@elizaos/agent 2.0.0-beta.1 → 2.0.11-beta.5

package/services/permissions/probers/calendar.js

@@ -0,0 +1,42 @@
+/**
+ * Calendar prober.
+ */
+import { buildState, getNativeDylib, IS_DARWIN, mapNativePrivacyAuthStatus, openPrivacyPane, platformUnsupportedState, queryTccStatus, resolveBundleId, } from "./_bridge.js";
+const ID = "calendar";
+const CALENDAR_TCC_SERVICE = "kTCCServiceCalendar";
+function stateFromNative(value) {
+    const status = mapNativePrivacyAuthStatus(value);
+    return buildState(ID, status, {
+        canRequest: status === "not-determined" || value === 4,
+        restrictedReason: status === "restricted" ? "os_policy" : undefined,
+    });
+}
+export const calendarProber = {
+    id: ID,
+    async check() {
+        if (!IS_DARWIN)
+            return platformUnsupportedState(ID);
+        const native = await getNativeDylib();
+        if (native) {
+            return stateFromNative(native.checkCalendarPermission());
+        }
+        const tcc = await queryTccStatus(CALENDAR_TCC_SERVICE, resolveBundleId());
+        if (tcc === "granted")
+            return buildState(ID, "granted", { canRequest: false });
+        if (tcc === "denied")
+            return buildState(ID, "denied", { canRequest: false });
+        return buildState(ID, "not-determined", { canRequest: true });
+    },
+    async request({ reason: _reason }) {
+        if (!IS_DARWIN)
+            return platformUnsupportedState(ID);
+        const native = await getNativeDylib();
+        if (native) {
+            const state = stateFromNative(native.requestCalendarPermission());
+            return { ...state, lastRequested: Date.now() };
+        }
+        await openPrivacyPane("Calendars");
+        const state = await calendarProber.check();
+        return { ...state, lastRequested: Date.now() };
+    },
+};

package/services/permissions/probers/camera.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Camera prober.
+ *
+ * Native APIs (macOS):
+ *   - check:   AVCaptureDevice.authorizationStatus(for: .video)
+ *   - request: AVCaptureDevice.requestAccess(for: .video)
+ *
+ * On win32/linux, the renderer supplies the concrete browser/device state
+ * through navigator.permissions/getUserMedia and writes it back through the
+ * shared permission routes.
+ */
+import type { Prober } from "../contracts.js";
+export declare const cameraProber: Prober;
+//# sourceMappingURL=camera.d.ts.map

package/services/permissions/probers/camera.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"camera.d.ts","sourceRoot":"","sources":["../../../../src/services/permissions/probers/camera.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAW/D,eAAO,MAAM,YAAY,EAAE,MA2B1B,CAAC"}

package/services/permissions/probers/camera.js

@@ -0,0 +1,39 @@
+/**
+ * Camera prober.
+ *
+ * Native APIs (macOS):
+ *   - check:   AVCaptureDevice.authorizationStatus(for: .video)
+ *   - request: AVCaptureDevice.requestAccess(for: .video)
+ *
+ * On win32/linux, the renderer supplies the concrete browser/device state
+ * through navigator.permissions/getUserMedia and writes it back through the
+ * shared permission routes.
+ */
+import { buildState, getNativeDylib, IS_DARWIN, mapAVAuthStatus, openPrivacyPane, } from "./_bridge.js";
+const ID = "camera";
+export const cameraProber = {
+    id: ID,
+    async check() {
+        if (!IS_DARWIN) {
+            // Renderer fallback handles navigator.permissions/getUserMedia.
+            return buildState(ID, "not-determined", { canRequest: true });
+        }
+        const lib = await getNativeDylib();
+        const status = mapAVAuthStatus(lib?.checkCameraPermission() ?? 0);
+        return buildState(ID, status, {
+            canRequest: status === "not-determined",
+        });
+    },
+    async request({ reason: _reason }) {
+        if (!IS_DARWIN) {
+            return buildState(ID, "not-determined", { canRequest: true });
+        }
+        const lib = await getNativeDylib();
+        lib?.requestCameraPermission();
+        const state = await cameraProber.check();
+        if (state.status === "denied") {
+            await openPrivacyPane("Camera");
+        }
+        return { ...state, lastRequested: Date.now() };
+    },
+};

package/services/permissions/probers/contacts.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Contacts prober.
+ *
+ * iMessage contact resolution and CRUD use CNContactStore, so the canonical
+ * permission is the native Contacts privacy grant, not Automation.
+ */
+import type { Prober } from "../contracts.js";
+export declare const contactsProber: Prober;
+//# sourceMappingURL=contacts.d.ts.map

package/services/permissions/probers/contacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contacts.d.ts","sourceRoot":"","sources":["../../../../src/services/permissions/probers/contacts.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAuB/D,eAAO,MAAM,cAAc,EAAE,MA8B5B,CAAC"}

package/services/permissions/probers/contacts.js

@@ -0,0 +1,44 @@
+/**
+ * Contacts prober.
+ *
+ * iMessage contact resolution and CRUD use CNContactStore, so the canonical
+ * permission is the native Contacts privacy grant, not Automation.
+ */
+import { buildState, getNativeDylib, IS_DARWIN, mapNativePrivacyAuthStatus, openPrivacyPane, platformUnsupportedState, queryTccStatus, resolveBundleId, } from "./_bridge.js";
+const ID = "contacts";
+const TCC_SERVICE = "kTCCServiceAddressBook";
+function stateFromNative(value) {
+    const status = mapNativePrivacyAuthStatus(value);
+    return buildState(ID, status, {
+        canRequest: status === "not-determined",
+        restrictedReason: status === "restricted" ? "os_policy" : undefined,
+    });
+}
+export const contactsProber = {
+    id: ID,
+    async check() {
+        if (!IS_DARWIN)
+            return platformUnsupportedState(ID);
+        const lib = await getNativeDylib();
+        if (lib)
+            return stateFromNative(lib.checkContactsPermission());
+        const tcc = await queryTccStatus(TCC_SERVICE, resolveBundleId());
+        if (tcc === "granted")
+            return buildState(ID, "granted", { canRequest: false });
+        if (tcc === "denied")
+            return buildState(ID, "denied", { canRequest: false });
+        return buildState(ID, "not-determined", { canRequest: true });
+    },
+    async request({ reason: _reason }) {
+        if (!IS_DARWIN)
+            return platformUnsupportedState(ID);
+        const lib = await getNativeDylib();
+        if (lib) {
+            const state = stateFromNative(lib.requestContactsPermission());
+            return { ...state, lastRequested: Date.now() };
+        }
+        await openPrivacyPane("Contacts");
+        const state = await contactsProber.check();
+        return { ...state, lastRequested: Date.now() };
+    },
+};

package/services/permissions/probers/full-disk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"full-disk.d.ts","sourceRoot":"","sources":["../../../../src/services/permissions/probers/full-disk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAOH,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,iBAAiB,CAAC;AA2C/D,eAAO,MAAM,cAAc,EAAE,MAmB5B,CAAC"}

package/services/permissions/probers/health.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Health prober.
+ *
+ * Native APIs (macOS, iOS):
+ *   - HKHealthStore.isHealthDataAvailable
+ *   - HKHealthStore.authorizationStatus(for:)
+ *
+ * HealthKit on macOS requires the `com.apple.developer.healthkit`
+ * entitlement signed into the app's provisioning profile. The Eliza dev
+ * build is unsigned, so the entitlement isn't present and any HealthKit
+ * call would crash or return `notDetermined` indefinitely.
+ *
+ * This prober detects the missing entitlement and reports
+ * `restricted/entitlement_required` rather than attempting the call. When
+ * the production build ships with the entitlement, swap in an FFI to
+ * HKHealthStore.
+ *
+ * Sleep data lives behind this same permission (paired iPhone via
+ * HealthKit). There's no separate `sleep` permission.
+ */
+import type { Prober } from "../contracts.js";
+export declare const healthProber: Prober;
+//# sourceMappingURL=health.d.ts.map

package/services/permissions/probers/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../../src/services/permissions/probers/health.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAe/D,eAAO,MAAM,YAAY,EAAE,MAiC1B,CAAC"}

package/services/permissions/probers/health.js

@@ -0,0 +1,60 @@
+/**
+ * Health prober.
+ *
+ * Native APIs (macOS, iOS):
+ *   - HKHealthStore.isHealthDataAvailable
+ *   - HKHealthStore.authorizationStatus(for:)
+ *
+ * HealthKit on macOS requires the `com.apple.developer.healthkit`
+ * entitlement signed into the app's provisioning profile. The Eliza dev
+ * build is unsigned, so the entitlement isn't present and any HealthKit
+ * call would crash or return `notDetermined` indefinitely.
+ *
+ * This prober detects the missing entitlement and reports
+ * `restricted/entitlement_required` rather than attempting the call. When
+ * the production build ships with the entitlement, swap in an FFI to
+ * HKHealthStore.
+ *
+ * Sleep data lives behind this same permission (paired iPhone via
+ * HealthKit). There's no separate `sleep` permission.
+ */
+import { buildState, hasEmbeddedProvisioningEntitlement, IS_DARWIN, platformUnsupportedState, } from "./_bridge.js";
+const ID = "health";
+const HEALTHKIT_ENTITLEMENT = "com.apple.developer.healthkit";
+function hasHealthKitEntitlement() {
+    return hasEmbeddedProvisioningEntitlement(HEALTHKIT_ENTITLEMENT);
+}
+export const healthProber = {
+    id: ID,
+    async check() {
+        if (!IS_DARWIN)
+            return platformUnsupportedState(ID);
+        if (!hasHealthKitEntitlement()) {
+            return buildState(ID, "restricted", {
+                canRequest: false,
+                restrictedReason: "entitlement_required",
+            });
+        }
+        // Native bridge boundary: a signed build with the HealthKit
+        // entitlement can query HKHealthStore availability and authorization
+        // here. Until that bridge is present, surface not-determined so the
+        // registry can at least let callers request.
+        return buildState(ID, "not-determined", { canRequest: true });
+    },
+    async request({ reason: _reason }) {
+        if (!IS_DARWIN)
+            return platformUnsupportedState(ID);
+        if (!hasHealthKitEntitlement()) {
+            return buildState(ID, "restricted", {
+                canRequest: false,
+                restrictedReason: "entitlement_required",
+                lastRequested: Date.now(),
+            });
+        }
+        // Same native bridge boundary as check(); mirror the requestable state.
+        return buildState(ID, "not-determined", {
+            canRequest: true,
+            lastRequested: Date.now(),
+        });
+    },
+};

package/services/permissions/probers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/services/permissions/probers/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,eAAO,MAAM,WAAW,EAAE,SAAS,MAAM,EAkBxC,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,WAAW,CAAC,YAAY,EAAE,MAAM,CAE3D,CAAC;AAEF,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,cAAc,EACd,cAAc,EACd,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,gBAAgB,EAChB,WAAW,EACX,qBAAqB,GACtB,CAAC"}

package/services/permissions/probers/index.js

@@ -0,0 +1,44 @@
+/**
+ * All permission probers, indexed by id and as an array.
+ *
+ * Importing this module is side-effect free; the bridge dylib and any
+ * osascript shellouts are loaded lazily on first `check()`/`request()`.
+ */
+import { accessibilityProber } from "./accessibility.js";
+import { automationProber } from "./automation.js";
+import { calendarProber } from "./calendar.js";
+import { cameraProber } from "./camera.js";
+import { contactsProber } from "./contacts.js";
+import { fullDiskProber } from "./full-disk.js";
+import { healthProber } from "./health.js";
+import { locationProber } from "./location.js";
+import { microphoneProber } from "./microphone.js";
+import { nativePlatformProbers } from "./native-platform.js";
+import { notesProber } from "./notes.js";
+import { notificationsProber } from "./notifications.js";
+import { remindersProber } from "./reminders.js";
+import { screenRecordingProber } from "./screen-recording.js";
+import { screentimeProber } from "./screentime.js";
+import { shellProber } from "./shell.js";
+import { websiteBlockingProber } from "./website-blocking.js";
+export const ALL_PROBERS = [
+    accessibilityProber,
+    automationProber,
+    calendarProber,
+    cameraProber,
+    contactsProber,
+    fullDiskProber,
+    healthProber,
+    locationProber,
+    microphoneProber,
+    ...nativePlatformProbers,
+    notesProber,
+    notificationsProber,
+    remindersProber,
+    screenRecordingProber,
+    screentimeProber,
+    shellProber,
+    websiteBlockingProber,
+];
+export const PROBERS_BY_ID = new Map(ALL_PROBERS.map((p) => [p.id, p]));
+export { accessibilityProber, automationProber, calendarProber, cameraProber, contactsProber, fullDiskProber, healthProber, locationProber, microphoneProber, notesProber, notificationsProber, remindersProber, screenRecordingProber, screentimeProber, shellProber, websiteBlockingProber, };

package/services/permissions/probers/location.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Location prober.
+ *
+ * Native APIs (macOS):
+ *   - check:   CLLocationManager.authorizationStatus()
+ *   - request: CLLocationManager.requestWhenInUseAuthorization()
+ *
+ * On win32/linux, concrete browser geolocation state is supplied by the
+ * renderer fallback through navigator.permissions/geolocation.
+ */
+import type { Prober } from "../contracts.js";
+export declare const locationProber: Prober;
+//# sourceMappingURL=location.d.ts.map

package/services/permissions/probers/location.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"location.d.ts","sourceRoot":"","sources":["../../../../src/services/permissions/probers/location.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAyB/D,eAAO,MAAM,cAAc,EAAE,MAmC5B,CAAC"}

package/services/permissions/probers/location.js

@@ -0,0 +1,54 @@
+/**
+ * Location prober.
+ *
+ * Native APIs (macOS):
+ *   - check:   CLLocationManager.authorizationStatus()
+ *   - request: CLLocationManager.requestWhenInUseAuthorization()
+ *
+ * On win32/linux, concrete browser geolocation state is supplied by the
+ * renderer fallback through navigator.permissions/geolocation.
+ */
+import { buildState, getNativeDylib, IS_DARWIN, mapNativePrivacyAuthStatus, openPrivacyPane, queryTccStatus, resolveBundleId, } from "./_bridge.js";
+const ID = "location";
+function stateFromNative(value, lastRequested) {
+    const status = mapNativePrivacyAuthStatus(value);
+    return buildState(ID, status, {
+        canRequest: status === "not-determined",
+        lastRequested,
+        restrictedReason: status === "restricted" ? "os_policy" : undefined,
+    });
+}
+export const locationProber = {
+    id: ID,
+    async check() {
+        if (!IS_DARWIN) {
+            // Renderer fallback handles navigator.permissions/geolocation.
+            return buildState(ID, "not-determined", { canRequest: true });
+        }
+        const native = await getNativeDylib();
+        if (native) {
+            return stateFromNative(native.checkLocationPermission());
+        }
+        // CoreLocation on macOS uses a system-level daemon; the per-user
+        // TCC.db won't always have a row. Treat null as not-determined.
+        const tcc = await queryTccStatus("kTCCServiceLocation", resolveBundleId());
+        if (tcc === "granted")
+            return buildState(ID, "granted", { canRequest: false });
+        if (tcc === "denied")
+            return buildState(ID, "denied", { canRequest: false });
+        return buildState(ID, "not-determined", { canRequest: true });
+    },
+    async request({ reason: _reason }) {
+        if (!IS_DARWIN) {
+            return buildState(ID, "not-determined", { canRequest: true });
+        }
+        const lastRequested = Date.now();
+        const native = await getNativeDylib();
+        if (native) {
+            return stateFromNative(native.requestLocationPermission(), lastRequested);
+        }
+        await openPrivacyPane("LocationServices");
+        const state = await locationProber.check();
+        return { ...state, lastRequested };
+    },
+};

package/services/permissions/probers/microphone.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Microphone prober.
+ *
+ * Native APIs (macOS):
+ *   - check:   AVCaptureDevice.authorizationStatus(for: .audio)
+ *   - request: AVCaptureDevice.requestAccess(for: .audio)
+ *
+ * Cross-platform: on win32/linux the renderer supplies browser/device state
+ * through `navigator.permissions.query({ name: 'microphone' })` and
+ * getUserMedia.
+ */
+import type { Prober } from "../contracts.js";
+export declare const microphoneProber: Prober;
+//# sourceMappingURL=microphone.d.ts.map

package/services/permissions/probers/microphone.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"microphone.d.ts","sourceRoot":"","sources":["../../../../src/services/permissions/probers/microphone.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAW/D,eAAO,MAAM,gBAAgB,EAAE,MA8B9B,CAAC"}

package/services/permissions/probers/microphone.js

@@ -0,0 +1,41 @@
+/**
+ * Microphone prober.
+ *
+ * Native APIs (macOS):
+ *   - check:   AVCaptureDevice.authorizationStatus(for: .audio)
+ *   - request: AVCaptureDevice.requestAccess(for: .audio)
+ *
+ * Cross-platform: on win32/linux the renderer supplies browser/device state
+ * through `navigator.permissions.query({ name: 'microphone' })` and
+ * getUserMedia.
+ */
+import { buildState, getNativeDylib, IS_DARWIN, mapAVAuthStatus, openPrivacyPane, } from "./_bridge.js";
+const ID = "microphone";
+export const microphoneProber = {
+    id: ID,
+    async check() {
+        if (!IS_DARWIN) {
+            // Renderer fallback handles navigator.permissions/getUserMedia.
+            return buildState(ID, "not-determined", { canRequest: true });
+        }
+        const lib = await getNativeDylib();
+        const status = mapAVAuthStatus(lib?.checkMicrophonePermission() ?? 0);
+        return buildState(ID, status, {
+            canRequest: status === "not-determined",
+        });
+    },
+    async request({ reason: _reason }) {
+        if (!IS_DARWIN) {
+            return buildState(ID, "not-determined", { canRequest: true });
+        }
+        const lib = await getNativeDylib();
+        lib?.requestMicrophonePermission();
+        const state = await microphoneProber.check();
+        // If the OS denied without prompting (TCC has prior denial), open
+        // the privacy pane so the user can toggle it on.
+        if (state.status === "denied") {
+            await openPrivacyPane("Microphone");
+        }
+        return { ...state, lastRequested: Date.now() };
+    },
+};

package/services/permissions/probers/native-platform.d.ts

@@ -0,0 +1,3 @@
+import type { Prober } from "../contracts.js";
+export declare const nativePlatformProbers: readonly Prober[];
+//# sourceMappingURL=native-platform.d.ts.map

package/services/permissions/probers/native-platform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-platform.d.ts","sourceRoot":"","sources":["../../../../src/services/permissions/probers/native-platform.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAgB,MAAM,EAAE,MAAM,iBAAiB,CAAC;AA8B5D,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EACJ,CAAC"}

package/services/permissions/probers/native-platform.js

@@ -0,0 +1,27 @@
+import { platformUnsupportedState } from "./_bridge.js";
+const NATIVE_PLATFORM_IDS = [
+    "speech-recognition",
+    "photos",
+    "phone",
+    "messages",
+    "wifi",
+    "bluetooth",
+    "app-blocking",
+    "usage-access",
+    "overlay",
+    "write-settings",
+    "local-network",
+    "battery-optimization",
+];
+function nativePlatformProber(id) {
+    return {
+        id,
+        async check() {
+            return platformUnsupportedState(id);
+        },
+        async request() {
+            return platformUnsupportedState(id);
+        },
+    };
+}
+export const nativePlatformProbers = NATIVE_PLATFORM_IDS.map(nativePlatformProber);

package/services/permissions/probers/notes.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Notes prober.
+ *
+ * Notes.app is automation-only — there's no NotesKit framework. We probe
+ * via TCC's automation service: kTCCServiceAppleEvents with the Notes
+ * bundle id (`com.apple.Notes`) as the indirect_object_identifier.
+ *
+ * The TCC.db row for Apple Events lives in the `access` table with a
+ * composite key, so we use `_bridge.queryAppleEventsTccStatus` for read-only
+ * checks and reserve AppleScript for explicit request() calls.
+ *
+ * NOTE: This prober is scoped to Notes.app specifically. The general
+ * `automation` prober probes a different target (System Events). We keep
+ * them separate because the user can grant one without the other.
+ */
+import type { Prober } from "../contracts.js";
+export declare const notesProber: Prober;
+//# sourceMappingURL=notes.d.ts.map

package/services/permissions/probers/notes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notes.d.ts","sourceRoot":"","sources":["../../../../src/services/permissions/probers/notes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAoB/D,eAAO,MAAM,WAAW,EAAE,MAqBzB,CAAC"}

package/services/permissions/probers/notes.js

@@ -0,0 +1,44 @@
+/**
+ * Notes prober.
+ *
+ * Notes.app is automation-only — there's no NotesKit framework. We probe
+ * via TCC's automation service: kTCCServiceAppleEvents with the Notes
+ * bundle id (`com.apple.Notes`) as the indirect_object_identifier.
+ *
+ * The TCC.db row for Apple Events lives in the `access` table with a
+ * composite key, so we use `_bridge.queryAppleEventsTccStatus` for read-only
+ * checks and reserve AppleScript for explicit request() calls.
+ *
+ * NOTE: This prober is scoped to Notes.app specifically. The general
+ * `automation` prober probes a different target (System Events). We keep
+ * them separate because the user can grant one without the other.
+ */
+import { buildState, IS_DARWIN, platformUnsupportedState, queryAppleEventsTccStatus, runOsascript, } from "./_bridge.js";
+const ID = "notes";
+const NOTES_BUNDLE_ID = "com.apple.Notes";
+const NOTES_AUTOMATION_REASON = "Notes access uses macOS Automation permission for Notes.app.";
+async function checkNotesAccess() {
+    return (await queryAppleEventsTccStatus(NOTES_BUNDLE_ID)) ?? "not-determined";
+}
+export const notesProber = {
+    id: ID,
+    async check() {
+        if (!IS_DARWIN)
+            return platformUnsupportedState(ID);
+        const status = await checkNotesAccess();
+        return buildState(ID, status, {
+            canRequest: status === "not-determined",
+            reason: status === "granted" ? undefined : NOTES_AUTOMATION_REASON,
+        });
+    },
+    async request({ reason: _reason }) {
+        if (!IS_DARWIN)
+            return platformUnsupportedState(ID);
+        await runOsascript('tell application "Notes" to count of folders');
+        const status = await checkNotesAccess();
+        return buildState(ID, status, {
+            canRequest: status === "not-determined",
+            lastRequested: Date.now(),
+        });
+    },
+};

package/services/permissions/probers/notifications.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Notifications prober.
+ *
+ * Native APIs (macOS):
+ *   - check:   UNUserNotificationCenter.current().getNotificationSettings { settings.authorizationStatus }
+ *   - request: UNUserNotificationCenter.current().requestAuthorization(options:)
+ *
+ * UNUserNotificationCenter requires the running binary to be a properly
+ * signed app bundle with `NSUserNotificationAlertStyle` in Info.plist. In
+ * unsigned dev, the API may keep returning notDetermined. That is still
+ * preferable to prompting during check().
+ *
+ * On win32/linux, concrete notification state is supplied by the renderer
+ * fallback through Notification.permission.
+ */
+import type { Prober } from "../contracts.js";
+export declare const notificationsProber: Prober;
+//# sourceMappingURL=notifications.d.ts.map

package/services/permissions/probers/notifications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.d.ts","sourceRoot":"","sources":["../../../../src/services/permissions/probers/notifications.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAuB/D,eAAO,MAAM,mBAAmB,EAAE,MA+BjC,CAAC"}

package/services/permissions/probers/notifications.js

@@ -0,0 +1,53 @@
+/**
+ * Notifications prober.
+ *
+ * Native APIs (macOS):
+ *   - check:   UNUserNotificationCenter.current().getNotificationSettings { settings.authorizationStatus }
+ *   - request: UNUserNotificationCenter.current().requestAuthorization(options:)
+ *
+ * UNUserNotificationCenter requires the running binary to be a properly
+ * signed app bundle with `NSUserNotificationAlertStyle` in Info.plist. In
+ * unsigned dev, the API may keep returning notDetermined. That is still
+ * preferable to prompting during check().
+ *
+ * On win32/linux, concrete notification state is supplied by the renderer
+ * fallback through Notification.permission.
+ */
+import { buildState, getNativeDylib, IS_DARWIN, mapUNAuthStatus, runOsascript, } from "./_bridge.js";
+const ID = "notifications";
+function stateFromNativeStatus(status, lastRequested) {
+    const mapped = mapUNAuthStatus(status ?? 0);
+    return buildState(ID, mapped, {
+        canRequest: mapped === "not-determined",
+        lastRequested,
+        restrictedReason: mapped === "restricted" ? "os_policy" : undefined,
+    });
+}
+export const notificationsProber = {
+    id: ID,
+    async check() {
+        if (!IS_DARWIN) {
+            // Renderer fallback handles Notification.permission.
+            return buildState(ID, "not-determined", { canRequest: true });
+        }
+        const lib = await getNativeDylib();
+        if (!lib)
+            return buildState(ID, "not-determined", { canRequest: true });
+        return stateFromNativeStatus(lib.checkNotificationPermission());
+    },
+    async request({ reason: _reason }) {
+        if (!IS_DARWIN) {
+            return buildState(ID, "not-determined", { canRequest: true });
+        }
+        const lastRequested = Date.now();
+        const lib = await getNativeDylib();
+        if (lib) {
+            return stateFromNativeStatus(lib.requestNotificationPermission(), lastRequested);
+        }
+        await runOsascript('display notification "" with title ""');
+        return buildState(ID, "not-determined", {
+            canRequest: true,
+            lastRequested,
+        });
+    },
+};

package/services/permissions/probers/reminders.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Reminders prober.
+ *
+ * LifeOps creates/updates/deletes Apple Reminders through EventKit, so the
+ * canonical permission is the native Reminders privacy grant, not Automation.
+ */
+import type { Prober } from "../contracts.js";
+export declare const remindersProber: Prober;
+//# sourceMappingURL=reminders.d.ts.map

package/services/permissions/probers/reminders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reminders.d.ts","sourceRoot":"","sources":["../../../../src/services/permissions/probers/reminders.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAuB/D,eAAO,MAAM,eAAe,EAAE,MA8B7B,CAAC"}