@elizaos/agent 2.0.0-alpha.98 → 2.0.0-beta.2

package/packages/agent/src/services/media-generation.js

@@ -0,0 +1,102 @@
+import { IMediaGenerationService, ServiceType, } from "@elizaos/core";
+import { isElizaCloudServiceSelectedInConfig } from "@elizaos/shared";
+import { loadElizaConfig } from "../config/config.js";
+import { createAudioProvider, createImageProvider, createVideoProvider, } from "../providers/media-provider.js";
+function getMediaProviderOptions() {
+    const config = loadElizaConfig();
+    const cloudMediaSelected = isElizaCloudServiceSelectedInConfig(config, "media");
+    return {
+        elizaCloudBaseUrl: config.cloud?.baseUrl ?? "https://elizacloud.ai/api/v1",
+        elizaCloudApiKey: config.cloud?.apiKey,
+        cloudMediaDisabled: !cloudMediaSelected,
+    };
+}
+export class AgentMediaGenerationService extends IMediaGenerationService {
+    static serviceType = ServiceType.MEDIA_GENERATION;
+    capabilityDescription = "Generates image, video, and audio through configured local media providers.";
+    static async start(runtime) {
+        return new AgentMediaGenerationService(runtime);
+    }
+    async stop() { }
+    canGenerateMedia(request) {
+        const config = loadElizaConfig();
+        const providerOptions = getMediaProviderOptions();
+        try {
+            if (request.mediaType === "image") {
+                createImageProvider(config.media?.image, providerOptions);
+                return true;
+            }
+            if (request.mediaType === "video") {
+                createVideoProvider(config.media?.video, providerOptions);
+                return true;
+            }
+            createAudioProvider(config.media?.audio, providerOptions);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async generateMedia(request) {
+        const config = loadElizaConfig();
+        const providerOptions = getMediaProviderOptions();
+        if (request.mediaType === "image") {
+            const result = await createImageProvider(config.media?.image, providerOptions).generate({
+                prompt: request.prompt,
+                size: request.size,
+                quality: request.quality,
+                style: request.style,
+                negativePrompt: request.negativePrompt,
+                seed: request.seed,
+            });
+            if (!result.success || !result.data) {
+                throw new Error(result.error ?? "Image generation failed");
+            }
+            return {
+                mediaType: "image",
+                url: result.data.imageUrl,
+                imageUrl: result.data.imageUrl,
+                imageBase64: result.data.imageBase64,
+                revisedPrompt: result.data.revisedPrompt,
+                mimeType: "image/png",
+            };
+        }
+        if (request.mediaType === "video") {
+            const result = await createVideoProvider(config.media?.video, providerOptions).generate({
+                prompt: request.prompt,
+                duration: request.duration,
+                aspectRatio: request.aspectRatio,
+                imageUrl: request.imageUrl,
+            });
+            if (!result.success || !result.data) {
+                throw new Error(result.error ?? "Video generation failed");
+            }
+            return {
+                mediaType: "video",
+                url: result.data.videoUrl,
+                videoUrl: result.data.videoUrl,
+                thumbnailUrl: result.data.thumbnailUrl,
+                duration: result.data.duration,
+                mimeType: "video/mp4",
+            };
+        }
+        const result = await createAudioProvider(config.media?.audio, providerOptions).generate({
+            prompt: request.prompt,
+            duration: request.duration,
+            instrumental: request.instrumental,
+            genre: request.genre,
+        });
+        if (!result.success || !result.data) {
+            throw new Error(result.error ?? "Audio generation failed");
+        }
+        return {
+            mediaType: "audio",
+            audioKind: request.audioKind,
+            url: result.data.audioUrl,
+            audioUrl: result.data.audioUrl,
+            title: result.data.title,
+            duration: result.data.duration,
+            mimeType: "audio/mpeg",
+        };
+    }
+}

package/packages/agent/src/services/overlay-app-presence.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Tracks which overlay app (e.g. companion) is foregrounded in the dashboard.
+ * Overlay apps do not create AppManager runs, so agent-side gating also consults
+ * this heartbeat updated via POST /api/apps/overlay-presence.
+ */
+export declare const OVERLAY_APP_PRESENCE_TTL_MS = 60000;
+export declare function setOverlayAppPresence(appName: string | null): void;
+export declare function isOverlayAppPresenceActive(appCanonicalName: string, maxAgeMs?: number): boolean;
+//# sourceMappingURL=overlay-app-presence.d.ts.map

package/packages/agent/src/services/overlay-app-presence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"overlay-app-presence.d.ts","sourceRoot":"","sources":["../../../../../src/services/overlay-app-presence.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,eAAO,MAAM,2BAA2B,QAAS,CAAC;AAKlD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAGlE;AAED,wBAAgB,0BAA0B,CACxC,gBAAgB,EAAE,MAAM,EACxB,QAAQ,GAAE,MAAoC,GAC7C,OAAO,CAKT"}

package/packages/agent/src/services/overlay-app-presence.js

@@ -0,0 +1,18 @@
+/**
+ * Tracks which overlay app (e.g. companion) is foregrounded in the dashboard.
+ * Overlay apps do not create AppManager runs, so agent-side gating also consults
+ * this heartbeat updated via POST /api/apps/overlay-presence.
+ */
+export const OVERLAY_APP_PRESENCE_TTL_MS = 60_000;
+let lastAppName = null;
+let lastReportAt = 0;
+export function setOverlayAppPresence(appName) {
+    lastAppName = appName?.trim() ? appName : null;
+    lastReportAt = Date.now();
+}
+export function isOverlayAppPresenceActive(appCanonicalName, maxAgeMs = OVERLAY_APP_PRESENCE_TTL_MS) {
+    if (!lastAppName || lastAppName !== appCanonicalName) {
+        return false;
+    }
+    return Date.now() - lastReportAt <= maxAgeMs;
+}

package/packages/agent/src/services/owner-name.d.ts

@@ -0,0 +1,4 @@
+export declare const OWNER_NAME_MAX_LENGTH = 60;
+export declare function fetchConfiguredOwnerName(): Promise<string | null>;
+export declare function persistConfiguredOwnerName(name: string): Promise<boolean>;
+//# sourceMappingURL=owner-name.d.ts.map

package/packages/agent/src/services/owner-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-name.d.ts","sourceRoot":"","sources":["../../../../../src/services/owner-name.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAiBxC,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQvE;AAED,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,OAAO,CAAC,CAoBlB"}

package/packages/agent/src/services/owner-name.js

@@ -0,0 +1,46 @@
+import { loadElizaConfig, saveElizaConfig } from "../config/config.js";
+export const OWNER_NAME_MAX_LENGTH = 60;
+function isRecord(value) {
+    return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function normalizeOwnerName(value) {
+    if (typeof value !== "string" && typeof value !== "number") {
+        return null;
+    }
+    const trimmed = String(value).trim();
+    if (!trimmed) {
+        return null;
+    }
+    return trimmed.slice(0, OWNER_NAME_MAX_LENGTH);
+}
+export async function fetchConfiguredOwnerName() {
+    try {
+        const config = loadElizaConfig();
+        const ui = isRecord(config.ui) ? config.ui : null;
+        return normalizeOwnerName(ui?.ownerName);
+    }
+    catch {
+        return null;
+    }
+}
+export async function persistConfiguredOwnerName(name) {
+    const normalized = normalizeOwnerName(name);
+    if (!normalized) {
+        return false;
+    }
+    try {
+        const config = loadElizaConfig();
+        const ui = isRecord(config.ui) ? config.ui : {};
+        saveElizaConfig({
+            ...config,
+            ui: {
+                ...ui,
+                ownerName: normalized,
+            },
+        });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}

package/packages/agent/src/services/permissions/contracts.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Re-export of the permission contract types from `@elizaos/shared`.
+ *
+ * This file used to contain a local stub while sibling agents landed the
+ * shared definitions in parallel. Now that the shared contract is canonical,
+ * everything routes through it.
+ */
+export type { IPermissionsRegistry, PermissionId, PermissionRestrictedReason, PermissionState, PermissionStatus, Platform as PermissionPlatform, Prober, } from "@elizaos/shared";
+//# sourceMappingURL=contracts.d.ts.map

package/packages/agent/src/services/permissions/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../../../../../src/services/permissions/contracts.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,YAAY,EACV,oBAAoB,EACpB,YAAY,EACZ,0BAA0B,EAC1B,eAAe,EACf,gBAAgB,EAChB,QAAQ,IAAI,kBAAkB,EAC9B,MAAM,GACP,MAAM,iBAAiB,CAAC"}

package/packages/agent/src/services/permissions/contracts.js

@@ -0,0 +1,8 @@
+/**
+ * Re-export of the permission contract types from `@elizaos/shared`.
+ *
+ * This file used to contain a local stub while sibling agents landed the
+ * shared definitions in parallel. Now that the shared contract is canonical,
+ * everything routes through it.
+ */
+export {};

package/packages/agent/src/services/permissions/probers/_bridge.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Shared bridge helpers for native permission probers.
+ *
+ * Consolidates:
+ *   - platform detection
+ *   - osascript shellouts (used for AppleScript permission checks)
+ *   - bundle identifier resolution and TCC.db reads
+ *   - bun:ffi loader for the existing macOS permissions dylib
+ *     (`libMacWindowEffects.dylib`, built under
+ *     `packages/app-core/platforms/electrobun/src/`)
+ *
+ * The TCC.db read trick lets us answer `check()` without triggering an OS
+ * dialog: TCC's authorization database is readable via sqlite3 for the
+ * current user. This is the canonical "preflight" technique used elsewhere
+ * in the codebase (see `permissions-darwin.ts`).
+ */
+import type { PermissionId, PermissionPlatform, PermissionState, PermissionStatus } from "../contracts.js";
+export declare const PLATFORM: PermissionPlatform;
+export declare const IS_DARWIN: boolean;
+/**
+ * Build a `PermissionState` with sane defaults (`lastChecked = now`,
+ * platform pre-filled). Caller fills the parts that vary.
+ */
+export declare function buildState(id: PermissionId, status: PermissionStatus, options?: Partial<Omit<PermissionState, "id" | "status" | "lastChecked" | "platform">>): PermissionState;
+/**
+ * Short-circuit state for non-darwin platforms where the permission is a
+ * macOS-only concept (Reminders, Calendar, Notes, ScreenTime, Health,
+ * Accessibility, Screen Recording, Full Disk, Automation).
+ */
+export declare function platformUnsupportedState(id: PermissionId): PermissionState;
+/**
+ * Run an osascript snippet and return stdout. Returns `null` on non-zero
+ * exit (which happens when the user denies an Automation prompt or the
+ * scripted target isn't available).
+ *
+ * IMPORTANT: this can trigger a TCC Automation prompt if `script` targets
+ * an app the runtime hasn't been authorized for yet. Use TCC.db reads in
+ * `check()` paths and reserve osascript for `request()` paths.
+ */
+export declare function runOsascript(script: string, timeoutMs?: number): Promise<string | null>;
+/**
+ * Read TCC.db for a specific service+client. Returns:
+ *   - "granted"  if auth_value=2
+ *   - "denied"   if auth_value=0
+ *   - null       on error or row missing (caller should treat as not-determined)
+ *
+ * Note: macOS 11+ moves some entries to the system TCC.db
+ * (`/Library/Application Support/com.apple.TCC/TCC.db`) which requires Full
+ * Disk Access to read. We only consult the per-user TCC.db here.
+ */
+export declare function queryTccStatus(service: string, bundleIdentifier: string): Promise<"granted" | "denied" | null>;
+/**
+ * Resolve the runtime bundle identifier from the running app's Info.plist.
+ * Falls back to a sensible default for dev (unsigned bun runtime).
+ */
+export declare function resolveBundleId(execPath?: string): string;
+interface NativePermissionsLib {
+    requestAccessibilityPermission: () => boolean;
+    checkAccessibilityPermission: () => boolean;
+    requestScreenRecordingPermission: () => boolean;
+    checkScreenRecordingPermission: () => boolean;
+    checkMicrophonePermission: () => number;
+    checkCameraPermission: () => number;
+    requestCameraPermission: () => void;
+    requestMicrophonePermission: () => void;
+}
+export declare function getNativeDylib(): Promise<NativePermissionsLib | null>;
+/** Map AVCaptureDevice authorizationStatus values to PermissionStatus. */
+export declare function mapAVAuthStatus(value: number): PermissionStatus;
+/**
+ * Open System Settings to a privacy pane. Best-effort; returns nothing.
+ * Used by `request()` paths after the OS has refused (or there's no API to
+ * trigger the prompt programmatically).
+ */
+export declare function openPrivacyPane(pane: string): Promise<void>;
+export {};
+//# sourceMappingURL=_bridge.d.ts.map

package/packages/agent/src/services/permissions/probers/_bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_bridge.d.ts","sourceRoot":"","sources":["../../../../../../../src/services/permissions/probers/_bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAMH,OAAO,KAAK,EACV,YAAY,EACZ,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EACjB,MAAM,iBAAiB,CAAC;AAEzB,eAAO,MAAM,QAAQ,EAAE,kBACiB,CAAC;AAEzC,eAAO,MAAM,SAAS,SAAwB,CAAC;AAE/C;;;GAGG;AACH,wBAAgB,UAAU,CACxB,EAAE,EAAE,YAAY,EAChB,MAAM,EAAE,gBAAgB,EACxB,OAAO,GAAE,OAAO,CACd,IAAI,CAAC,eAAe,EAAE,IAAI,GAAG,QAAQ,GAAG,aAAa,GAAG,UAAU,CAAC,CAC/D,GACL,eAAe,CAkBjB;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,YAAY,GAAG,eAAe,CAK1E;AAED;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,MAAM,EACd,SAAS,SAAO,GACf,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAyBxB;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,CAiCtC;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,QAAQ,SAAmB,GAAG,MAAM,CAenE;AAiBD,UAAU,oBAAoB;IAC5B,8BAA8B,EAAE,MAAM,OAAO,CAAC;IAC9C,4BAA4B,EAAE,MAAM,OAAO,CAAC;IAC5C,gCAAgC,EAAE,MAAM,OAAO,CAAC;IAChD,8BAA8B,EAAE,MAAM,OAAO,CAAC;IAC9C,yBAAyB,EAAE,MAAM,MAAM,CAAC;IACxC,qBAAqB,EAAE,MAAM,MAAM,CAAC;IACpC,uBAAuB,EAAE,MAAM,IAAI,CAAC;IACpC,2BAA2B,EAAE,MAAM,IAAI,CAAC;CACzC;AAcD,wBAAsB,cAAc,IAAI,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CA6B3E;AAED,0EAA0E;AAC1E,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,CAK/D;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CASjE"}

package/packages/agent/src/services/permissions/probers/_bridge.js

@@ -0,0 +1,224 @@
+/**
+ * Shared bridge helpers for native permission probers.
+ *
+ * Consolidates:
+ *   - platform detection
+ *   - osascript shellouts (used for AppleScript permission checks)
+ *   - bundle identifier resolution and TCC.db reads
+ *   - bun:ffi loader for the existing macOS permissions dylib
+ *     (`libMacWindowEffects.dylib`, built under
+ *     `packages/app-core/platforms/electrobun/src/`)
+ *
+ * The TCC.db read trick lets us answer `check()` without triggering an OS
+ * dialog: TCC's authorization database is readable via sqlite3 for the
+ * current user. This is the canonical "preflight" technique used elsewhere
+ * in the codebase (see `permissions-darwin.ts`).
+ */
+import { existsSync, readFileSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+export const PLATFORM = process.platform;
+export const IS_DARWIN = PLATFORM === "darwin";
+/**
+ * Build a `PermissionState` with sane defaults (`lastChecked = now`,
+ * platform pre-filled). Caller fills the parts that vary.
+ */
+export function buildState(id, status, options = {}) {
+    const state = {
+        id,
+        status,
+        lastChecked: Date.now(),
+        canRequest: options.canRequest ?? status === "not-determined",
+        platform: PLATFORM,
+    };
+    if (options.restrictedReason !== undefined) {
+        state.restrictedReason = options.restrictedReason;
+    }
+    if (options.lastRequested !== undefined) {
+        state.lastRequested = options.lastRequested;
+    }
+    if (options.lastBlockedFeature !== undefined) {
+        state.lastBlockedFeature = options.lastBlockedFeature;
+    }
+    return state;
+}
+/**
+ * Short-circuit state for non-darwin platforms where the permission is a
+ * macOS-only concept (Reminders, Calendar, Notes, ScreenTime, Health,
+ * Accessibility, Screen Recording, Full Disk, Automation).
+ */
+export function platformUnsupportedState(id) {
+    return buildState(id, "not-applicable", {
+        canRequest: false,
+        restrictedReason: "platform_unsupported",
+    });
+}
+/**
+ * Run an osascript snippet and return stdout. Returns `null` on non-zero
+ * exit (which happens when the user denies an Automation prompt or the
+ * scripted target isn't available).
+ *
+ * IMPORTANT: this can trigger a TCC Automation prompt if `script` targets
+ * an app the runtime hasn't been authorized for yet. Use TCC.db reads in
+ * `check()` paths and reserve osascript for `request()` paths.
+ */
+export async function runOsascript(script, timeoutMs = 5000) {
+    if (!IS_DARWIN)
+        return null;
+    try {
+        const proc = Bun.spawn(["osascript", "-e", script], {
+            stdout: "pipe",
+            stderr: "pipe",
+        });
+        const timer = setTimeout(() => {
+            try {
+                proc.kill();
+            }
+            catch {
+                // process already exited
+            }
+        }, timeoutMs);
+        const [stdout, _stderr, exitCode] = await Promise.all([
+            new Response(proc.stdout).text(),
+            new Response(proc.stderr).text(),
+            proc.exited,
+        ]);
+        clearTimeout(timer);
+        if (exitCode !== 0)
+            return null;
+        return stdout.trim();
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Read TCC.db for a specific service+client. Returns:
+ *   - "granted"  if auth_value=2
+ *   - "denied"   if auth_value=0
+ *   - null       on error or row missing (caller should treat as not-determined)
+ *
+ * Note: macOS 11+ moves some entries to the system TCC.db
+ * (`/Library/Application Support/com.apple.TCC/TCC.db`) which requires Full
+ * Disk Access to read. We only consult the per-user TCC.db here.
+ */
+export async function queryTccStatus(service, bundleIdentifier) {
+    if (!IS_DARWIN)
+        return null;
+    try {
+        const tccDb = path.join(os.homedir(), "Library/Application Support/com.apple.TCC/TCC.db");
+        if (!existsSync(tccDb))
+            return null;
+        const proc = Bun.spawn([
+            "sqlite3",
+            tccDb,
+            `SELECT auth_value FROM access WHERE service='${service}' AND client='${bundleIdentifier}'`,
+        ], { stdout: "pipe", stderr: "pipe" });
+        const [stdout, stderr, exitCode] = await Promise.all([
+            new Response(proc.stdout).text(),
+            new Response(proc.stderr).text(),
+            proc.exited,
+        ]);
+        if (exitCode !== 0 || stderr.includes("authorization denied"))
+            return null;
+        const value = stdout.trim();
+        if (value === "2")
+            return "granted";
+        if (value === "0")
+            return "denied";
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Resolve the runtime bundle identifier from the running app's Info.plist.
+ * Falls back to a sensible default for dev (unsigned bun runtime).
+ */
+export function resolveBundleId(execPath = process.execPath) {
+    const fallback = "ai.elizaos.app";
+    try {
+        const macOsDir = path.dirname(path.resolve(execPath));
+        const contentsDir = path.resolve(macOsDir, "..");
+        const infoPlistPath = path.join(contentsDir, "Info.plist");
+        if (!existsSync(infoPlistPath))
+            return fallback;
+        const text = readFileSync(infoPlistPath, "utf8");
+        const m = text.match(/<key>\s*CFBundleIdentifier\s*<\/key>\s*<string>([^<]+)<\/string>/s);
+        return m?.[1]?.trim() ?? fallback;
+    }
+    catch {
+        return fallback;
+    }
+}
+let nativeLib = null;
+let nativeLibResolved = false;
+const DYLIB_CANDIDATES = [
+    // Worktree layout — relative to the agent package
+    "../../../../app-core/platforms/electrobun/src/libMacWindowEffects.dylib",
+    // Installed package layout
+    "../../../app-core/platforms/electrobun/src/libMacWindowEffects.dylib",
+    // Absolute env override
+    process.env.MILADY_NATIVE_PERMISSIONS_DYLIB ?? "",
+].filter(Boolean);
+export async function getNativeDylib() {
+    if (nativeLibResolved)
+        return nativeLib;
+    nativeLibResolved = true;
+    if (!IS_DARWIN)
+        return null;
+    for (const candidate of DYLIB_CANDIDATES) {
+        const dylibPath = path.isAbsolute(candidate)
+            ? candidate
+            : path.resolve(import.meta.dir, candidate);
+        if (!existsSync(dylibPath))
+            continue;
+        try {
+            const { dlopen, FFIType } = await import("bun:ffi");
+            const { symbols } = dlopen(dylibPath, {
+                requestAccessibilityPermission: { args: [], returns: FFIType.bool },
+                checkAccessibilityPermission: { args: [], returns: FFIType.bool },
+                requestScreenRecordingPermission: { args: [], returns: FFIType.bool },
+                checkScreenRecordingPermission: { args: [], returns: FFIType.bool },
+                checkMicrophonePermission: { args: [], returns: FFIType.i32 },
+                checkCameraPermission: { args: [], returns: FFIType.i32 },
+                requestCameraPermission: { args: [], returns: FFIType.void },
+                requestMicrophonePermission: { args: [], returns: FFIType.void },
+            });
+            nativeLib = symbols;
+            return nativeLib;
+        }
+        catch {
+            // try next candidate
+        }
+    }
+    return null;
+}
+/** Map AVCaptureDevice authorizationStatus values to PermissionStatus. */
+export function mapAVAuthStatus(value) {
+    if (value === 2)
+        return "granted";
+    if (value === 1)
+        return "denied";
+    if (value === 3)
+        return "restricted";
+    return "not-determined";
+}
+/**
+ * Open System Settings to a privacy pane. Best-effort; returns nothing.
+ * Used by `request()` paths after the OS has refused (or there's no API to
+ * trigger the prompt programmatically).
+ */
+export async function openPrivacyPane(pane) {
+    if (!IS_DARWIN)
+        return;
+    const url = `x-apple.systempreferences:com.apple.preference.security?Privacy_${pane}`;
+    try {
+        const proc = Bun.spawn(["open", url], { stdout: "pipe", stderr: "pipe" });
+        await proc.exited;
+    }
+    catch {
+        // no-op
+    }
+}

package/packages/agent/src/services/permissions/probers/accessibility.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Accessibility prober.
+ *
+ * Native APIs:
+ *   - check:   AXIsProcessTrusted() (via libMacWindowEffects.dylib)
+ *   - request: AXIsProcessTrustedWithOptions({ AXTrustedCheckOptionPrompt: true })
+ *
+ * On macOS this permission cannot be granted programmatically — the prompt
+ * directs the user to System Settings, where they must toggle the app on
+ * manually. After the user toggles, the running process must restart to
+ * pick up the new state. We surface that by returning the post-prompt
+ * status verbatim; callers should treat `denied` as "user must restart".
+ */
+import type { Prober } from "../contracts.js";
+export declare const accessibilityProber: Prober;
+//# sourceMappingURL=accessibility.d.ts.map

package/packages/agent/src/services/permissions/probers/accessibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessibility.d.ts","sourceRoot":"","sources":["../../../../../../../src/services/permissions/probers/accessibility.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAY/D,eAAO,MAAM,mBAAmB,EAAE,MAiCjC,CAAC"}

package/packages/agent/src/services/permissions/probers/accessibility.js

@@ -0,0 +1,45 @@
+/**
+ * Accessibility prober.
+ *
+ * Native APIs:
+ *   - check:   AXIsProcessTrusted() (via libMacWindowEffects.dylib)
+ *   - request: AXIsProcessTrustedWithOptions({ AXTrustedCheckOptionPrompt: true })
+ *
+ * On macOS this permission cannot be granted programmatically — the prompt
+ * directs the user to System Settings, where they must toggle the app on
+ * manually. After the user toggles, the running process must restart to
+ * pick up the new state. We surface that by returning the post-prompt
+ * status verbatim; callers should treat `denied` as "user must restart".
+ */
+import { buildState, getNativeDylib, IS_DARWIN, platformUnsupportedState, queryTccStatus, resolveBundleId, } from "./_bridge.js";
+const ID = "accessibility";
+export const accessibilityProber = {
+    id: ID,
+    async check() {
+        if (!IS_DARWIN)
+            return platformUnsupportedState(ID);
+        const lib = await getNativeDylib();
+        const granted = lib?.checkAccessibilityPermission() ?? false;
+        if (granted)
+            return buildState(ID, "granted", { canRequest: false });
+        // Native check returned false — consult TCC.db to distinguish
+        // "denied" (explicit user no) from "not-determined" (never asked).
+        const tcc = await queryTccStatus("kTCCServiceAccessibility", resolveBundleId());
+        if (tcc === "granted")
+            return buildState(ID, "granted", { canRequest: false });
+        if (tcc === "denied")
+            return buildState(ID, "denied", { canRequest: false });
+        return buildState(ID, "not-determined", { canRequest: true });
+    },
+    async request({ reason: _reason }) {
+        if (!IS_DARWIN)
+            return platformUnsupportedState(ID);
+        const lib = await getNativeDylib();
+        // AXIsProcessTrustedWithOptions with prompt:true opens the System
+        // Settings panel and adds the app to the list. The user must still
+        // toggle it on manually; the call returns the *current* state.
+        lib?.requestAccessibilityPermission();
+        const state = await accessibilityProber.check();
+        return { ...state, lastRequested: Date.now() };
+    },
+};

package/packages/agent/src/services/permissions/probers/automation.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Automation prober.
+ *
+ * "Automation" on macOS = TCC's Apple Events service: the right to send
+ * scripted commands to another application. Granted per (sender, target)
+ * pair. We probe a known-stable target (System Events) because that's
+ * what most of our internal AppleScript shellouts use.
+ *
+ * Native API:
+ *   - AEDeterminePermissionToAutomateTarget(target, typeWildCard, typeWildCard, askUserIfNeeded)
+ *
+ * Without an FFI for AE we shell out to osascript and inspect the error
+ * code, same pattern as `notes.ts`.
+ */
+import type { Prober } from "../contracts.js";
+export declare const automationProber: Prober;
+//# sourceMappingURL=automation.d.ts.map

package/packages/agent/src/services/permissions/probers/automation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"automation.d.ts","sourceRoot":"","sources":["../../../../../../../src/services/permissions/probers/automation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAyB/D,eAAO,MAAM,gBAAgB,EAAE,MAiB9B,CAAC"}

package/packages/agent/src/services/permissions/probers/automation.js

@@ -0,0 +1,46 @@
+/**
+ * Automation prober.
+ *
+ * "Automation" on macOS = TCC's Apple Events service: the right to send
+ * scripted commands to another application. Granted per (sender, target)
+ * pair. We probe a known-stable target (System Events) because that's
+ * what most of our internal AppleScript shellouts use.
+ *
+ * Native API:
+ *   - AEDeterminePermissionToAutomateTarget(target, typeWildCard, typeWildCard, askUserIfNeeded)
+ *
+ * Without an FFI for AE we shell out to osascript and inspect the error
+ * code, same pattern as `notes.ts`.
+ */
+import { buildState, IS_DARWIN, platformUnsupportedState, runOsascript, } from "./_bridge.js";
+const ID = "automation";
+async function probeAutomationAccess() {
+    const result = await runOsascript('try\n  tell application "System Events" to get name of current user\non error errMsg number errNum\n  return "ERR:" & errNum\nend try');
+    if (result === null)
+        return "not-determined";
+    if (result.startsWith("ERR:")) {
+        const num = parseInt(result.slice(4), 10);
+        if (num === -1743 || num === -10004)
+            return "denied";
+        return "not-determined";
+    }
+    return "granted";
+}
+export const automationProber = {
+    id: ID,
+    async check() {
+        if (!IS_DARWIN)
+            return platformUnsupportedState(ID);
+        const status = await probeAutomationAccess();
+        return buildState(ID, status, { canRequest: status === "not-determined" });
+    },
+    async request({ reason: _reason }) {
+        if (!IS_DARWIN)
+            return platformUnsupportedState(ID);
+        const status = await probeAutomationAccess();
+        return buildState(ID, status, {
+            canRequest: status === "not-determined",
+            lastRequested: Date.now(),
+        });
+    },
+};