@elizaos/agent 2.0.0-alpha.98 → 2.0.0-beta.2

package/packages/agent/src/services/permissions/probers/calendar.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Calendar prober.
+ *
+ * Native APIs (macOS):
+ *   - check:   EKEventStore.authorizationStatus(for: .event)
+ *   - request: EKEventStore.requestFullAccessToEvents (macOS 14+) or
+ *              .requestAccess(to: .event)
+ *
+ * Uses TCC.db reads (kTCCServiceCalendar) for check, AppleScript shellout
+ * to Calendar.app for request. Same INTEGRATION TODO as reminders.ts.
+ */
+import type { Prober } from "../contracts.js";
+export declare const calendarProber: Prober;
+//# sourceMappingURL=calendar.d.ts.map

package/packages/agent/src/services/permissions/probers/calendar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendar.d.ts","sourceRoot":"","sources":["../../../../../../../src/services/permissions/probers/calendar.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAY/D,eAAO,MAAM,cAAc,EAAE,MAoB5B,CAAC"}

package/packages/agent/src/services/permissions/probers/calendar.js

@@ -0,0 +1,33 @@
+/**
+ * Calendar prober.
+ *
+ * Native APIs (macOS):
+ *   - check:   EKEventStore.authorizationStatus(for: .event)
+ *   - request: EKEventStore.requestFullAccessToEvents (macOS 14+) or
+ *              .requestAccess(to: .event)
+ *
+ * Uses TCC.db reads (kTCCServiceCalendar) for check, AppleScript shellout
+ * to Calendar.app for request. Same INTEGRATION TODO as reminders.ts.
+ */
+import { buildState, IS_DARWIN, platformUnsupportedState, queryTccStatus, resolveBundleId, runOsascript, } from "./_bridge.js";
+const ID = "calendar";
+export const calendarProber = {
+    id: ID,
+    async check() {
+        if (!IS_DARWIN)
+            return platformUnsupportedState(ID);
+        const tcc = await queryTccStatus("kTCCServiceCalendar", resolveBundleId());
+        if (tcc === "granted")
+            return buildState(ID, "granted", { canRequest: false });
+        if (tcc === "denied")
+            return buildState(ID, "denied", { canRequest: false });
+        return buildState(ID, "not-determined", { canRequest: true });
+    },
+    async request({ reason: _reason }) {
+        if (!IS_DARWIN)
+            return platformUnsupportedState(ID);
+        await runOsascript('tell application "Calendar" to count of calendars');
+        const state = await calendarProber.check();
+        return { ...state, lastRequested: Date.now() };
+    },
+};

package/packages/agent/src/services/permissions/probers/camera.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Camera prober.
+ *
+ * Native APIs (macOS):
+ *   - check:   AVCaptureDevice.authorizationStatus(for: .video)
+ *   - request: AVCaptureDevice.requestAccess(for: .video)
+ *
+ * On win32/linux, the renderer supplies the concrete browser/device state
+ * through navigator.permissions/getUserMedia and writes it back through the
+ * shared permission routes.
+ */
+import type { Prober } from "../contracts.js";
+export declare const cameraProber: Prober;
+//# sourceMappingURL=camera.d.ts.map

package/packages/agent/src/services/permissions/probers/camera.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"camera.d.ts","sourceRoot":"","sources":["../../../../../../../src/services/permissions/probers/camera.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAW/D,eAAO,MAAM,YAAY,EAAE,MA2B1B,CAAC"}

package/packages/agent/src/services/permissions/probers/camera.js

@@ -0,0 +1,39 @@
+/**
+ * Camera prober.
+ *
+ * Native APIs (macOS):
+ *   - check:   AVCaptureDevice.authorizationStatus(for: .video)
+ *   - request: AVCaptureDevice.requestAccess(for: .video)
+ *
+ * On win32/linux, the renderer supplies the concrete browser/device state
+ * through navigator.permissions/getUserMedia and writes it back through the
+ * shared permission routes.
+ */
+import { buildState, getNativeDylib, IS_DARWIN, mapAVAuthStatus, openPrivacyPane, } from "./_bridge.js";
+const ID = "camera";
+export const cameraProber = {
+    id: ID,
+    async check() {
+        if (!IS_DARWIN) {
+            // Renderer fallback handles navigator.permissions/getUserMedia.
+            return buildState(ID, "not-determined", { canRequest: true });
+        }
+        const lib = await getNativeDylib();
+        const status = mapAVAuthStatus(lib?.checkCameraPermission() ?? 0);
+        return buildState(ID, status, {
+            canRequest: status === "not-determined",
+        });
+    },
+    async request({ reason: _reason }) {
+        if (!IS_DARWIN) {
+            return buildState(ID, "not-determined", { canRequest: true });
+        }
+        const lib = await getNativeDylib();
+        lib?.requestCameraPermission();
+        const state = await cameraProber.check();
+        if (state.status === "denied") {
+            await openPrivacyPane("Camera");
+        }
+        return { ...state, lastRequested: Date.now() };
+    },
+};

package/packages/agent/src/services/permissions/probers/contacts.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Contacts prober.
+ *
+ * Native APIs (macOS):
+ *   - check:   CNContactStore.authorizationStatus(for: .contacts)
+ *   - request: CNContactStore.requestAccess(for: .contacts)
+ *
+ * Uses TCC.db reads (kTCCServiceAddressBook) for check, AppleScript
+ * shellout to Contacts.app for request.
+ */
+import type { Prober } from "../contracts.js";
+export declare const contactsProber: Prober;
+//# sourceMappingURL=contacts.d.ts.map

package/packages/agent/src/services/permissions/probers/contacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contacts.d.ts","sourceRoot":"","sources":["../../../../../../../src/services/permissions/probers/contacts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAY/D,eAAO,MAAM,cAAc,EAAE,MAuB5B,CAAC"}

package/packages/agent/src/services/permissions/probers/contacts.js

@@ -0,0 +1,32 @@
+/**
+ * Contacts prober.
+ *
+ * Native APIs (macOS):
+ *   - check:   CNContactStore.authorizationStatus(for: .contacts)
+ *   - request: CNContactStore.requestAccess(for: .contacts)
+ *
+ * Uses TCC.db reads (kTCCServiceAddressBook) for check, AppleScript
+ * shellout to Contacts.app for request.
+ */
+import { buildState, IS_DARWIN, platformUnsupportedState, queryTccStatus, resolveBundleId, runOsascript, } from "./_bridge.js";
+const ID = "contacts";
+export const contactsProber = {
+    id: ID,
+    async check() {
+        if (!IS_DARWIN)
+            return platformUnsupportedState(ID);
+        const tcc = await queryTccStatus("kTCCServiceAddressBook", resolveBundleId());
+        if (tcc === "granted")
+            return buildState(ID, "granted", { canRequest: false });
+        if (tcc === "denied")
+            return buildState(ID, "denied", { canRequest: false });
+        return buildState(ID, "not-determined", { canRequest: true });
+    },
+    async request({ reason: _reason }) {
+        if (!IS_DARWIN)
+            return platformUnsupportedState(ID);
+        await runOsascript('tell application "Contacts" to count of people');
+        const state = await contactsProber.check();
+        return { ...state, lastRequested: Date.now() };
+    },
+};

package/packages/agent/src/services/permissions/probers/full-disk.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Full Disk Access prober.
+ *
+ * macOS has no public API to query Full Disk Access. The accepted
+ * heuristic is to attempt to read a file that lives behind FDA in the
+ * user's Library — `~/Library/Mail/V<N>/MailData/Accounts.plist` is a
+ * canonical FDA-only file.
+ *
+ * There's no API to request FDA either; the user must add the app
+ * manually in System Settings → Privacy & Security → Full Disk Access.
+ * `request()` opens that pane and returns the post-open status.
+ *
+ * Status semantics:
+ *   - granted: read succeeded
+ *   - denied:  read EACCES'd (FDA explicitly missing)
+ *   - not-determined: target file doesn't exist (user has no Mail.app
+ *     setup) — we can't tell. Fall back to a second probe against
+ *     ~/Library/Safari (also FDA-gated and almost always present).
+ */
+import type { Prober } from "../contracts.js";
+export declare const fullDiskProber: Prober;
+//# sourceMappingURL=full-disk.d.ts.map

package/packages/agent/src/services/permissions/probers/full-disk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"full-disk.d.ts","sourceRoot":"","sources":["../../../../../../../src/services/permissions/probers/full-disk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAOH,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,iBAAiB,CAAC;AA2C/D,eAAO,MAAM,cAAc,EAAE,MAmB5B,CAAC"}

package/packages/agent/src/services/permissions/probers/full-disk.js

@@ -0,0 +1,78 @@
+/**
+ * Full Disk Access prober.
+ *
+ * macOS has no public API to query Full Disk Access. The accepted
+ * heuristic is to attempt to read a file that lives behind FDA in the
+ * user's Library — `~/Library/Mail/V<N>/MailData/Accounts.plist` is a
+ * canonical FDA-only file.
+ *
+ * There's no API to request FDA either; the user must add the app
+ * manually in System Settings → Privacy & Security → Full Disk Access.
+ * `request()` opens that pane and returns the post-open status.
+ *
+ * Status semantics:
+ *   - granted: read succeeded
+ *   - denied:  read EACCES'd (FDA explicitly missing)
+ *   - not-determined: target file doesn't exist (user has no Mail.app
+ *     setup) — we can't tell. Fall back to a second probe against
+ *     ~/Library/Safari (also FDA-gated and almost always present).
+ */
+import { existsSync } from "node:fs";
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { buildState, IS_DARWIN, openPrivacyPane, platformUnsupportedState, } from "./_bridge.js";
+const ID = "full-disk";
+const FDA_PROBES = [
+    "Library/Mail",
+    "Library/Safari/Bookmarks.plist",
+    "Library/Application Support/com.apple.TCC/TCC.db",
+];
+async function probeFullDisk() {
+    for (const rel of FDA_PROBES) {
+        const target = path.join(os.homedir(), rel);
+        // Listing the directory or stat'ing the file is enough — macOS
+        // returns EACCES when FDA is missing.
+        try {
+            if (!existsSync(target))
+                continue;
+            const stat = await fs.stat(target);
+            if (stat.isDirectory()) {
+                await fs.readdir(target);
+            }
+            else {
+                // Open + close — read 0 bytes to avoid loading large files.
+                const fh = await fs.open(target, "r");
+                await fh.close();
+            }
+            return "granted";
+        }
+        catch (err) {
+            const code = err.code;
+            if (code === "EACCES" || code === "EPERM")
+                return "denied";
+            // Other errors (ENOENT after existsSync = race) — try next.
+        }
+    }
+    return "not-determined";
+}
+export const fullDiskProber = {
+    id: ID,
+    async check() {
+        if (!IS_DARWIN)
+            return platformUnsupportedState(ID);
+        const status = await probeFullDisk();
+        return buildState(ID, status, {
+            // FDA cannot be requested programmatically; canRequest=false
+            // even when we don't know.
+            canRequest: false,
+        });
+    },
+    async request({ reason: _reason }) {
+        if (!IS_DARWIN)
+            return platformUnsupportedState(ID);
+        await openPrivacyPane("AllFiles");
+        const state = await fullDiskProber.check();
+        return { ...state, lastRequested: Date.now() };
+    },
+};

package/packages/agent/src/services/permissions/probers/health.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Health prober.
+ *
+ * Native APIs (macOS, iOS):
+ *   - HKHealthStore.isHealthDataAvailable
+ *   - HKHealthStore.authorizationStatus(for:)
+ *
+ * HealthKit on macOS requires the `com.apple.developer.healthkit`
+ * entitlement signed into the app's provisioning profile. The Milady dev
+ * build is unsigned, so the entitlement isn't present and any HealthKit
+ * call would crash or return `notDetermined` indefinitely.
+ *
+ * This prober detects the missing entitlement and reports
+ * `restricted/entitlement_required` rather than attempting the call. When
+ * the production build ships with the entitlement, swap in an FFI to
+ * HKHealthStore.
+ *
+ * Sleep data lives behind this same permission (paired iPhone via
+ * HealthKit). There's no separate `sleep` permission.
+ */
+import type { Prober } from "../contracts.js";
+export declare const healthProber: Prober;
+//# sourceMappingURL=health.d.ts.map

package/packages/agent/src/services/permissions/probers/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../../../../../src/services/permissions/probers/health.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,iBAAiB,CAAC;AA0B/D,eAAO,MAAM,YAAY,EAAE,MAmC1B,CAAC"}

package/packages/agent/src/services/permissions/probers/health.js

@@ -0,0 +1,82 @@
+/**
+ * Health prober.
+ *
+ * Native APIs (macOS, iOS):
+ *   - HKHealthStore.isHealthDataAvailable
+ *   - HKHealthStore.authorizationStatus(for:)
+ *
+ * HealthKit on macOS requires the `com.apple.developer.healthkit`
+ * entitlement signed into the app's provisioning profile. The Milady dev
+ * build is unsigned, so the entitlement isn't present and any HealthKit
+ * call would crash or return `notDetermined` indefinitely.
+ *
+ * This prober detects the missing entitlement and reports
+ * `restricted/entitlement_required` rather than attempting the call. When
+ * the production build ships with the entitlement, swap in an FFI to
+ * HKHealthStore.
+ *
+ * Sleep data lives behind this same permission (paired iPhone via
+ * HealthKit). There's no separate `sleep` permission.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import path from "node:path";
+import { buildState, IS_DARWIN, platformUnsupportedState } from "./_bridge.js";
+const ID = "health";
+/**
+ * Best-effort check for the HealthKit entitlement in the running bundle's
+ * embedded provisioning profile. In dev (unsigned) the embedded profile is
+ * missing, so this returns false.
+ */
+function hasHealthKitEntitlement() {
+    try {
+        const macOsDir = path.dirname(path.resolve(process.execPath));
+        const contentsDir = path.resolve(macOsDir, "..");
+        const embedded = path.join(contentsDir, "embedded.provisionprofile");
+        if (!existsSync(embedded))
+            return false;
+        // The provisioning profile is a CMS-signed plist; a quick string
+        // scan for the entitlement key is enough — we never invoke the
+        // framework on a false positive.
+        const buf = readFileSync(embedded);
+        return buf.includes(Buffer.from("com.apple.developer.healthkit"));
+    }
+    catch {
+        return false;
+    }
+}
+export const healthProber = {
+    id: ID,
+    async check() {
+        if (!IS_DARWIN)
+            return platformUnsupportedState(ID);
+        if (!hasHealthKitEntitlement()) {
+            return buildState(ID, "restricted", {
+                canRequest: false,
+                restrictedReason: "entitlement_required",
+            });
+        }
+        // TODO: when we ship a HealthKit FFI, call
+        //   HKHealthStore.isHealthDataAvailable
+        //   HKHealthStore.authorizationStatus(for: type)
+        // and translate. For now we know we have the entitlement but no
+        // way to query — surface as not-determined so the registry can
+        // at least let callers request.
+        return buildState(ID, "not-determined", { canRequest: true });
+    },
+    async request({ reason: _reason }) {
+        if (!IS_DARWIN)
+            return platformUnsupportedState(ID);
+        if (!hasHealthKitEntitlement()) {
+            return buildState(ID, "restricted", {
+                canRequest: false,
+                restrictedReason: "entitlement_required",
+                lastRequested: Date.now(),
+            });
+        }
+        // Same TODO as check(). For now mirror the check result.
+        return buildState(ID, "not-determined", {
+            canRequest: true,
+            lastRequested: Date.now(),
+        });
+    },
+};

package/packages/agent/src/services/permissions/probers/index.d.ts

@@ -0,0 +1,27 @@
+/**
+ * All permission probers, indexed by id and as an array.
+ *
+ * Importing this module is side-effect free; the bridge dylib and any
+ * osascript shellouts are loaded lazily on first `check()`/`request()`.
+ */
+import type { PermissionId, Prober } from "../contracts.js";
+import { accessibilityProber } from "./accessibility.js";
+import { automationProber } from "./automation.js";
+import { calendarProber } from "./calendar.js";
+import { cameraProber } from "./camera.js";
+import { contactsProber } from "./contacts.js";
+import { fullDiskProber } from "./full-disk.js";
+import { healthProber } from "./health.js";
+import { locationProber } from "./location.js";
+import { microphoneProber } from "./microphone.js";
+import { notesProber } from "./notes.js";
+import { notificationsProber } from "./notifications.js";
+import { remindersProber } from "./reminders.js";
+import { screenRecordingProber } from "./screen-recording.js";
+import { screentimeProber } from "./screentime.js";
+import { shellProber } from "./shell.js";
+import { websiteBlockingProber } from "./website-blocking.js";
+export declare const ALL_PROBERS: readonly Prober[];
+export declare const PROBERS_BY_ID: ReadonlyMap<PermissionId, Prober>;
+export { accessibilityProber, automationProber, calendarProber, cameraProber, contactsProber, fullDiskProber, healthProber, locationProber, microphoneProber, notesProber, notificationsProber, remindersProber, screenRecordingProber, screentimeProber, shellProber, websiteBlockingProber, };
+//# sourceMappingURL=index.d.ts.map

package/packages/agent/src/services/permissions/probers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/services/permissions/probers/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,eAAO,MAAM,WAAW,EAAE,SAAS,MAAM,EAiBxC,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,WAAW,CAAC,YAAY,EAAE,MAAM,CAE3D,CAAC;AAEF,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,cAAc,EACd,cAAc,EACd,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,gBAAgB,EAChB,WAAW,EACX,qBAAqB,GACtB,CAAC"}

package/packages/agent/src/services/permissions/probers/index.js

@@ -0,0 +1,42 @@
+/**
+ * All permission probers, indexed by id and as an array.
+ *
+ * Importing this module is side-effect free; the bridge dylib and any
+ * osascript shellouts are loaded lazily on first `check()`/`request()`.
+ */
+import { accessibilityProber } from "./accessibility.js";
+import { automationProber } from "./automation.js";
+import { calendarProber } from "./calendar.js";
+import { cameraProber } from "./camera.js";
+import { contactsProber } from "./contacts.js";
+import { fullDiskProber } from "./full-disk.js";
+import { healthProber } from "./health.js";
+import { locationProber } from "./location.js";
+import { microphoneProber } from "./microphone.js";
+import { notesProber } from "./notes.js";
+import { notificationsProber } from "./notifications.js";
+import { remindersProber } from "./reminders.js";
+import { screenRecordingProber } from "./screen-recording.js";
+import { screentimeProber } from "./screentime.js";
+import { shellProber } from "./shell.js";
+import { websiteBlockingProber } from "./website-blocking.js";
+export const ALL_PROBERS = [
+    accessibilityProber,
+    automationProber,
+    calendarProber,
+    cameraProber,
+    contactsProber,
+    fullDiskProber,
+    healthProber,
+    locationProber,
+    microphoneProber,
+    notesProber,
+    notificationsProber,
+    remindersProber,
+    screenRecordingProber,
+    screentimeProber,
+    shellProber,
+    websiteBlockingProber,
+];
+export const PROBERS_BY_ID = new Map(ALL_PROBERS.map((p) => [p.id, p]));
+export { accessibilityProber, automationProber, calendarProber, cameraProber, contactsProber, fullDiskProber, healthProber, locationProber, microphoneProber, notesProber, notificationsProber, remindersProber, screenRecordingProber, screentimeProber, shellProber, websiteBlockingProber, };

package/packages/agent/src/services/permissions/probers/location.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Location prober.
+ *
+ * Native APIs (macOS):
+ *   - check:   CLLocationManager.authorizationStatus()
+ *   - request: CLLocationManager.requestAlwaysAuthorization()
+ *
+ * No FFI binding yet for CoreLocation. On dev (unsigned), CoreLocation
+ * works but the prompt only fires from a foreground GUI session. We probe
+ * via TCC.db (kTCCServiceLocation*) for check; for request we fall through
+ * to an open of the privacy pane since there's no headless API path.
+ *
+ * INTEGRATION TODO: ship a CoreLocation FFI for proper
+ * authorizationStatus() / requestWhenInUseAuthorization() support.
+ *
+ * On win32/linux, concrete browser geolocation state is supplied by the
+ * renderer fallback through navigator.permissions/geolocation.
+ */
+import type { Prober } from "../contracts.js";
+export declare const locationProber: Prober;
+//# sourceMappingURL=location.d.ts.map

package/packages/agent/src/services/permissions/probers/location.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"location.d.ts","sourceRoot":"","sources":["../../../../../../../src/services/permissions/probers/location.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAW/D,eAAO,MAAM,cAAc,EAAE,MA4B5B,CAAC"}

package/packages/agent/src/services/permissions/probers/location.js

@@ -0,0 +1,47 @@
+/**
+ * Location prober.
+ *
+ * Native APIs (macOS):
+ *   - check:   CLLocationManager.authorizationStatus()
+ *   - request: CLLocationManager.requestAlwaysAuthorization()
+ *
+ * No FFI binding yet for CoreLocation. On dev (unsigned), CoreLocation
+ * works but the prompt only fires from a foreground GUI session. We probe
+ * via TCC.db (kTCCServiceLocation*) for check; for request we fall through
+ * to an open of the privacy pane since there's no headless API path.
+ *
+ * INTEGRATION TODO: ship a CoreLocation FFI for proper
+ * authorizationStatus() / requestWhenInUseAuthorization() support.
+ *
+ * On win32/linux, concrete browser geolocation state is supplied by the
+ * renderer fallback through navigator.permissions/geolocation.
+ */
+import { buildState, IS_DARWIN, openPrivacyPane, queryTccStatus, resolveBundleId, } from "./_bridge.js";
+const ID = "location";
+export const locationProber = {
+    id: ID,
+    async check() {
+        if (!IS_DARWIN) {
+            // Renderer fallback handles navigator.permissions/geolocation.
+            return buildState(ID, "not-determined", { canRequest: true });
+        }
+        // CoreLocation on macOS uses a system-level daemon; the per-user
+        // TCC.db won't always have a row. Treat null as not-determined.
+        const tcc = await queryTccStatus("kTCCServiceLocation", resolveBundleId());
+        if (tcc === "granted")
+            return buildState(ID, "granted", { canRequest: false });
+        if (tcc === "denied")
+            return buildState(ID, "denied", { canRequest: false });
+        return buildState(ID, "not-determined", { canRequest: true });
+    },
+    async request({ reason: _reason }) {
+        if (!IS_DARWIN) {
+            return buildState(ID, "not-determined", { canRequest: true });
+        }
+        // No headless way to trigger CoreLocation prompt in unsigned dev.
+        // Best we can do: open the privacy pane.
+        await openPrivacyPane("LocationServices");
+        const state = await locationProber.check();
+        return { ...state, lastRequested: Date.now() };
+    },
+};

package/packages/agent/src/services/permissions/probers/microphone.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Microphone prober.
+ *
+ * Native APIs (macOS):
+ *   - check:   AVCaptureDevice.authorizationStatus(for: .audio)
+ *   - request: AVCaptureDevice.requestAccess(for: .audio)
+ *
+ * Cross-platform: on win32/linux the renderer supplies browser/device state
+ * through `navigator.permissions.query({ name: 'microphone' })` and
+ * getUserMedia.
+ */
+import type { Prober } from "../contracts.js";
+export declare const microphoneProber: Prober;
+//# sourceMappingURL=microphone.d.ts.map

package/packages/agent/src/services/permissions/probers/microphone.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"microphone.d.ts","sourceRoot":"","sources":["../../../../../../../src/services/permissions/probers/microphone.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAW/D,eAAO,MAAM,gBAAgB,EAAE,MA8B9B,CAAC"}

package/packages/agent/src/services/permissions/probers/microphone.js

@@ -0,0 +1,41 @@
+/**
+ * Microphone prober.
+ *
+ * Native APIs (macOS):
+ *   - check:   AVCaptureDevice.authorizationStatus(for: .audio)
+ *   - request: AVCaptureDevice.requestAccess(for: .audio)
+ *
+ * Cross-platform: on win32/linux the renderer supplies browser/device state
+ * through `navigator.permissions.query({ name: 'microphone' })` and
+ * getUserMedia.
+ */
+import { buildState, getNativeDylib, IS_DARWIN, mapAVAuthStatus, openPrivacyPane, } from "./_bridge.js";
+const ID = "microphone";
+export const microphoneProber = {
+    id: ID,
+    async check() {
+        if (!IS_DARWIN) {
+            // Renderer fallback handles navigator.permissions/getUserMedia.
+            return buildState(ID, "not-determined", { canRequest: true });
+        }
+        const lib = await getNativeDylib();
+        const status = mapAVAuthStatus(lib?.checkMicrophonePermission() ?? 0);
+        return buildState(ID, status, {
+            canRequest: status === "not-determined",
+        });
+    },
+    async request({ reason: _reason }) {
+        if (!IS_DARWIN) {
+            return buildState(ID, "not-determined", { canRequest: true });
+        }
+        const lib = await getNativeDylib();
+        lib?.requestMicrophonePermission();
+        const state = await microphoneProber.check();
+        // If the OS denied without prompting (TCC has prior denial), open
+        // the privacy pane so the user can toggle it on.
+        if (state.status === "denied") {
+            await openPrivacyPane("Microphone");
+        }
+        return { ...state, lastRequested: Date.now() };
+    },
+};

package/packages/agent/src/services/permissions/probers/notes.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Notes prober.
+ *
+ * Notes.app is automation-only — there's no NotesKit framework. We probe
+ * via TCC's automation service: kTCCServiceAppleEvents with the Notes
+ * bundle id (`com.apple.Notes`) as the indirect_object_identifier.
+ *
+ * The TCC.db row for Apple Events lives in the `access` table with a
+ * composite key, so the simple bundle-id query in `_bridge.queryTccStatus`
+ * doesn't quite fit. We fall back to AppleScript and treat a successful
+ * round-trip as "granted".
+ *
+ * NOTE: This prober is scoped to Notes.app specifically. The general
+ * `automation` prober probes a different target (System Events). We keep
+ * them separate because the user can grant one without the other.
+ */
+import type { Prober } from "../contracts.js";
+export declare const notesProber: Prober;
+//# sourceMappingURL=notes.d.ts.map

package/packages/agent/src/services/permissions/probers/notes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notes.d.ts","sourceRoot":"","sources":["../../../../../../../src/services/permissions/probers/notes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,iBAAiB,CAAC;AA+B/D,eAAO,MAAM,WAAW,EAAE,MAkBzB,CAAC"}