@hellolynk-ai/codex-plugin 0.2.102-macos.1 → 0.2.103

package/plugins/hellolynk-codex/server/native-conversation-directory.mjs

@@ -1,33 +1,33 @@
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-
-// The desktop's metadata index, read-only. Never read rollout bodies, previews,
-// first_user_message or model summaries. Native read_thread still decides
-// whether a selected conversation can actually receive a reminder.
-export async function readCodexConversationDirectory({ home = process.env.CODEX_HOME || path.join(os.homedir(), ".codex"),
-  callerThreadId, projects = [], openDatabase } = {}) {
-  const names = (await fs.readdir(home)).filter(name => /^state_\d+\.sqlite$/.test(name))
-    .sort((a, b) => Number(b.match(/\d+/)[0]) - Number(a.match(/\d+/)[0]));
-  if (!names.length) throw new Error("codex_native_directory_unavailable");
-  const Database = openDatabase || ((await import("node:sqlite")).DatabaseSync);
-  const db = new Database(path.join(home, names[0]), { readOnly: true });
-  try {
-    const columns = new Set(db.prepare("PRAGMA table_info(threads)").all().map(row => row.name));
-    if (!["id", "title", "cwd", "source", "archived", "creator_account_id"].every(key => columns.has(key)))
-      throw new Error("codex_native_directory_schema_unavailable");
-    const owner = db.prepare("SELECT creator_account_id FROM threads WHERE id = ?").get(callerThreadId);
-    if (!owner) throw new Error("codex_native_directory_owner_unavailable");
-    const optional = ["name", "project_id"].filter(key => columns.has(key));
-    const rows = db.prepare(`SELECT id, cwd, archived${optional.length ? ", " + optional.join(", ") : ""}
-      FROM threads WHERE creator_account_id IS ? AND source IN ('vscode','cli','exec','appServer')`).all(owner.creator_account_id);
-    const byProject = new Map(projects.map(project => [project.id || project.projectId, project.name || project.title]));
-    return { coverage: "complete", exactTargetSupported: true, conversations: rows.map(row => ({
-      // In the native index, title can be the complete first user message.
-      // Only the explicit conversation name is metadata safe to export.
-      targetConversationId: row.id, title: row.name || row.id,
-      project: byProject.get(row.project_id) || path.win32.basename(row.cwd || "") || path.posix.basename(row.cwd || ""),
-      state: row.archived ? "archived" : "notLoaded",
-    })) };
-  } finally { db.close(); }
-}
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+
+// The desktop's metadata index, read-only. Never read rollout bodies, previews,
+// first_user_message or model summaries. Native read_thread still decides
+// whether a selected conversation can actually receive a reminder.
+export async function readCodexConversationDirectory({ home = process.env.CODEX_HOME || path.join(os.homedir(), ".codex"),
+  callerThreadId, projects = [], openDatabase } = {}) {
+  const names = (await fs.readdir(home)).filter(name => /^state_\d+\.sqlite$/.test(name))
+    .sort((a, b) => Number(b.match(/\d+/)[0]) - Number(a.match(/\d+/)[0]));
+  if (!names.length) throw new Error("codex_native_directory_unavailable");
+  const Database = openDatabase || ((await import("node:sqlite")).DatabaseSync);
+  const db = new Database(path.join(home, names[0]), { readOnly: true });
+  try {
+    const columns = new Set(db.prepare("PRAGMA table_info(threads)").all().map(row => row.name));
+    if (!["id", "title", "cwd", "source", "archived", "creator_account_id"].every(key => columns.has(key)))
+      throw new Error("codex_native_directory_schema_unavailable");
+    const owner = db.prepare("SELECT creator_account_id FROM threads WHERE id = ?").get(callerThreadId);
+    if (!owner) throw new Error("codex_native_directory_owner_unavailable");
+    const optional = ["name", "project_id"].filter(key => columns.has(key));
+    const rows = db.prepare(`SELECT id, cwd, archived${optional.length ? ", " + optional.join(", ") : ""}
+      FROM threads WHERE creator_account_id IS ? AND source IN ('vscode','cli','exec','appServer')`).all(owner.creator_account_id);
+    const byProject = new Map(projects.map(project => [project.id || project.projectId, project.name || project.title]));
+    return { coverage: "complete", exactTargetSupported: true, conversations: rows.map(row => ({
+      // In the native index, title can be the complete first user message.
+      // Only the explicit conversation name is metadata safe to export.
+      targetConversationId: row.id, title: row.name || row.id,
+      project: byProject.get(row.project_id) || path.win32.basename(row.cwd || "") || path.posix.basename(row.cwd || ""),
+      state: row.archived ? "archived" : "notLoaded",
+    })) };
+  } finally { db.close(); }
+}

package/plugins/hellolynk-codex/server/workbench-runtime.mjs

@@ -1,18 +1,18 @@
-import fs from "node:fs/promises";
-import { createHash } from "node:crypto";
-import { fileURLToPath } from "node:url";
-
-// Codex uses resource metadata before the app can report its intrinsic size.
-// Keep a usable frame when its initial container limit is echoed by the app.
-export const CODEX_WORKBENCH_RESOURCE_META = Object.freeze({
-  ui: Object.freeze({ prefersBorder: true, domain: "hellolynk.local" }),
-  "openai/widgetPrefersBorder": true,
-  "openai/widgetHeightHint": 680,
-  "openai/widgetMinFrameHeight": 680,
-});
-
-const CODEX_RESOURCE_URI_SEED = "ui://hellolynk/workbench-codex-pending.html";
-const OUTPUT_SHA256_RE = /^[a-f0-9]{64}$/;
+import fs from "node:fs/promises";
+import { createHash } from "node:crypto";
+import { fileURLToPath } from "node:url";
+
+// Codex uses resource metadata before the app can report its intrinsic size.
+// Keep a usable frame when its initial container limit is echoed by the app.
+export const CODEX_WORKBENCH_RESOURCE_META = Object.freeze({
+  ui: Object.freeze({ prefersBorder: true, domain: "hellolynk.local" }),
+  "openai/widgetPrefersBorder": true,
+  "openai/widgetHeightHint": 680,
+  "openai/widgetMinFrameHeight": 680,
+});
+
+const CODEX_RESOURCE_URI_SEED = "ui://hellolynk/workbench-codex-pending.html";
+const OUTPUT_SHA256_RE = /^[a-f0-9]{64}$/;
 const SHARED_ROOTS = Object.freeze([
   new URL("../runtime/workbench/", import.meta.url),
   new URL("../../../clients/workbench/", import.meta.url),
@@ -38,14 +38,14 @@ export async function bootstrapCodexWorkbenchRuntime(options = {}) {
     || typeof shared.validateWorkbenchCommandResult !== "function") {
     throw codeError("workbench_codex_shared_bootstrap_invalid");
   }
-  const explicitResourceUri = options.resourceUri == null ? null : options.resourceUri;
-  const bootstrapped = await shared.bootstrapWorkbenchCandidate("codex", {
-    resourceUri: explicitResourceUri || CODEX_RESOURCE_URI_SEED,
-  });
-  const resourceUri = explicitResourceUri || codexWorkbenchResourceUri(bootstrapped);
-  const candidate = resourceUri === bootstrapped.resourceUri
-    ? bootstrapped
-    : Object.freeze({ ...bootstrapped, resourceUri });
+  const explicitResourceUri = options.resourceUri == null ? null : options.resourceUri;
+  const bootstrapped = await shared.bootstrapWorkbenchCandidate("codex", {
+    resourceUri: explicitResourceUri || CODEX_RESOURCE_URI_SEED,
+  });
+  const resourceUri = explicitResourceUri || codexWorkbenchResourceUri(bootstrapped);
+  const candidate = resourceUri === bootstrapped.resourceUri
+    ? bootstrapped
+    : Object.freeze({ ...bootstrapped, resourceUri });
   if (options.adapter === undefined) return candidate;
   if (typeof options.adapter?.readWorkbenchSnapshot !== "function") {
     throw codeError("workbench_codex_rpc_adapter_invalid");
@@ -58,9 +58,9 @@ export async function bootstrapCodexWorkbenchRuntime(options = {}) {
   const readOnlyCandidate = {
     resourceUri: candidate.resourceUri,
     html: candidate.html,
-    readSnapshot: (input = {}) => options.adapter.readWorkbenchSnapshot(input),
-    ...(typeof options.adapter.readWorkbenchChanges === "function"
-      ? { readChanges: (input) => options.adapter.readWorkbenchChanges(input) } : {}),
+    readSnapshot: (input = {}) => options.adapter.readWorkbenchSnapshot(input),
+    ...(typeof options.adapter.readWorkbenchChanges === "function"
+      ? { readChanges: (input) => options.adapter.readWorkbenchChanges(input) } : {}),
     ...(typeof options.connectAccount === "function" ? { connectAccount: options.connectAccount } : {}),
     validateReadRequest: shared.validateWorkbenchReadRequest,
     validateSnapshot: shared.validateWorkbenchSnapshot,
@@ -82,24 +82,24 @@ export async function bootstrapCodexWorkbenchRuntime(options = {}) {
     validateCommand: shared.validateWorkbenchCommand,
     validateCommandResult: shared.validateWorkbenchCommandResult,
   });
-}
-
-function codexWorkbenchResourceUri(candidate) {
-  const outputSha256 = String(candidate?.manifest?.outputSha256 || "");
-  if (!OUTPUT_SHA256_RE.test(outputSha256)) throw codeError("workbench_codex_output_sha256_invalid");
-  // Metadata changes must also invalidate Codex's cached resource.
-  const resourceSha256 = createHash("sha256")
-    .update(JSON.stringify({ outputSha256, meta: CODEX_WORKBENCH_RESOURCE_META }))
-    .digest("hex");
-  return `ui://hellolynk/workbench-codex-${resourceSha256}.html`;
-}
+}
+
+function codexWorkbenchResourceUri(candidate) {
+  const outputSha256 = String(candidate?.manifest?.outputSha256 || "");
+  if (!OUTPUT_SHA256_RE.test(outputSha256)) throw codeError("workbench_codex_output_sha256_invalid");
+  // Metadata changes must also invalidate Codex's cached resource.
+  const resourceSha256 = createHash("sha256")
+    .update(JSON.stringify({ outputSha256, meta: CODEX_WORKBENCH_RESOURCE_META }))
+    .digest("hex");
+  return `ui://hellolynk/workbench-codex-${resourceSha256}.html`;
+}
 
 function supportsF3ActionGrantTransport(shared, candidate, adapter) {
-  return shared.HELLOLYNK_WORKBENCH_SNAPSHOT_CONTRACT === "hellolynk-workbench-snapshot-v12"
-    && shared.HELLOLYNK_WORKBENCH_SNAPSHOT_SCHEMA_VERSION === 12
-    && shared.HELLOLYNK_WORKBENCH_COMMAND_CONTRACT === "hellolynk-workbench-command-v6"
-    && shared.HELLOLYNK_WORKBENCH_RESULT_CONTRACT === "hellolynk-workbench-command-result-v6"
-    && shared.HELLOLYNK_WORKBENCH_SCHEMA_VERSION === 6
+  return shared.HELLOLYNK_WORKBENCH_SNAPSHOT_CONTRACT === "hellolynk-workbench-snapshot-v12"
+    && shared.HELLOLYNK_WORKBENCH_SNAPSHOT_SCHEMA_VERSION === 12
+    && shared.HELLOLYNK_WORKBENCH_COMMAND_CONTRACT === "hellolynk-workbench-command-v6"
+    && shared.HELLOLYNK_WORKBENCH_RESULT_CONTRACT === "hellolynk-workbench-command-result-v6"
+    && shared.HELLOLYNK_WORKBENCH_SCHEMA_VERSION === 6
     && candidate?.manifest?.sourceContract === shared.HELLOLYNK_WORKBENCH_SNAPSHOT_CONTRACT
     && typeof candidate.html === "string"
     && candidate.html.includes("hellolynk_workbench_action_grant")

package/plugins/hellolynk-codex/runtime/bootstrap/platform/darwin/hellolynk-keychain-helper.swift

@@ -1,149 +0,0 @@
-// Rebuild in this directory: xcrun swiftc -O -target arm64-apple-macos13.0 -module-name HelloLynkKeychain hellolynk-keychain-helper.swift -o hellolynk-keychain-helper.bin
-import AppKit
-import CryptoKit
-import Foundation
-import Security
-
-func fail(_ code: String) -> Never {
-    FileHandle.standardError.write(Data((code + "\n").utf8))
-    exit(1)
-}
-
-func requireNoGrantACL(_ path: String) {
-    guard let acl = acl_get_file(path, ACL_TYPE_EXTENDED) else {
-        if errno == ENOENT { return } // A first write creates the file with mode 0600.
-        fail("macos_vault_acl_unavailable")
-    }
-    defer { acl_free(UnsafeMutableRawPointer(acl)) }
-    var entry: acl_entry_t?
-    var selector = ACL_FIRST_ENTRY
-    while acl_get_entry(acl, Int32(selector.rawValue), &entry) == 0 {
-        var tag = ACL_UNDEFINED_TAG
-        guard acl_get_tag_type(entry, &tag) == 0, tag == ACL_EXTENDED_DENY else {
-            fail("macos_vault_acl_invalid")
-        }
-        selector = ACL_NEXT_ENTRY
-    }
-}
-
-// The caller verifies the release path's ancestors and package hashes. Walk
-// with lstat so a symlink or hard link cannot redirect a permission change.
-func secureRelease(_ path: String, verifyOnly: Bool) {
-    var pending = [path]
-    while let entry = pending.popLast() {
-        var st = stat()
-        guard lstat(entry, &st) == 0, st.st_uid == getuid() else { fail("macos_vault_release_invalid") }
-        let type = st.st_mode & S_IFMT
-        guard type == S_IFDIR || (type == S_IFREG && st.st_nlink == 1) else { fail("macos_vault_release_invalid") }
-        let mode: mode_t = type == S_IFDIR || entry.hasSuffix(".bin") ? 0o700 : 0o600
-        if (st.st_mode & 0o7777) != mode {
-            guard !verifyOnly, chmod(entry, mode) == 0 else { fail("macos_vault_release_permissions_invalid") }
-        }
-        requireNoGrantACL(entry)
-        if type == S_IFDIR {
-            guard let names = try? FileManager.default.contentsOfDirectory(atPath: entry) else { fail("macos_vault_release_invalid") }
-            pending.append(contentsOf: names.map { entry + "/" + $0 })
-        }
-    }
-}
-
-func masterKey(_ root: String, create: Bool) -> Data {
-    let account = SHA256.hash(data: Data(root.utf8)).map { String(format: "%02x", $0) }.joined()
-    let base: [String: Any] = [
-        kSecClass as String: kSecClassGenericPassword,
-        kSecAttrService as String: "com.hellolynk.codex.macos-vault.v1",
-        kSecAttrAccount as String: account
-    ]
-    var lookup = base
-    lookup[kSecReturnData as String] = true
-    lookup[kSecMatchLimit as String] = kSecMatchLimitOne
-    var result: CFTypeRef?
-    let status = SecItemCopyMatching(lookup as CFDictionary, &result)
-    if status == errSecSuccess {
-        guard let key = result as? Data, key.count == 32 else { fail("macos_vault_key_invalid") }
-        return key
-    }
-    guard status == errSecItemNotFound else { fail("macos_keychain_access_\(abs(Int(status)))") }
-    guard create else { fail("macos_vault_key_missing") }
-    let key = SymmetricKey(size: .bits256).withUnsafeBytes { Data($0) }
-    var add = base
-    add[kSecValueData as String] = key
-    add[kSecAttrAccessible as String] = kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly
-    let inserted = SecItemAdd(add as CFDictionary, nil)
-    if inserted == errSecDuplicateItem { return masterKey(root, create: false) }
-    guard inserted == errSecSuccess else { fail("macos_keychain_access_\(abs(Int(inserted)))") }
-    return key
-}
-
-func nativeConfirmation() {
-    let raw = FileHandle.standardInput.readDataToEndOfFile()
-    guard raw.count <= 20480 * 6 + 8192,
-          var v = (try? JSONSerialization.jsonObject(with: raw)) as? [String: Any],
-          let body = v["displayText"] as? String, !body.isEmpty, body.utf8.count <= 20480,
-          let encoded = v["hmacKey"] as? String, encoded.count == 43,
-          let key = Data(base64Encoded: encoded.replacingOccurrences(of: "-", with: "+")
-              .replacingOccurrences(of: "_", with: "/") + "="), key.count == 32,
-          let recipient = v["recipientHelloLynkId"] as? String,
-          v["contract"] as? String == "hellolynk-native-human-confirmation-v1",
-          v["textDigest"] as? String == SHA256.hash(data: Data(body.utf8)).map({ String(format: "%02x", $0) }).joined()
-    else { fail("human_confirmation_request_invalid") }
-
-    var fields = ["contract", "actionId", "decision", "principalId", "delegateId", "hostInstallationId",
-                  "adapterId", "adapterInstanceId", "hostGeneration", "recipientHelloLynkId"]
-    var label = "收件人：" + recipient
-    if v["recipientDelegateId"] != nil || v["recipientInstanceDisplayName"] != nil {
-        guard let name = v["recipientInstanceDisplayName"] as? String, !name.isEmpty, name.utf8.count <= 512,
-              name.range(of: #"[\x00-\x1F\x7F-\x9F\u2028\u2029\u202A-\u202E\u2066-\u2069]"#, options: .regularExpression) == nil,
-              v["recipientDelegateId"] is String else { fail("human_confirmation_request_invalid") }
-        fields += ["recipientDelegateId", "recipientInstanceDisplayName"]
-        label += "\n目标 AI：" + name
-    }
-    fields += ["clientMessageId", "textDigest", "createdAtMs", "expiresAtMs", "challenge"]
-    var expected = Set(fields)
-    expected.remove("decision")
-    expected.formUnion(["displayText", "hmacKey"])
-    guard expected == Set(v.keys) else { fail("human_confirmation_request_invalid") }
-    let app = NSApplication.shared
-    app.setActivationPolicy(.accessory)
-    app.activate(ignoringOtherApps: true)
-    let dialog = NSAlert()
-    dialog.messageText = "是否允许 HelloLynk 发送以下文本？"
-    dialog.informativeText = label
-    dialog.addButton(withTitle: "取消")
-    dialog.addButton(withTitle: "批准发送")
-    let scroll = NSScrollView(frame: NSRect(x: 0, y: 0, width: 500, height: 230))
-    scroll.hasVerticalScroller = true
-    let view = NSTextView(frame: scroll.contentView.bounds)
-    view.isEditable = false
-    view.isRichText = false
-    view.isVerticallyResizable = true
-    view.autoresizingMask = [.width]
-    view.textContainer?.widthTracksTextView = true
-    view.string = body
-    scroll.documentView = view
-    dialog.accessoryView = scroll
-    v["decision"] = dialog.runModal() == .alertSecondButtonReturn ? "approve" : "cancel"
-    let message = fields.map { field -> String in
-        if let text = v[field] as? String { return text }
-        if ["createdAtMs","expiresAtMs"].contains(field), let n = v[field] as? NSNumber { return n.stringValue }
-        fail("human_confirmation_request_invalid")
-    }.joined(separator: "\n")
-    let proof = HMAC<SHA256>.authenticationCode(for: Data(message.utf8), using: SymmetricKey(data: key))
-    v["proof"] = proof.map { String(format: "%02x", $0) }.joined()
-    for field in ["hmacKey", "challenge", "displayText"] { v.removeValue(forKey: field) }
-    guard let output = try? JSONSerialization.data(withJSONObject: v) else { fail("human_confirmation_response_invalid") }
-    FileHandle.standardOutput.write(output)
-}
-
-let args = Array(CommandLine.arguments.dropFirst())
-if args == ["confirm"] { nativeConfirmation() }
-else if args.count == 3, args[0] == "key", args[1].hasPrefix("/"), ["load","create"].contains(args[2]) {
-    requireNoGrantACL(args[1])
-    requireNoGrantACL(args[1] + "/protected-v1.sqlite")
-    let key = masterKey(args[1], create: args[2] == "create")
-    FileHandle(fileDescriptor: 3, closeOnDealloc: false).write(key)
-} else if args.count == 2, ["verify-tree", "secure-tree"].contains(args[0]), args[1].hasPrefix("/") {
-    secureRelease(args[1], verifyOnly: args[0] == "verify-tree")
-} else if args.count == 2, args[0] == "verify-acl", args[1].hasPrefix("/") {
-    requireNoGrantACL(args[1])
-} else { fail("macos_vault_helper_arguments_invalid") }

package/plugins/hellolynk-codex/runtime/platform/darwin/hellolynk-keychain-helper.swift

@@ -1,149 +0,0 @@
-// Rebuild in this directory: xcrun swiftc -O -target arm64-apple-macos13.0 -module-name HelloLynkKeychain hellolynk-keychain-helper.swift -o hellolynk-keychain-helper.bin
-import AppKit
-import CryptoKit
-import Foundation
-import Security
-
-func fail(_ code: String) -> Never {
-    FileHandle.standardError.write(Data((code + "\n").utf8))
-    exit(1)
-}
-
-func requireNoGrantACL(_ path: String) {
-    guard let acl = acl_get_file(path, ACL_TYPE_EXTENDED) else {
-        if errno == ENOENT { return } // A first write creates the file with mode 0600.
-        fail("macos_vault_acl_unavailable")
-    }
-    defer { acl_free(UnsafeMutableRawPointer(acl)) }
-    var entry: acl_entry_t?
-    var selector = ACL_FIRST_ENTRY
-    while acl_get_entry(acl, Int32(selector.rawValue), &entry) == 0 {
-        var tag = ACL_UNDEFINED_TAG
-        guard acl_get_tag_type(entry, &tag) == 0, tag == ACL_EXTENDED_DENY else {
-            fail("macos_vault_acl_invalid")
-        }
-        selector = ACL_NEXT_ENTRY
-    }
-}
-
-// The caller verifies the release path's ancestors and package hashes. Walk
-// with lstat so a symlink or hard link cannot redirect a permission change.
-func secureRelease(_ path: String, verifyOnly: Bool) {
-    var pending = [path]
-    while let entry = pending.popLast() {
-        var st = stat()
-        guard lstat(entry, &st) == 0, st.st_uid == getuid() else { fail("macos_vault_release_invalid") }
-        let type = st.st_mode & S_IFMT
-        guard type == S_IFDIR || (type == S_IFREG && st.st_nlink == 1) else { fail("macos_vault_release_invalid") }
-        let mode: mode_t = type == S_IFDIR || entry.hasSuffix(".bin") ? 0o700 : 0o600
-        if (st.st_mode & 0o7777) != mode {
-            guard !verifyOnly, chmod(entry, mode) == 0 else { fail("macos_vault_release_permissions_invalid") }
-        }
-        requireNoGrantACL(entry)
-        if type == S_IFDIR {
-            guard let names = try? FileManager.default.contentsOfDirectory(atPath: entry) else { fail("macos_vault_release_invalid") }
-            pending.append(contentsOf: names.map { entry + "/" + $0 })
-        }
-    }
-}
-
-func masterKey(_ root: String, create: Bool) -> Data {
-    let account = SHA256.hash(data: Data(root.utf8)).map { String(format: "%02x", $0) }.joined()
-    let base: [String: Any] = [
-        kSecClass as String: kSecClassGenericPassword,
-        kSecAttrService as String: "com.hellolynk.codex.macos-vault.v1",
-        kSecAttrAccount as String: account
-    ]
-    var lookup = base
-    lookup[kSecReturnData as String] = true
-    lookup[kSecMatchLimit as String] = kSecMatchLimitOne
-    var result: CFTypeRef?
-    let status = SecItemCopyMatching(lookup as CFDictionary, &result)
-    if status == errSecSuccess {
-        guard let key = result as? Data, key.count == 32 else { fail("macos_vault_key_invalid") }
-        return key
-    }
-    guard status == errSecItemNotFound else { fail("macos_keychain_access_\(abs(Int(status)))") }
-    guard create else { fail("macos_vault_key_missing") }
-    let key = SymmetricKey(size: .bits256).withUnsafeBytes { Data($0) }
-    var add = base
-    add[kSecValueData as String] = key
-    add[kSecAttrAccessible as String] = kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly
-    let inserted = SecItemAdd(add as CFDictionary, nil)
-    if inserted == errSecDuplicateItem { return masterKey(root, create: false) }
-    guard inserted == errSecSuccess else { fail("macos_keychain_access_\(abs(Int(inserted)))") }
-    return key
-}
-
-func nativeConfirmation() {
-    let raw = FileHandle.standardInput.readDataToEndOfFile()
-    guard raw.count <= 20480 * 6 + 8192,
-          var v = (try? JSONSerialization.jsonObject(with: raw)) as? [String: Any],
-          let body = v["displayText"] as? String, !body.isEmpty, body.utf8.count <= 20480,
-          let encoded = v["hmacKey"] as? String, encoded.count == 43,
-          let key = Data(base64Encoded: encoded.replacingOccurrences(of: "-", with: "+")
-              .replacingOccurrences(of: "_", with: "/") + "="), key.count == 32,
-          let recipient = v["recipientHelloLynkId"] as? String,
-          v["contract"] as? String == "hellolynk-native-human-confirmation-v1",
-          v["textDigest"] as? String == SHA256.hash(data: Data(body.utf8)).map({ String(format: "%02x", $0) }).joined()
-    else { fail("human_confirmation_request_invalid") }
-
-    var fields = ["contract", "actionId", "decision", "principalId", "delegateId", "hostInstallationId",
-                  "adapterId", "adapterInstanceId", "hostGeneration", "recipientHelloLynkId"]
-    var label = "收件人：" + recipient
-    if v["recipientDelegateId"] != nil || v["recipientInstanceDisplayName"] != nil {
-        guard let name = v["recipientInstanceDisplayName"] as? String, !name.isEmpty, name.utf8.count <= 512,
-              name.range(of: #"[\x00-\x1F\x7F-\x9F\u2028\u2029\u202A-\u202E\u2066-\u2069]"#, options: .regularExpression) == nil,
-              v["recipientDelegateId"] is String else { fail("human_confirmation_request_invalid") }
-        fields += ["recipientDelegateId", "recipientInstanceDisplayName"]
-        label += "\n目标 AI：" + name
-    }
-    fields += ["clientMessageId", "textDigest", "createdAtMs", "expiresAtMs", "challenge"]
-    var expected = Set(fields)
-    expected.remove("decision")
-    expected.formUnion(["displayText", "hmacKey"])
-    guard expected == Set(v.keys) else { fail("human_confirmation_request_invalid") }
-    let app = NSApplication.shared
-    app.setActivationPolicy(.accessory)
-    app.activate(ignoringOtherApps: true)
-    let dialog = NSAlert()
-    dialog.messageText = "是否允许 HelloLynk 发送以下文本？"
-    dialog.informativeText = label
-    dialog.addButton(withTitle: "取消")
-    dialog.addButton(withTitle: "批准发送")
-    let scroll = NSScrollView(frame: NSRect(x: 0, y: 0, width: 500, height: 230))
-    scroll.hasVerticalScroller = true
-    let view = NSTextView(frame: scroll.contentView.bounds)
-    view.isEditable = false
-    view.isRichText = false
-    view.isVerticallyResizable = true
-    view.autoresizingMask = [.width]
-    view.textContainer?.widthTracksTextView = true
-    view.string = body
-    scroll.documentView = view
-    dialog.accessoryView = scroll
-    v["decision"] = dialog.runModal() == .alertSecondButtonReturn ? "approve" : "cancel"
-    let message = fields.map { field -> String in
-        if let text = v[field] as? String { return text }
-        if ["createdAtMs","expiresAtMs"].contains(field), let n = v[field] as? NSNumber { return n.stringValue }
-        fail("human_confirmation_request_invalid")
-    }.joined(separator: "\n")
-    let proof = HMAC<SHA256>.authenticationCode(for: Data(message.utf8), using: SymmetricKey(data: key))
-    v["proof"] = proof.map { String(format: "%02x", $0) }.joined()
-    for field in ["hmacKey", "challenge", "displayText"] { v.removeValue(forKey: field) }
-    guard let output = try? JSONSerialization.data(withJSONObject: v) else { fail("human_confirmation_response_invalid") }
-    FileHandle.standardOutput.write(output)
-}
-
-let args = Array(CommandLine.arguments.dropFirst())
-if args == ["confirm"] { nativeConfirmation() }
-else if args.count == 3, args[0] == "key", args[1].hasPrefix("/"), ["load","create"].contains(args[2]) {
-    requireNoGrantACL(args[1])
-    requireNoGrantACL(args[1] + "/protected-v1.sqlite")
-    let key = masterKey(args[1], create: args[2] == "create")
-    FileHandle(fileDescriptor: 3, closeOnDealloc: false).write(key)
-} else if args.count == 2, ["verify-tree", "secure-tree"].contains(args[0]), args[1].hasPrefix("/") {
-    secureRelease(args[1], verifyOnly: args[0] == "verify-tree")
-} else if args.count == 2, args[0] == "verify-acl", args[1].hasPrefix("/") {
-    requireNoGrantACL(args[1])
-} else { fail("macos_vault_helper_arguments_invalid") }