries; install those through your OS administrator. lunR does not install OS packages or disable Chromium's sandbox. Compiled Bun executables cannot run the Chromium installer. Install the same lunR version through npm and run `lunr browser install` through that installation, with the same `PLAYWRIGHT_BROWSERS_PATH` or OS cache as the compiled executable. Setup in a compiled executable can continue after an installer warning; it does not establish that Chromium is installed.
 
 ## Actions
 

package/docs/computer-use.md

@@ -0,0 +1,362 @@
+# Image-only computer use
+
+The image-only implementation shipped on `lunr-dev` as `0.2.21-dev.12.1`
+and received user testing. Automated validation passed on the dev integration.
+The stable implementation builds on that work without dev-channel naming or update
+changes, and repairs failure reporting and unchanged-image detection. Smooth cursor animation is not implemented. CuaDriver 0.28.1 has production approval for lunR 0.2.26; broader hardware acceptance remains unverified.
+
+## Setup and permissions
+
+Run `/computer setup` in the local lunR terminal. Setup verifies and installs the
+bundled runtime without downloading code, capturing the screen, or operating an
+application. It is unavailable in headless and gateway sessions.
+
+Windows needs an active, unlocked desktop. On Apple Silicon macOS, setup prints
+the exact installed `CuaDriver.app` path. Add that app to Accessibility and
+Screen & System Audio Recording in System Settings > Privacy & Security, then
+restart lunR. Older macOS versions call the second grant Screen Recording.
+Only the user can grant these permissions. Setup leaves an existing
+`/Applications/CuaDriver.app` alone.
+
+Computer use and Allow foreground control default to on. Windows x64/arm64 and
+Apple Silicon expose `computer_load`; detailed tools load on demand. Linux and
+Intel macOS have no native discovery tool. All computer tools except release
+require an image-capable model. There is no text-only accessibility fallback.
+Gateway sessions operate the gateway host, not the chat client's device.
+
+`computer_end` releases without approval. Read-only allows relevant observation
+and release, but blocks mutation. Yolo and Auto permit input. Auto allows
+requested, implied, or necessary GUI work without lunR per-call prompts. In
+Yolo, ask before introducing GUI work into an otherwise non-GUI task. These
+intent rules are agent guidance, not a natural-language authorization classifier.
+
+Prefer background window input. Foreground window input requires a verified
+background failure and a fresh image. Desktop input requires `desktop=true` and
+`foreground=true`. Disabling foreground control blocks desktop input, foreground
+window input, launch, and window management. An application can still change its
+own focus after background input.
+
+Native tools are excluded from children and refuse child execution. Children
+with shell access are not OS-sandboxed. No raw driver administration, update,
+recording, or permission tool is exposed.
+
+## Recovery contract
+
+A failed tool result keeps its text, any recovery image, and structured outcome details together. The error flag does not mean the input had no effect. Results distinguish validation/preflight without dispatch from uncertain native delivery, and include the workflow state (`ready`, `stopped`, or `cleanup_unconfirmed`). A healthy workflow remains loaded after recoverable mistakes such as an expired or mismatched token or invalid coordinates. Use `computer_observe` directly for a new image and token; `computer_load` is not a runtime restart. Never replay an uncertain click or launch merely because the call reported an error. If the native response is settled and the target remains safe to capture, one recovery image may accompany the failure. When capture fails, do not infer the action failed or substitute another target automatically. An unavailable window calls for explicit app/window discovery or a desktop observation. Broken transport, cancellation, loss of ownership, and unconfirmed cleanup stop the workflow.
+
+Launch takes `{name}` only, without an observation token. It may activate an existing app, start a new one, or return without a usable window. If launch status or window discovery is uncertain, try `computer_apps` with the app name or a valid positive returned PID before deciding whether to launch again. Observe an exact discovered PID and window ID before input. Launch has a separate longer native timeout budget inside the 90-second workflow limit; a timeout does not prove that the app did not start.
+
+## Observe, act, inspect
+
+1. Use `computer_apps` for app identities or windows for a PID. For a known app
+   or title, pass `query` to avoid paging through unrelated identities. It matches
+   a case-insensitive literal substring in `name`, `app_name`, or `title` before
+   pagination and display truncation in the requested collection: ordinary app
+   queries match apps, while a PID query matches that PID's windows. It does
+   not search every app's windows by title. `total` counts matching rows.
+   Omit `query` to browse all rows. With `include_windows:true`, a named app
+   query without `pid` also looks up windows for up to five matching running
+   PIDs, with at most 50 window rows. More than five matching PIDs asks for a
+   narrower query or an explicit PID, rather than choosing one arbitrarily.
+   Per-PID lookup failures and truncation are reported; an ordinary query
+   stays app-only and cheap. Results allowlist at most 50 rows and truncate titles to
+   240 characters. Pass `next_offset` as `offset` with the same PID and query to
+   retrieve more matches. Lists refresh per call, so changing native order can
+   shift page boundaries. PID zero
+   identifies an installed app that is not running. Window `bounds` are native
+   geometry, not screenshot coordinates.
+2. Use `computer_observe` with an exact `pid` and `window_id`, or `desktop=true`.
+   The result contains one image and a short coordinate/token record.
+3. Choose one action from that image. Pass its `observation` token and coordinates
+   in the returned image. The workflow applies the mapping; do not scale twice.
+4. Inspect the post-action image before continuing. The tool executes one action
+   and captures the same target once, including when a settled native refusal
+   permits safe recovery capture. It never polls or retries input internally.
+5. Call `computer_end` when finished.
+
+The token lasts 30 seconds, belongs to one exact target, and permits one action.
+Copy it exactly, without abbreviating or reconstructing it. A failed action
+consumes the active token. Capture again before any next action, including window
+focus. Read-only app discovery preserves an existing token but does not renew
+its original 30-second expiry. `background_unavailable` makes foreground input the next candidate after
+a fresh capture, if permitted. Do not substitute another background shortcut.
+Token rejection does not prove foreground typing failed.
+
+Every new observation invalidates the previous token before capture. Failed,
+cancelled, or malformed captures issue no token. Old tokens cannot be replayed,
+including after a successful action returns a new image.
+
+Supported input is single, double, and right click with modifiers, a complete
+press-drag-release gesture, scrolling at image coordinates, Unicode text, and
+keys or modifier shortcuts. Window text/keys can use image coordinates or the
+observed focused field. Desktop text/keys use the observed focused field only;
+change focus with a separate grounded click.
+
+`computer_window` supports `frame` in native window-bounds units and `focus` on
+an exact observed window. Minimize/restore uses a grounded image click on a
+visible control. The pinned driver has no portable minimize/restore RPC.
+`computer_launch` returns bounded app metadata, not an inferred input target;
+capture an exact window before acting.
+
+A successful transport or a changed image does not prove the intended application
+effect. Results preserve partial/unverifiable outcomes and bounded refusal codes.
+Pre-dispatch failures report `input:"not_dispatched"` and state that this call
+sent no input. They do not establish whether earlier calls had an effect. Token
+codes distinguish a missing active observation, a mismatched token, a wrong
+target, and expiry only while that state is available. A closed workflow cannot
+identify whether an old token was consumed or unknown. Recoverable token
+rejections keep a healthy workflow open and report `input:"not_dispatched"`;
+they require a fresh image rather than a new load. Once dispatch begins,
+transport failure reports `input:"uncertain"` and possible effects. Neither path
+retries input. Unparseable driver text is omitted rather than forwarded as a
+message; structured refusal fields remain bounded and allowlisted.
+When input returns but its post-image fails, the tool reports possible effects
+and either allows an explicit fresh observation when safe or stops if runtime
+safety cannot be confirmed. Capture again before deciding; never repeat input blindly.
+After an unchanged post-image, the same action against identical captured pixels
+is refused. Pixel identity hashes decoded full-image RGBA values and dimensions,
+not PNG encoding bytes, before cropping or resizing. Full captures reuse the
+image processor's decode, and crops reuse the existing full-image decode. Click signatures normalize omitted left-button/single-click/empty
+modifier defaults and modifier order. Three consecutive unchanged full observations
+stop polling in that workflow. Crops are explicit requests, not an automatic retry loop.
+
+Partial typing retains validated `requested_chars`, `delivered_chars`, `retryable`,
+and `retry_from_character` when supplied by the driver. Counts must be safe integers
+within the submitted text's Unicode code-point length, capped at 20000; the retry
+index must equal the delivered count. The index is zero-based in Unicode code
+points, not UTF-16 units. Verify the field in a fresh image before considering a
+remaining suffix. `retryable` is driver advice, not permission or proof that
+repeating input is safe. The workflow never retries typing automatically.
+
+On supported Windows x64/arm64 hosts, `computer_hover` takes exactly
+`{desktop:true,foreground:true,observation,x,y}` from a fresh primary-desktop
+image. It moves the real pointer without pressing a button, waits about 700 ms
+with cancellation support, then returns one full-desktop post-image. A tooltip
+outside a selected crop may appear in that full image. Only the visible topmost
+application receives the hover, which can itself trigger application behavior;
+this is not background window hover or an all-monitor capture. Foreground
+control must be allowed and read-only mode blocks hover. The pinned Windows
+window-scoped movement is a synthetic overlay, so lunR does not offer window
+hover. macOS and unsupported platforms do not register this tool. Desktop
+origin/DPI mapping and tooltip behavior still need an authorized live test.
+
+## Image contract and cost limits
+
+Window capture requests `include_accessibility_tree:false` and
+`include_screenshot:true`. Neither native accessibility trees nor duplicate raw
+JSON reach the model. The macOS driver still reads minimal native accessibility
+facts for window identity and background-input safety. Windows window discovery
+can use UIA as a fallback. Image-only describes application observation sent to
+the model, not the removal of every native accessibility API call.
+
+Window capture requests a 2560-pixel maximum. The runtime can impose a lower
+configured ceiling, so this is not a promised capture resolution. The workflow
+checks actual PNG dimensions against native screenshot metadata and rejects
+invalid frames. Primary-desktop capture is tree-free and uses the native PNG.
+Desktop coordinates map back to that PNG once; macOS `scale_factor` is not an
+additional multiplier.
+
+Returned images have a maximum 1280-pixel edge, one million pixels, and 1.5 MiB
+of base64 payload. The existing image processor bounds dimensions and encoding
+size. The workflow refuses images it cannot decode or map. Source PNGs also have
+allocation limits. These are engineering bounds, not measured token savings.
+
+For small text or controls, request `crop:{x,y,width,height}` with the latest
+observation token. The rectangle uses that returned image's pixels. The workflow
+captures fresh pixels, maps the rectangle into the full capture, and sends only
+the crop. Its record gives the source dimensions, crop offset, and separate x/y
+ratios. Changed source dimensions or reported window bounds reject the crop;
+request a full image again. Cropping cannot recover detail absent from the native
+capture. Post-action captures return the full target so dialogs outside a crop
+remain visible.
+
+Saved sessions retain the returned screenshots. Provider-facing screenshot
+history also accumulates until normal compaction. This change does not prune
+user images, rewrite saved sessions, or implement a generic rolling history
+filter. A targeted `context` hook could remove old computer screenshots while
+leaving sessions intact, but a rolling cutoff changes an earlier prompt prefix
+and can invalidate cached input. That tradeoff needs approved provider measurements
+before adopting a retention policy. Image-only is not automatically cheaper than
+text. Current cost controls bound each new payload, remove tree/JSON duplication,
+and combine one action with its post-image.
+
+## Cursor status
+
+Cursor animation remains a separate native-runtime decision. The inherited
+runtime launch still uses `--no-overlay`. Upstream Windows drag animation uses a
+timer separate from actual input, and desktop pointer movement can teleport.
+This branch does not claim smooth actual-cursor motion or synchronized drag
+feedback. Any eventual animation must stay local, preserve full gestures and
+cancellation, and send zero intermediate frames to the model.
+
+## Ownership and cancellation
+
+An OS-account lease spans observations and actions, independent of settings
+profiles. Competing workflows receive busy rather than queueing. Calls within a
+workflow serialize. One cross-process lock covers creation, atomic replacement,
+and deletion of the owner record. A separate lock protects runtime installation.
+A live owner is not displaced because its heartbeat is late.
+
+After MCP initialization and before any driver tool dispatch, the adapter records
+the transport PID and, on macOS, daemon PID. Missing identities or failed lease
+updates refuse dispatch. Recovery requires both owner and recorded runtimes to
+have exited. PID reuse and malformed owner records fail closed. A crash during
+initialization can leave an unrecorded idle runtime that received no input.
+
+Release, cancellation, agent end, settings changes, and session shutdown close
+the owned runtime before releasing the lease. Queued work cannot survive
+cancellation. Unconfirmed shutdown retains ownership. Cancellation cannot retract
+already delivered input, and forced termination does not prove held input was
+released. Driver-internal helper lifetime and held-input cancellation still need
+native acceptance.
+
+Gateway cron creates fresh permission contexts with the configured default mode,
+without gateway approvals or its approval handler. Read-only blocks input, and
+missing approval blocks operations that still require confirmation.
+Session shutdown precedes disposal, even after partial extension binding failure.
+TUI cron continues to use its live permission context.
+
+## Runtime and distribution
+
+The development pin is [CuaDriver 0.28.1](https://github.com/trycua/cua/releases/tag/cua-driver-rs-v0.28.1),
+source `d8028a7943087ee258dc1b4d19dc12a7cd27669c`. Archive identities and approval
+are in `scripts/computer-use-release.json`; `release.generated.ts` derives from
+it. The upstream MIT license is under `native/computer-use`. No runtime pin or
+native binary changed in the image-only workflow work.
+
+The runtime resolves the host's optional payload package or matching archive
+beside a standalone executable. It verifies the archive, extracts a fresh
+reference tree, and checks cached files/helpers against it. Redirected paths and
+escaping symlinks are refused. Installers do not overwrite an existing runtime.
+After confirming all owned processes stopped, an inactive cache can be removed
+for reinstallation. Runtime code is never downloaded at first use.
+
+Windows uses system `tar.exe` and an isolated `mcp --direct --embedded
+--no-overlay` process. A hidden system PowerShell metadata probe refuses session
+zero, disconnected sessions, and inaccessible/non-Default input desktops. It
+never switches desktops. Both platforms isolate profiles, strip inherited
+`CUA_*`, set standard permission mode, and disable telemetry/update checks.
+
+macOS preserves the unchanged signed app at its stable lunR-owned path, verifies
+its signature with `codesign --verify --deep --strict`, and launches that exact
+path through `open -n -g -W -a`. A private HOME, socket, stdin FIFO, and
+`--parent-liveness-stdio` isolate daemon state and lifetime. Shutdown uses the
+private PID-bound endpoint and waits for the app to exit. No re-signing occurs.
+
+Release staging creates exact-version host-specific optional payload packages.
+They contain unchanged archives and no install scripts. Workspace manifests keep
+unpublished payload dependencies out. Standalone asset copying selects one
+opaque archive. The v0.2.26 release records production approval for the pinned
+runtime; the publish workflow checks that approval before building. Dev-channel
+update/publication changes were not ported here.
+
+## Verification and remaining acceptance
+
+The recovery reporting, bounded window enrichment, and Windows desktop-hover
+contract have offline fake-driver coverage only. The original taskbar-click
+failure phase is still unproven. No new real-desktop, native-runtime, macOS,
+provider-driven, or release qualification is claimed by this change.
+
+
+After integrating v0.2.24 master, all five offline package builds and the Node
+bundle pass. With the PR #118 baseline repairs integrated, validation passes
+391 focused tests across 31 files and eight archive/package tests. Installation and archive staging tests now create inert
+fixtures, so source tests need no native release payload. The Windows installation
+test exercises real extraction, locking, cache reuse, and helper-tamper rejection
+without executing either fixture file. Fake-driver tests cover exact-token
+rejection with zero action dispatch, background refusal followed by fresh-capture
+foreground input, and uncertain or partial post-dispatch outcomes. Real PNG
+fixtures reproduce encoding-independent pixel identity and preserve crop mapping.
+First-paint and first-request checks pass for both browser settings; removing only
+`computer_load` reproduces master's unchanged tool hashes.
+
+All three pinned upstream archives match their committed byte counts and SHA-256
+hashes. Seven public-name tarballs staged with those unchanged real payloads pass
+relocated installation, first requests, all supported OS/CPU selections, omitted
+optional-payload recovery, and standalone installer `npm ci --ignore-scripts`.
+Staging validates rewritten JavaScript and declaration imports and exact payload
+versions in both locks. These checks ran on Windows x64 without launching the
+native driver; OS/CPU selection tests do not establish operation on other hardware.
+Archive integrity and packaging are verified, but native signing, permission and
+input acceptance remain separate. The owner approved production publication of
+CuaDriver 0.28.1 with lunR 0.2.26; this does not establish operation on other hardware.
+
+The PR also incorporates the separately tracked baseline repairs from PR #118.
+That work fixes AI catalog subpath resolution in extension loading and updates
+fixtures for current gateway, shutdown, provider and subscription contracts.
+Its 152 focused tests across ten files pass. The complete Ubuntu log before
+those repairs records 101 coding-agent failures across 27 suites and 11 AI
+failures, more than the subset exposed by check annotations. Agent passes
+181/181 in that run. Clean full-suite CI still requires broader baseline work;
+local Windows-only diagnostics are not evidence of Ubuntu failures.
+The automated checks did not operate a desktop or launch CuaDriver.
+
+A separately authorized Windows x64 smoke test used this branch's compiled
+computer tools with the real pinned runtime. It launched a new blank Notepad
+window, captured that exact window, and typed a fixed 39-character phrase using
+background delivery. The post-action screenshot showed the complete expected
+text and character count. The driver's outcome remained `unverifiable`; the
+image established the application effect. `computer_end` confirmed shutdown and
+released the desktop lease. No document was saved or installed CLI changed.
+This verifies basic launch, window capture and background text input only.
+A later Windows x64 test on an owned scratch Notepad window found that background
+Ctrl+A failed with `tool_invocation_failed`; a fresh image showed no selection.
+A fresh-token `foreground=true` retry initially returned the same XAML/UIA error.
+Pinned upstream source at `d8028a7943087ee258dc1b4d19dc12a7cd27669c`
+routes `hotkey` for a XAML window through UIA before checking `delivery_mode`.
+This native refusal was not a `background_unavailable` code. The unchanged
+screenshot established that the background shortcut had not selected the text.
+
+The Windows workflow now sends foreground modifier shortcuts without x/y through
+that pin's `press_key` with `modifiers`, whose foreground branch uses verified
+window focus and SendInput. Background shortcuts, keys with image coordinates,
+and non-Windows dispatch remain unchanged. On a subsequent parent-run test,
+foreground Ctrl+A selected all 39 characters in the same owned Notepad scratch;
+its post-action image showed the selection. Foreground Ctrl+N then opened a
+blank unsaved tab in that window, leaving the earlier scratch tab intact.
+
+The parent next cancelled a 2048-character `computer_text` call 86 ms after the
+real SDK call began, while it was still pending. The result reported
+`input_dispatch_failed`, `input:uncertain` and `cleanup:confirmed`. The native
+runtime exited and its desktop lease was absent before a fresh workflow captured
+the same owned window. That image showed exactly six characters in the new tab.
+This verifies partial text input followed by in-flight cancellation, cleanup and
+reacquisition, not a pre-dispatch cancellation or complete text delivery.
+`computer_end` shut down the new runtime and released its lease. Both tabs
+remained unsaved; other user documents were untouched. No global CLI changed.
+The complete-gesture tool API did not exercise held modifier or mouse-button
+release under abort, which remains unverified.
+
+The dev integration passed all five offline package builds, the Node bundle,
+265 focused tests across 23 suites, and eight archive/package tests. A real
+Photon fixture checks cropped pixels and coordinate mapping. First-paint and
+first-request checks passed with the regenerated supported-host fingerprint;
+removing only `computer_load` reproduced the unchanged unsupported-host baseline.
+Seven local dev tarballs passed relocated installation, OS/CPU payload selection,
+omitted-optional handling, and installer-lock checks. The dev publication workflow
+also passed. These historical results describe the dev integration. The current branch's
+stable packaging checks are recorded above.
+
+The user reported testing the published dev build; specific applications and
+scenarios were not supplied. This does not establish full platform acceptance.
+Native gates remain Windows locked/UAC/integrity states, other Electron/native
+apps, display scaling and moved/resized windows, Unicode, held modifier/button
+release under abort, and macOS TCC/LaunchServices/FIFO/shutdown on hardware.
+Provider-driven computer tool choice has not been live-qualified. Cursor/runtime
+changes need a separate scoped decision before implementation. Provider token
+savings remain unmeasured. An offline fake-driver discovery comparison finds a
+named app at row 118 of 139 synthetic apps in one query instead of three
+unfiltered pages. It
+returns one identity instead of 139 and 147 result-text characters instead of
+8699. The loaded computer-tool definitions grow by 230 serialized characters;
+the first-request definitions are unchanged because detailed tools load on demand.
+These are call and text-payload measurements, not model tokens or billing. The
+comparison uses no desktop, provider, screenshot resizing, or history pruning.
+
+## Privacy
+
+Images, window titles, and typed text can enter selected-provider requests and
+saved sessions. Disabling driver telemetry does not disable lunR session storage.
+GUI changes are outside filesystem rollback. Application content is untrusted
+task data, never authorization. OS permissions, locked desktops, UAC, and
+integrity restrictions still apply.

package/docs/custom-provider.md

@@ -211,7 +211,7 @@ models: [{
   id: "custom-model",
   // ...
   reasoning: true,
-  thinkingLevelMap: {              // map pi levels to provider values; null hides unsupported levels
+  thinkingLevelMap: {              // map lunR levels to provider values; null hides unsupported levels
     minimal: null,
     low: null,
     medium: null,
@@ -571,7 +571,7 @@ export default function (pi: ExtensionAPI) {
 }
 ```
 
-`message_end` runs before lunR tracks the assistant message for auto-compaction, so the rewritten `errorMessage` is what pi checks. With this in place, lunR will:
+`message_end` runs before lunR tracks the assistant message for auto-compaction, so the rewritten `errorMessage` is what lunR checks. With this in place, lunR will:
 
 1. Detect the overflow from `errorMessage`.
 2. Drop the failed assistant message from live context.
@@ -679,7 +679,7 @@ interface ProviderModelConfig {
   /** Whether the model supports extended thinking. */
   reasoning: boolean;
 
-  /** Maps pi thinking levels to provider/model-specific values; null marks a level unsupported. */
+  /** Maps lunR thinking levels to provider/model-specific values; null marks a level unsupported. */
   thinkingLevelMap?: Partial<Record<"off" | "minimal" | "low" | "medium" | "high" | "xhigh" | "max", string | null>>;
 
   /** Supported input types. */

package/docs/extensions.md

@@ -663,7 +663,7 @@ pi.on("before_provider_headers", (event, ctx) => {
   // Add or override — e.g. a session id for gateway tracing/attribution
   event.headers["x-session-id"] = ctx.sessionManager.getSessionId();
 
-  // Drop a tracking header pi adds for this call
+  // Drop a tracking header lunR adds for this call
   event.headers["X-OpenRouter-Title"] = null;
 });
 ```
@@ -1010,6 +1010,10 @@ pi.on("tool_result", async (event, ctx) => {
 
 Control flow helpers. `ctx.isIdle()` is false while lunR is processing an agent run, automatic retry, auto-compaction retry, or queued continuation.
 
+### ctx.promptWithCompletion()
+
+`await ctx.promptWithCompletion?.(text, { source: "extension", signal })` atomically admits one idle request and returns its completed messages. It rejects busy or closing sessions, excludes later queued user follow-ups, and waits for owned cancellation to settle. This optional capability is intended for unattended callers that need an exact completion. Use a dedicated `AbortSignal` to cancel that request.
+
 ### ctx.shutdown()
 
 Request a graceful shutdown of pi.
@@ -1487,7 +1491,7 @@ Labels persist in the session and survive restarts. Use them to mark important p
 
 Register a command.
 
-If multiple extensions register the same command name, pi keeps them all and assigns numeric invocation suffixes in load order, for example `/review:1` and `/review:2`.
+If multiple extensions register the same command name, lunR keeps them all and assigns numeric invocation suffixes in load order, for example `/review:1` and `/review:2`.
 
 ```typescript
 pi.registerCommand("stats", {
@@ -1930,7 +1934,7 @@ async execute(toolCallId, params) {
 
 **Important:** Use `StringEnum` from `@ashx-j/lunr-ai` for string enums. `Type.Union`/`Type.Literal` doesn't work with Google's API.
 
-**Argument preparation:** `prepareArguments(args)` is optional. If defined, it runs before schema validation and before `execute()`. Use it to mimic an older accepted input shape when pi resumes an older session whose stored tool call arguments no longer match the current schema. Return the object you want validated against `parameters`. Keep the public schema strict. Do not add deprecated compatibility fields to `parameters` just to keep old resumed sessions working.
+**Argument preparation:** `prepareArguments(args)` is optional. If defined, it runs before schema validation and before `execute()`. Use it to mimic an older accepted input shape when lunR resumes an older session whose stored tool call arguments no longer match the current schema. Return the object you want validated against `parameters`. Keep the public schema strict. Do not add deprecated compatibility fields to `parameters` just to keep old resumed sessions working.
 
 Example: an older session may contain an `edit` tool call with top-level `oldText` and `newText`, while the current schema only accepts `edits: [{ oldText, newText }]`.
 
@@ -2516,7 +2520,7 @@ ctx.ui.setFooter((tui, theme) => ({
 ctx.ui.setFooter(undefined);  // Restore built-in footer
 
 // Terminal title
-ctx.ui.setTitle("pi - my-project");
+ctx.ui.setTitle("lunR - my-project");
 
 // Editor text
 ctx.ui.setEditorText("Prefill text");