@hoilab/ada-cli 0.84.21 → 0.85.0

package/dist/core/computer/motor/platform/macos/helper.js

@@ -0,0 +1,277 @@
+import { spawn } from "node:child_process";
+import { constants as fsConstants } from "node:fs";
+import { access, mkdir, realpath } from "node:fs/promises";
+import net from "node:net";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { toBoolean, toFiniteNumber, toOptionalString } from "../coerce.js";
+import { resolveMacosHelperAppPath } from "./helper-path.mjs";
+const COMMAND_TIMEOUT_MS = 15_000;
+const HELPER_PROTOCOL_VERSION = 6;
+const HELPER_SETUP_TIMEOUT_MS = 60_000;
+export const HELPER_BUNDLE_ID = "com.hoilab.ada-computer-use";
+export const HELPER_APP_PATH = resolveMacosHelperAppPath();
+export const HELPER_APP_EXECUTABLE_PATH = path.join(HELPER_APP_PATH, "Contents", "MacOS", "bridge");
+const DEFAULT_HELPER_SOCKET_PATH = path.join(os.homedir(), "Library", "Caches", "ada-computer-use", "bridge.sock");
+export const HELPER_SOCKET_PATH = process.env.PI_CU_SOCKET_PATH ?? DEFAULT_HELPER_SOCKET_PATH;
+const usingExternalHelperSocket = HELPER_SOCKET_PATH !== DEFAULT_HELPER_SOCKET_PATH;
+const PACKAGE_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..", "..", "..");
+const SETUP_HELPER_SCRIPT = path.join(PACKAGE_ROOT, "scripts", "setup-helper.mjs");
+export class HelperTransportError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "HelperTransportError";
+    }
+}
+export class HelperCommandError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.name = "HelperCommandError";
+        this.code = code;
+    }
+}
+function throwIfAborted(signal) {
+    if (signal?.aborted)
+        throw new Error("Operation aborted.");
+}
+async function sleep(ms, signal) {
+    throwIfAborted(signal);
+    await new Promise((resolve, reject) => {
+        const timer = setTimeout(resolve, ms);
+        const onAbort = () => {
+            clearTimeout(timer);
+            reject(new Error("Operation aborted."));
+        };
+        signal?.addEventListener("abort", onAbort, { once: true });
+    }).finally(() => signal?.throwIfAborted?.());
+}
+async function isExecutable(filePath) {
+    try {
+        await access(filePath, fsConstants.X_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function isResolvedHelperExecutable(filePath) {
+    if (!filePath)
+        return true;
+    const [actualPath, expectedPath] = await Promise.all([
+        realpath(filePath).catch(() => path.resolve(filePath)),
+        realpath(HELPER_APP_EXECUTABLE_PATH).catch(() => path.resolve(HELPER_APP_EXECUTABLE_PATH)),
+    ]);
+    return actualPath === expectedPath;
+}
+export async function runProcess(command, args, timeoutMs, signal, env) {
+    throwIfAborted(signal);
+    await new Promise((resolve, reject) => {
+        const child = spawn(command, args, {
+            stdio: ["ignore", "pipe", "pipe"],
+            env,
+        });
+        let stderr = "";
+        let stdout = "";
+        const timer = setTimeout(() => {
+            child.kill("SIGTERM");
+            cleanup();
+            reject(new Error(`Command timed out after ${timeoutMs}ms: ${command} ${args.join(" ")}`));
+        }, timeoutMs);
+        const onAbort = () => {
+            child.kill("SIGTERM");
+            cleanup();
+            reject(new Error("Operation aborted."));
+        };
+        const cleanup = () => {
+            clearTimeout(timer);
+            signal?.removeEventListener("abort", onAbort);
+        };
+        child.stdout.on("data", (chunk) => {
+            stdout += String(chunk);
+        });
+        child.stderr.on("data", (chunk) => {
+            stderr += String(chunk);
+        });
+        child.on("error", (error) => {
+            cleanup();
+            reject(error);
+        });
+        child.on("close", (code) => {
+            cleanup();
+            if (code === 0) {
+                resolve();
+                return;
+            }
+            const output = [stderr.trim(), stdout.trim()].filter(Boolean).join("\n");
+            reject(new Error(`Command failed (${code}): ${command} ${args.join(" ")}\n${output}`.trim()));
+        });
+        signal?.addEventListener("abort", onAbort, { once: true });
+    });
+}
+export class MacosHelperClient {
+    daemonAvailable = false;
+    requestSequence = 0;
+    diagnosticsCache;
+    get diagnostics() {
+        return this.diagnosticsCache;
+    }
+    async ensureInstalled(signal) {
+        if (usingExternalHelperSocket)
+            return;
+        // Installation is a deployment/repair operation, not part of every new
+        // agent process's hot path. Protocol compatibility is checked against the
+        // live daemon immediately afterwards.
+        if (await isExecutable(HELPER_APP_EXECUTABLE_PATH)) {
+            return;
+        }
+        // Re-enter Electron and Bun standalone hosts as their JavaScript runtimes.
+        await runProcess(process.execPath, [SETUP_HELPER_SCRIPT, "--runtime"], HELPER_SETUP_TIMEOUT_MS, signal, {
+            ...process.env,
+            ELECTRON_RUN_AS_NODE: "1",
+            BUN_BE_BUN: "1",
+        });
+        if (!(await isExecutable(HELPER_APP_EXECUTABLE_PATH))) {
+            throw new Error(`Failed to install ada-computer-use helper app at ${HELPER_APP_PATH}.`);
+        }
+    }
+    async launchDaemon(signal) {
+        if (usingExternalHelperSocket)
+            throw new HelperTransportError(`External helper socket is unavailable at ${HELPER_SOCKET_PATH}.`);
+        await mkdir(path.dirname(HELPER_SOCKET_PATH), { recursive: true });
+        // Open the resolved bundle directly so a legacy system-wide copy with the
+        // same bundle id cannot win LaunchServices resolution.
+        await runProcess("open", ["-n", "-g", HELPER_APP_PATH, "--args", "serve", "--socket", HELPER_SOCKET_PATH], COMMAND_TIMEOUT_MS, signal);
+    }
+    async daemonCommand(cmd, args, timeoutMs, signal) {
+        return await new Promise((resolve, reject) => {
+            const id = `req_${++this.requestSequence}`;
+            const socket = net.createConnection(HELPER_SOCKET_PATH);
+            let buffer = "";
+            const timer = setTimeout(() => {
+                socket.destroy();
+                reject(new HelperTransportError(`Daemon command '${cmd}' timed out after ${timeoutMs}ms.`));
+            }, timeoutMs);
+            const cleanup = () => {
+                clearTimeout(timer);
+                signal?.removeEventListener("abort", onAbort);
+            };
+            const onAbort = () => {
+                socket.destroy();
+                cleanup();
+                reject(new Error("Operation aborted."));
+            };
+            signal?.addEventListener("abort", onAbort, { once: true });
+            socket.setEncoding("utf8");
+            socket.on("connect", () => socket.write(`${JSON.stringify({ id, cmd, ...args })}\n`));
+            socket.on("data", (chunk) => {
+                buffer += chunk;
+                const newline = buffer.indexOf("\n");
+                if (newline < 0)
+                    return;
+                cleanup();
+                socket.end();
+                try {
+                    const parsed = JSON.parse(buffer.slice(0, newline));
+                    if (parsed.ok === true)
+                        resolve(parsed.result);
+                    else
+                        reject(new HelperCommandError(parsed?.error?.message ?? `Daemon command '${cmd}' failed.`, parsed?.error?.code));
+                }
+                catch (error) {
+                    reject(error);
+                }
+            });
+            socket.on("error", (error) => {
+                cleanup();
+                reject(new HelperTransportError(error.message));
+            });
+        });
+    }
+    async ensureDaemon(signal) {
+        if (this.daemonAvailable)
+            return true;
+        try {
+            await this.daemonCommand("diagnostics", {}, 1_000, signal);
+            this.daemonAvailable = true;
+            return true;
+        }
+        catch { }
+        await this.launchDaemon(signal).catch(() => undefined);
+        for (let index = 0; index < 30; index += 1) {
+            try {
+                await this.daemonCommand("diagnostics", {}, 1_000, signal);
+                this.daemonAvailable = true;
+                return true;
+            }
+            catch {
+                await sleep(100, signal);
+            }
+        }
+        return false;
+    }
+    async command(cmd, args = {}, options) {
+        const timeoutMs = options?.timeoutMs ?? COMMAND_TIMEOUT_MS;
+        if (!(await this.ensureDaemon(options?.signal))) {
+            throw new HelperTransportError(`ada-computer-use helper app daemon is unavailable at ${HELPER_APP_PATH}.`);
+        }
+        try {
+            return await this.daemonCommand(cmd, args, timeoutMs, options?.signal);
+        }
+        catch (error) {
+            this.daemonAvailable = false;
+            throw error instanceof Error ? error : new Error(String(error));
+        }
+    }
+    async restart(signal) {
+        await this.command("shutdown", {}, { signal, timeoutMs: 2_000 }).catch(() => undefined);
+        this.daemonAvailable = false;
+        await sleep(400, signal);
+        if (!(await this.ensureDaemon(signal))) {
+            throw new Error(`ada-computer-use helper did not come back after restart. Helper app: ${HELPER_APP_PATH}`);
+        }
+    }
+    async diagnosticsCommand(signal) {
+        const result = await this.command("diagnostics", {}, { signal });
+        const diagnostics = {
+            protocolVersion: Math.trunc(toFiniteNumber(result?.protocolVersion, 0)),
+            architectureVersion: Math.trunc(toFiniteNumber(result?.architectureVersion, 0)),
+            invariants: Array.isArray(result?.invariants)
+                ? result.invariants.filter((value) => typeof value === "string")
+                : [],
+            pid: Math.trunc(toFiniteNumber(result?.pid, 0)),
+            parentPid: Math.trunc(toFiniteNumber(result?.parentPid, 0)) || undefined,
+            parentAppName: toOptionalString(result?.parentAppName),
+            parentBundleId: toOptionalString(result?.parentBundleId),
+            parentPath: toOptionalString(result?.parentPath),
+            executablePath: toOptionalString(result?.executablePath),
+            os: toOptionalString(result?.macOS),
+            arch: toOptionalString(result?.arch),
+            accessibility: toBoolean(result?.accessibility),
+            screenRecording: toBoolean(result?.screenRecording),
+        };
+        this.diagnosticsCache = diagnostics;
+        return diagnostics;
+    }
+    async ensureProtocol(signal) {
+        let diagnostics = await this.diagnosticsCommand(signal);
+        const executableMatches = await isResolvedHelperExecutable(diagnostics.executablePath);
+        if (diagnostics.protocolVersion === HELPER_PROTOCOL_VERSION && executableMatches)
+            return diagnostics;
+        // The helper daemon outlives Pi, so restarting/reloading Pi alone does not
+        // replace a stale daemon or one launched from the legacy system location.
+        // Stop it through the backwards-compatible command channel and relaunch
+        // the exact app bundle that ensureInstalled() resolved.
+        await this.restart(signal);
+        diagnostics = await this.diagnosticsCommand(signal);
+        const relaunchedExecutableMatches = await isResolvedHelperExecutable(diagnostics.executablePath);
+        if (diagnostics.protocolVersion !== HELPER_PROTOCOL_VERSION || !relaunchedExecutableMatches) {
+            this.daemonAvailable = false;
+            throw new Error(`ada-computer-use helper mismatch after relaunch: expected protocol ${HELPER_PROTOCOL_VERSION} and executable ${HELPER_APP_EXECUTABLE_PATH}; got protocol ${diagnostics.protocolVersion} and executable ${diagnostics.executablePath ?? "unknown"}. Reinstall or rebuild the helper app at ${HELPER_APP_PATH}.`);
+        }
+        return diagnostics;
+    }
+}
+export const macosHelper = new MacosHelperClient();
+//# sourceMappingURL=helper.js.map

package/dist/core/computer/motor/platform/macos/helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helper.js","sourceRoot":"","sources":["../../../../../../src/core/computer/motor/platform/macos/helper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAE3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAE9D,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAClC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAEvC,MAAM,CAAC,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AAC9D,MAAM,CAAC,MAAM,eAAe,GAAG,yBAAyB,EAAE,CAAC;AAC3D,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AACpG,MAAM,0BAA0B,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC;AACnH,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,0BAA0B,CAAC;AAC9F,MAAM,yBAAyB,GAAG,kBAAkB,KAAK,0BAA0B,CAAC;AAEpF,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAClG,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;AAEnF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC9C,YAAY,OAAe,EAAE;QAC5B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IAAA,CACnC;CACD;AAED,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACnC,IAAI,CAAU;IAEvB,YAAY,OAAe,EAAE,IAAa,EAAE;QAC3C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAAA,CACjB;CACD;AAED,SAAS,cAAc,CAAC,MAAoB,EAAQ;IACnD,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;AAAA,CAC3D;AAED,KAAK,UAAU,KAAK,CAAC,EAAU,EAAE,MAAoB,EAAiB;IACrE,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;YACrB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAAA,CACxC,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAAA,CAC3D,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;AAAA,CAC7C;AAED,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAoB;IAC/D,IAAI,CAAC;QACJ,MAAM,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AAAA,CACD;AAED,KAAK,UAAU,0BAA0B,CAAC,QAAiB,EAAoB;IAC9E,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpD,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtD,QAAQ,CAAC,0BAA0B,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;KAC1F,CAAC,CAAC;IACH,OAAO,UAAU,KAAK,YAAY,CAAC;AAAA,CACnC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,OAAe,EACf,IAAc,EACd,SAAiB,EACjB,MAAoB,EACpB,GAAuB,EACP;IAChB,cAAc,CAAC,MAAM,CAAC,CAAC;IAEvB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YAClC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,GAAG;SACH,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,SAAS,OAAO,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAAA,CAC1F,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAAA,CACxC,CAAC;QAEF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;YACrB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAAA,CAC9C,CAAC;QAEF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QAAA,CACxB,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QAAA,CACxB,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;YAC5B,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,CAAC;QAAA,CACd,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3B,OAAO,EAAE,CAAC;YACV,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBAChB,OAAO,EAAE,CAAC;gBACV,OAAO;YACR,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzE,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,IAAI,MAAM,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAAA,CAC9F,CAAC,CAAC;QAEH,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAAA,CAC3D,CAAC,CAAC;AAAA,CACH;AAED,MAAM,OAAO,iBAAiB;IACrB,eAAe,GAAG,KAAK,CAAC;IACxB,eAAe,GAAG,CAAC,CAAC;IACpB,gBAAgB,CAAuB;IAE/C,IAAI,WAAW,GAAoC;QAClD,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAAA,CAC7B;IAED,KAAK,CAAC,eAAe,CAAC,MAAoB,EAAiB;QAC1D,IAAI,yBAAyB;YAAE,OAAO;QACtC,uEAAuE;QACvE,0EAA0E;QAC1E,sCAAsC;QACtC,IAAI,MAAM,YAAY,CAAC,0BAA0B,CAAC,EAAE,CAAC;YACpD,OAAO;QACR,CAAC;QAED,2EAA2E;QAC3E,MAAM,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,mBAAmB,EAAE,WAAW,CAAC,EAAE,uBAAuB,EAAE,MAAM,EAAE;YACvG,GAAG,OAAO,CAAC,GAAG;YACd,oBAAoB,EAAE,GAAG;YACzB,UAAU,EAAE,GAAG;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,0BAA0B,CAAC,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,oDAAoD,eAAe,GAAG,CAAC,CAAC;QACzF,CAAC;IAAA,CACD;IAED,KAAK,CAAC,YAAY,CAAC,MAAoB,EAAiB;QACvD,IAAI,yBAAyB;YAC5B,MAAM,IAAI,oBAAoB,CAAC,4CAA4C,kBAAkB,GAAG,CAAC,CAAC;QACnG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,0EAA0E;QAC1E,uDAAuD;QACvD,MAAM,UAAU,CACf,MAAM,EACN,CAAC,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,kBAAkB,CAAC,EAChF,kBAAkB,EAClB,MAAM,CACN,CAAC;IAAA,CACF;IAED,KAAK,CAAC,aAAa,CAClB,GAAW,EACX,IAA6B,EAC7B,SAAiB,EACjB,MAAoB,EACP;QACb,OAAO,MAAM,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;YAChD,MAAM,EAAE,GAAG,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;YACxD,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;gBAC9B,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,oBAAoB,CAAC,mBAAmB,GAAG,qBAAqB,SAAS,KAAK,CAAC,CAAC,CAAC;YAAA,CAC5F,EAAE,SAAS,CAAC,CAAC;YACd,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;gBACrB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAAA,CAC9C,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;gBACrB,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;YAAA,CACxC,CAAC;YACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAC3B,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;YACtF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC;gBAChB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,OAAO,GAAG,CAAC;oBAAE,OAAO;gBACxB,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC;oBACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;oBACpD,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI;wBAAE,OAAO,CAAC,MAAM,CAAC,MAAW,CAAC,CAAC;;wBAEnD,MAAM,CACL,IAAI,kBAAkB,CACrB,MAAM,EAAE,KAAK,EAAE,OAAO,IAAI,mBAAmB,GAAG,WAAW,EAC3D,MAAM,EAAE,KAAK,EAAE,IAAI,CACnB,CACD,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,MAAM,CAAC,KAAK,CAAC,CAAC;gBACf,CAAC;YAAA,CACD,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC7B,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAA,CAChD,CAAC,CAAC;QAAA,CACH,CAAC,CAAC;IAAA,CACH;IAED,KAAK,CAAC,YAAY,CAAC,MAAoB,EAAoB;QAC1D,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC;QACtC,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YAC3D,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC5B,OAAO,IAAI,CAAC;QACb,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACvD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;gBAC3D,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;gBAC5B,OAAO,IAAI,CAAC;YACb,CAAC;YAAC,MAAM,CAAC;gBACR,MAAM,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC1B,CAAC;QACF,CAAC;QACD,OAAO,KAAK,CAAC;IAAA,CACb;IAED,KAAK,CAAC,OAAO,CACZ,GAAW,EACX,IAAI,GAA4B,EAAE,EAClC,OAAsD,EACzC;QACb,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,kBAAkB,CAAC;QAC3D,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,oBAAoB,CAAC,wDAAwD,eAAe,GAAG,CAAC,CAAC;QAC5G,CAAC;QACD,IAAI,CAAC;YACJ,OAAO,MAAM,IAAI,CAAC,aAAa,CAAI,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;YAC7B,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACjE,CAAC;IAAA,CACD;IAED,KAAK,CAAC,OAAO,CAAC,MAAoB,EAAiB;QAClD,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxF,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;QAC7B,MAAM,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,wEAAwE,eAAe,EAAE,CAAC,CAAC;QAC5G,CAAC;IAAA,CACD;IAED,KAAK,CAAC,kBAAkB,CAAC,MAAoB,EAAgC;QAC5E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAM,aAAa,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,MAAM,WAAW,GAAG;YACnB,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;YACvE,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;YAC/E,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC;gBAC5C,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;gBAC1F,CAAC,CAAC,EAAE;YACL,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YAC/C,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS;YACxE,aAAa,EAAE,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC;YACtD,cAAc,EAAE,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC;YACxD,UAAU,EAAE,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC;YAChD,cAAc,EAAE,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC;YACxD,EAAE,EAAE,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC;YACnC,IAAI,EAAE,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC;YACpC,aAAa,EAAE,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC;YAC/C,eAAe,EAAE,SAAS,CAAC,MAAM,EAAE,eAAe,CAAC;SACnD,CAAC;QACF,IAAI,CAAC,gBAAgB,GAAG,WAAW,CAAC;QACpC,OAAO,WAAW,CAAC;IAAA,CACnB;IAED,KAAK,CAAC,cAAc,CAAC,MAAoB,EAAgC;QACxE,IAAI,WAAW,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,iBAAiB,GAAG,MAAM,0BAA0B,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QACvF,IAAI,WAAW,CAAC,eAAe,KAAK,uBAAuB,IAAI,iBAAiB;YAAE,OAAO,WAAW,CAAC;QAErG,2EAA2E;QAC3E,0EAA0E;QAC1E,wEAAwE;QACxE,wDAAwD;QACxD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3B,WAAW,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,2BAA2B,GAAG,MAAM,0BAA0B,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QACjG,IAAI,WAAW,CAAC,eAAe,KAAK,uBAAuB,IAAI,CAAC,2BAA2B,EAAE,CAAC;YAC7F,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;YAC7B,MAAM,IAAI,KAAK,CACd,sEAAsE,uBAAuB,mBAAmB,0BAA0B,kBAAkB,WAAW,CAAC,eAAe,mBAAmB,WAAW,CAAC,cAAc,IAAI,SAAS,4CAA4C,eAAe,GAAG,CAC/S,CAAC;QACH,CAAC;QACD,OAAO,WAAW,CAAC;IAAA,CACnB;CACD;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,iBAAiB,EAAE,CAAC","sourcesContent":["import { spawn } from \"node:child_process\";\nimport { constants as fsConstants } from \"node:fs\";\nimport { access, mkdir, realpath } from \"node:fs/promises\";\nimport net from \"node:net\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { toBoolean, toFiniteNumber, toOptionalString } from \"../coerce.ts\";\nimport type { PlatformDiagnostics } from \"../types.ts\";\nimport { resolveMacosHelperAppPath } from \"./helper-path.mjs\";\n\nconst COMMAND_TIMEOUT_MS = 15_000;\nconst HELPER_PROTOCOL_VERSION = 6;\nconst HELPER_SETUP_TIMEOUT_MS = 60_000;\n\nexport const HELPER_BUNDLE_ID = \"com.hoilab.ada-computer-use\";\nexport const HELPER_APP_PATH = resolveMacosHelperAppPath();\nexport const HELPER_APP_EXECUTABLE_PATH = path.join(HELPER_APP_PATH, \"Contents\", \"MacOS\", \"bridge\");\nconst DEFAULT_HELPER_SOCKET_PATH = path.join(os.homedir(), \"Library\", \"Caches\", \"ada-computer-use\", \"bridge.sock\");\nexport const HELPER_SOCKET_PATH = process.env.PI_CU_SOCKET_PATH ?? DEFAULT_HELPER_SOCKET_PATH;\nconst usingExternalHelperSocket = HELPER_SOCKET_PATH !== DEFAULT_HELPER_SOCKET_PATH;\n\nconst PACKAGE_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), \"..\", \"..\", \"..\");\nconst SETUP_HELPER_SCRIPT = path.join(PACKAGE_ROOT, \"scripts\", \"setup-helper.mjs\");\n\nexport class HelperTransportError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"HelperTransportError\";\n\t}\n}\n\nexport class HelperCommandError extends Error {\n\treadonly code?: string;\n\n\tconstructor(message: string, code?: string) {\n\t\tsuper(message);\n\t\tthis.name = \"HelperCommandError\";\n\t\tthis.code = code;\n\t}\n}\n\nfunction throwIfAborted(signal?: AbortSignal): void {\n\tif (signal?.aborted) throw new Error(\"Operation aborted.\");\n}\n\nasync function sleep(ms: number, signal?: AbortSignal): Promise<void> {\n\tthrowIfAborted(signal);\n\tawait new Promise<void>((resolve, reject) => {\n\t\tconst timer = setTimeout(resolve, ms);\n\t\tconst onAbort = () => {\n\t\t\tclearTimeout(timer);\n\t\t\treject(new Error(\"Operation aborted.\"));\n\t\t};\n\t\tsignal?.addEventListener(\"abort\", onAbort, { once: true });\n\t}).finally(() => signal?.throwIfAborted?.());\n}\n\nasync function isExecutable(filePath: string): Promise<boolean> {\n\ttry {\n\t\tawait access(filePath, fsConstants.X_OK);\n\t\treturn true;\n\t} catch {\n\t\treturn false;\n\t}\n}\n\nasync function isResolvedHelperExecutable(filePath?: string): Promise<boolean> {\n\tif (!filePath) return true;\n\tconst [actualPath, expectedPath] = await Promise.all([\n\t\trealpath(filePath).catch(() => path.resolve(filePath)),\n\t\trealpath(HELPER_APP_EXECUTABLE_PATH).catch(() => path.resolve(HELPER_APP_EXECUTABLE_PATH)),\n\t]);\n\treturn actualPath === expectedPath;\n}\n\nexport async function runProcess(\n\tcommand: string,\n\targs: string[],\n\ttimeoutMs: number,\n\tsignal?: AbortSignal,\n\tenv?: NodeJS.ProcessEnv,\n): Promise<void> {\n\tthrowIfAborted(signal);\n\n\tawait new Promise<void>((resolve, reject) => {\n\t\tconst child = spawn(command, args, {\n\t\t\tstdio: [\"ignore\", \"pipe\", \"pipe\"],\n\t\t\tenv,\n\t\t});\n\n\t\tlet stderr = \"\";\n\t\tlet stdout = \"\";\n\n\t\tconst timer = setTimeout(() => {\n\t\t\tchild.kill(\"SIGTERM\");\n\t\t\tcleanup();\n\t\t\treject(new Error(`Command timed out after ${timeoutMs}ms: ${command} ${args.join(\" \")}`));\n\t\t}, timeoutMs);\n\n\t\tconst onAbort = () => {\n\t\t\tchild.kill(\"SIGTERM\");\n\t\t\tcleanup();\n\t\t\treject(new Error(\"Operation aborted.\"));\n\t\t};\n\n\t\tconst cleanup = () => {\n\t\t\tclearTimeout(timer);\n\t\t\tsignal?.removeEventListener(\"abort\", onAbort);\n\t\t};\n\n\t\tchild.stdout.on(\"data\", (chunk) => {\n\t\t\tstdout += String(chunk);\n\t\t});\n\n\t\tchild.stderr.on(\"data\", (chunk) => {\n\t\t\tstderr += String(chunk);\n\t\t});\n\n\t\tchild.on(\"error\", (error) => {\n\t\t\tcleanup();\n\t\t\treject(error);\n\t\t});\n\n\t\tchild.on(\"close\", (code) => {\n\t\t\tcleanup();\n\t\t\tif (code === 0) {\n\t\t\t\tresolve();\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst output = [stderr.trim(), stdout.trim()].filter(Boolean).join(\"\\n\");\n\t\t\treject(new Error(`Command failed (${code}): ${command} ${args.join(\" \")}\\n${output}`.trim()));\n\t\t});\n\n\t\tsignal?.addEventListener(\"abort\", onAbort, { once: true });\n\t});\n}\n\nexport class MacosHelperClient {\n\tprivate daemonAvailable = false;\n\tprivate requestSequence = 0;\n\tprivate diagnosticsCache?: PlatformDiagnostics;\n\n\tget diagnostics(): PlatformDiagnostics | undefined {\n\t\treturn this.diagnosticsCache;\n\t}\n\n\tasync ensureInstalled(signal?: AbortSignal): Promise<void> {\n\t\tif (usingExternalHelperSocket) return;\n\t\t// Installation is a deployment/repair operation, not part of every new\n\t\t// agent process's hot path. Protocol compatibility is checked against the\n\t\t// live daemon immediately afterwards.\n\t\tif (await isExecutable(HELPER_APP_EXECUTABLE_PATH)) {\n\t\t\treturn;\n\t\t}\n\n\t\t// Re-enter Electron and Bun standalone hosts as their JavaScript runtimes.\n\t\tawait runProcess(process.execPath, [SETUP_HELPER_SCRIPT, \"--runtime\"], HELPER_SETUP_TIMEOUT_MS, signal, {\n\t\t\t...process.env,\n\t\t\tELECTRON_RUN_AS_NODE: \"1\",\n\t\t\tBUN_BE_BUN: \"1\",\n\t\t});\n\n\t\tif (!(await isExecutable(HELPER_APP_EXECUTABLE_PATH))) {\n\t\t\tthrow new Error(`Failed to install ada-computer-use helper app at ${HELPER_APP_PATH}.`);\n\t\t}\n\t}\n\n\tasync launchDaemon(signal?: AbortSignal): Promise<void> {\n\t\tif (usingExternalHelperSocket)\n\t\t\tthrow new HelperTransportError(`External helper socket is unavailable at ${HELPER_SOCKET_PATH}.`);\n\t\tawait mkdir(path.dirname(HELPER_SOCKET_PATH), { recursive: true });\n\t\t// Open the resolved bundle directly so a legacy system-wide copy with the\n\t\t// same bundle id cannot win LaunchServices resolution.\n\t\tawait runProcess(\n\t\t\t\"open\",\n\t\t\t[\"-n\", \"-g\", HELPER_APP_PATH, \"--args\", \"serve\", \"--socket\", HELPER_SOCKET_PATH],\n\t\t\tCOMMAND_TIMEOUT_MS,\n\t\t\tsignal,\n\t\t);\n\t}\n\n\tasync daemonCommand<T>(\n\t\tcmd: string,\n\t\targs: Record<string, unknown>,\n\t\ttimeoutMs: number,\n\t\tsignal?: AbortSignal,\n\t): Promise<T> {\n\t\treturn await new Promise<T>((resolve, reject) => {\n\t\t\tconst id = `req_${++this.requestSequence}`;\n\t\t\tconst socket = net.createConnection(HELPER_SOCKET_PATH);\n\t\t\tlet buffer = \"\";\n\t\t\tconst timer = setTimeout(() => {\n\t\t\t\tsocket.destroy();\n\t\t\t\treject(new HelperTransportError(`Daemon command '${cmd}' timed out after ${timeoutMs}ms.`));\n\t\t\t}, timeoutMs);\n\t\t\tconst cleanup = () => {\n\t\t\t\tclearTimeout(timer);\n\t\t\t\tsignal?.removeEventListener(\"abort\", onAbort);\n\t\t\t};\n\t\t\tconst onAbort = () => {\n\t\t\t\tsocket.destroy();\n\t\t\t\tcleanup();\n\t\t\t\treject(new Error(\"Operation aborted.\"));\n\t\t\t};\n\t\t\tsignal?.addEventListener(\"abort\", onAbort, { once: true });\n\t\t\tsocket.setEncoding(\"utf8\");\n\t\t\tsocket.on(\"connect\", () => socket.write(`${JSON.stringify({ id, cmd, ...args })}\\n`));\n\t\t\tsocket.on(\"data\", (chunk) => {\n\t\t\t\tbuffer += chunk;\n\t\t\t\tconst newline = buffer.indexOf(\"\\n\");\n\t\t\t\tif (newline < 0) return;\n\t\t\t\tcleanup();\n\t\t\t\tsocket.end();\n\t\t\t\ttry {\n\t\t\t\t\tconst parsed = JSON.parse(buffer.slice(0, newline));\n\t\t\t\t\tif (parsed.ok === true) resolve(parsed.result as T);\n\t\t\t\t\telse\n\t\t\t\t\t\treject(\n\t\t\t\t\t\t\tnew HelperCommandError(\n\t\t\t\t\t\t\t\tparsed?.error?.message ?? `Daemon command '${cmd}' failed.`,\n\t\t\t\t\t\t\t\tparsed?.error?.code,\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t);\n\t\t\t\t} catch (error) {\n\t\t\t\t\treject(error);\n\t\t\t\t}\n\t\t\t});\n\t\t\tsocket.on(\"error\", (error) => {\n\t\t\t\tcleanup();\n\t\t\t\treject(new HelperTransportError(error.message));\n\t\t\t});\n\t\t});\n\t}\n\n\tasync ensureDaemon(signal?: AbortSignal): Promise<boolean> {\n\t\tif (this.daemonAvailable) return true;\n\t\ttry {\n\t\t\tawait this.daemonCommand(\"diagnostics\", {}, 1_000, signal);\n\t\t\tthis.daemonAvailable = true;\n\t\t\treturn true;\n\t\t} catch {}\n\t\tawait this.launchDaemon(signal).catch(() => undefined);\n\t\tfor (let index = 0; index < 30; index += 1) {\n\t\t\ttry {\n\t\t\t\tawait this.daemonCommand(\"diagnostics\", {}, 1_000, signal);\n\t\t\t\tthis.daemonAvailable = true;\n\t\t\t\treturn true;\n\t\t\t} catch {\n\t\t\t\tawait sleep(100, signal);\n\t\t\t}\n\t\t}\n\t\treturn false;\n\t}\n\n\tasync command<T>(\n\t\tcmd: string,\n\t\targs: Record<string, unknown> = {},\n\t\toptions?: { timeoutMs?: number; signal?: AbortSignal },\n\t): Promise<T> {\n\t\tconst timeoutMs = options?.timeoutMs ?? COMMAND_TIMEOUT_MS;\n\t\tif (!(await this.ensureDaemon(options?.signal))) {\n\t\t\tthrow new HelperTransportError(`ada-computer-use helper app daemon is unavailable at ${HELPER_APP_PATH}.`);\n\t\t}\n\t\ttry {\n\t\t\treturn await this.daemonCommand<T>(cmd, args, timeoutMs, options?.signal);\n\t\t} catch (error) {\n\t\t\tthis.daemonAvailable = false;\n\t\t\tthrow error instanceof Error ? error : new Error(String(error));\n\t\t}\n\t}\n\n\tasync restart(signal?: AbortSignal): Promise<void> {\n\t\tawait this.command(\"shutdown\", {}, { signal, timeoutMs: 2_000 }).catch(() => undefined);\n\t\tthis.daemonAvailable = false;\n\t\tawait sleep(400, signal);\n\t\tif (!(await this.ensureDaemon(signal))) {\n\t\t\tthrow new Error(`ada-computer-use helper did not come back after restart. Helper app: ${HELPER_APP_PATH}`);\n\t\t}\n\t}\n\n\tasync diagnosticsCommand(signal?: AbortSignal): Promise<PlatformDiagnostics> {\n\t\tconst result = await this.command<any>(\"diagnostics\", {}, { signal });\n\t\tconst diagnostics = {\n\t\t\tprotocolVersion: Math.trunc(toFiniteNumber(result?.protocolVersion, 0)),\n\t\t\tarchitectureVersion: Math.trunc(toFiniteNumber(result?.architectureVersion, 0)),\n\t\t\tinvariants: Array.isArray(result?.invariants)\n\t\t\t\t? result.invariants.filter((value: unknown): value is string => typeof value === \"string\")\n\t\t\t\t: [],\n\t\t\tpid: Math.trunc(toFiniteNumber(result?.pid, 0)),\n\t\t\tparentPid: Math.trunc(toFiniteNumber(result?.parentPid, 0)) || undefined,\n\t\t\tparentAppName: toOptionalString(result?.parentAppName),\n\t\t\tparentBundleId: toOptionalString(result?.parentBundleId),\n\t\t\tparentPath: toOptionalString(result?.parentPath),\n\t\t\texecutablePath: toOptionalString(result?.executablePath),\n\t\t\tos: toOptionalString(result?.macOS),\n\t\t\tarch: toOptionalString(result?.arch),\n\t\t\taccessibility: toBoolean(result?.accessibility),\n\t\t\tscreenRecording: toBoolean(result?.screenRecording),\n\t\t};\n\t\tthis.diagnosticsCache = diagnostics;\n\t\treturn diagnostics;\n\t}\n\n\tasync ensureProtocol(signal?: AbortSignal): Promise<PlatformDiagnostics> {\n\t\tlet diagnostics = await this.diagnosticsCommand(signal);\n\t\tconst executableMatches = await isResolvedHelperExecutable(diagnostics.executablePath);\n\t\tif (diagnostics.protocolVersion === HELPER_PROTOCOL_VERSION && executableMatches) return diagnostics;\n\n\t\t// The helper daemon outlives Pi, so restarting/reloading Pi alone does not\n\t\t// replace a stale daemon or one launched from the legacy system location.\n\t\t// Stop it through the backwards-compatible command channel and relaunch\n\t\t// the exact app bundle that ensureInstalled() resolved.\n\t\tawait this.restart(signal);\n\t\tdiagnostics = await this.diagnosticsCommand(signal);\n\t\tconst relaunchedExecutableMatches = await isResolvedHelperExecutable(diagnostics.executablePath);\n\t\tif (diagnostics.protocolVersion !== HELPER_PROTOCOL_VERSION || !relaunchedExecutableMatches) {\n\t\t\tthis.daemonAvailable = false;\n\t\t\tthrow new Error(\n\t\t\t\t`ada-computer-use helper mismatch after relaunch: expected protocol ${HELPER_PROTOCOL_VERSION} and executable ${HELPER_APP_EXECUTABLE_PATH}; got protocol ${diagnostics.protocolVersion} and executable ${diagnostics.executablePath ?? \"unknown\"}. Reinstall or rebuild the helper app at ${HELPER_APP_PATH}.`,\n\t\t\t);\n\t\t}\n\t\treturn diagnostics;\n\t}\n}\n\nexport const macosHelper = new MacosHelperClient();\n"]}

package/dist/core/computer/motor/platform/macos/permissions.d.ts

@@ -0,0 +1,4 @@
+import type { ExtensionContext } from "../../../../extensions/types.ts";
+import type { PlatformReadyState } from "../types.ts";
+export declare function ensureMacosReady(ctx: ExtensionContext, state: PlatformReadyState, signal?: AbortSignal): Promise<PlatformReadyState>;
+//# sourceMappingURL=permissions.d.ts.map

package/dist/core/computer/motor/platform/macos/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../../../../src/core/computer/motor/platform/macos/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAIxE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAuFtD,wBAAsB,gBAAgB,CACrC,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,kBAAkB,EACzB,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,kBAAkB,CAAC,CAsD7B","sourcesContent":["import type { ExtensionContext } from \"../../../../extensions/types.ts\";\nimport { ensurePermissions, type PermissionKind, type PermissionStatus } from \"../../permissions.ts\";\nimport { assertPlatformArchitecture } from \"../architecture.ts\";\nimport { toBoolean, toFiniteNumber, toOptionalString } from \"../coerce.ts\";\nimport type { PlatformReadyState } from \"../types.ts\";\nimport { HELPER_APP_PATH, macosHelper } from \"./helper.ts\";\n\nconst GRANT_INSTRUCTIONS =\n\t\"Grant Accessibility and Screen Recording to ada-computer-use.app in System Settings → Privacy & Security. \" +\n\t\"Screen Recording lets the agent see the window; Accessibility lets it interact with the window.\";\n\nconst SIGNING_MIGRATION_WARNING =\n\t\"If these permissions were enabled before this install/update, macOS invalidated the old grants because \" +\n\t\"ada-computer-use.app was re-signed. Re-enable both toggles for the newly signed helper. \" +\n\t\"If a toggle is already on, switch it off and on again.\";\n\nconst macosPermissionKinds = [\n\t{ kind: \"accessibility\" as const, openOption: \"Open Accessibility Settings (missing)\" },\n\t{ kind: \"screenRecording\" as const, openOption: \"Open Screen Recording Settings (missing)\" },\n];\n\nfunction permissionStatusSummary(status: PermissionStatus): string {\n\tconst lines = [\n\t\t`Accessibility: ${status.accessibility ? \"granted\" : \"missing\"}`,\n\t\t`Screen Recording: ${status.screenRecording ? \"granted\" : \"missing\"}`,\n\t];\n\tif (status.screenRecordingPreflight && !status.screenRecording) {\n\t\tlines.push(\n\t\t\t\"(Screen Recording reads granted in the TCC database but a live capture probe failed — \" +\n\t\t\t\t\"the grant likely belongs to a different app identity, or the helper needs a restart.)\",\n\t\t);\n\t}\n\treturn lines.join(\"; \");\n}\n\nfunction permissionPrompt(status: PermissionStatus, helperPath: string, hint?: string): string {\n\treturn [\n\t\t\"ada-computer-use needs macOS permissions for its helper app.\",\n\t\tpermissionStatusSummary(status),\n\t\t\"\",\n\t\t`Helper: ada-computer-use.app (${helperPath})`,\n\t\thint,\n\t\t\"\",\n\t\t`Important: ${SIGNING_MIGRATION_WARNING}`,\n\t\t\"\",\n\t\t\"ada-computer-use.app is already listed in the pane(s) — enable its toggle, then choose Recheck.\",\n\t]\n\t\t.filter(Boolean)\n\t\t.join(\"\\n\");\n}\n\nfunction missingPermissionMessage(kinds: PermissionKind[]): string {\n\treturn `Still missing after restart: ${kinds.join(\" and \")}. ${SIGNING_MIGRATION_WARNING} Then choose Recheck again.`;\n}\n\nasync function checkPermissions(signal?: AbortSignal): Promise<PermissionStatus> {\n\tconst result = await macosHelper.command<any>(\"checkPermissions\", {}, { signal });\n\tconst rawSource = result?.source;\n\treturn {\n\t\taccessibility: toBoolean(result?.accessibility),\n\t\t// Authoritative: the helper's live ScreenCaptureKit probe.\n\t\tscreenRecording: toBoolean(result?.screenRecordingCapturable),\n\t\t// Keep the preflight value separate: disagreement means stale per-process\n\t\t// TCC cache or a grant row belonging to another app identity.\n\t\tscreenRecordingPreflight: toBoolean(result?.screenRecordingPreflight),\n\t\tsource:\n\t\t\trawSource && typeof rawSource === \"object\"\n\t\t\t\t? {\n\t\t\t\t\t\t// macOS attributes Accessibility / Screen Recording grants to the\n\t\t\t\t\t\t// responsible process at the top of the launch chain. \"helper-app\"\n\t\t\t\t\t\t// is the canonical installed app via LaunchServices; \"caller\" means\n\t\t\t\t\t\t// grants would attach to the launching app instead.\n\t\t\t\t\t\tattribution: rawSource.attribution === \"helper-app\" ? \"helper-app\" : \"caller\",\n\t\t\t\t\t\tpid: Math.trunc(toFiniteNumber(rawSource.pid, 0)) || undefined,\n\t\t\t\t\t\tparentPid: Math.trunc(toFiniteNumber(rawSource.parentPid, 0)) || undefined,\n\t\t\t\t\t\texecutablePath: toOptionalString(rawSource.executablePath),\n\t\t\t\t\t\tparentPath: toOptionalString(rawSource.parentPath),\n\t\t\t\t\t\tparentBundleId: toOptionalString(rawSource.parentBundleId),\n\t\t\t\t\t\tos: toOptionalString(rawSource.macOS),\n\t\t\t\t\t}\n\t\t\t\t: undefined,\n\t};\n}\n\nasync function registerPermissions(signal?: AbortSignal): Promise<void> {\n\t// Raises the Accessibility prompt and performs a real ScreenCaptureKit\n\t// capture attempt so ada-computer-use.app is pre-listed in both Settings\n\t// panes; the user only flips toggles, no \"+\" path picking.\n\tawait macosHelper.command(\"registerPermissions\", {}, { signal, timeoutMs: 15_000 });\n}\n\nexport async function ensureMacosReady(\n\tctx: ExtensionContext,\n\tstate: PlatformReadyState,\n\tsignal?: AbortSignal,\n): Promise<PlatformReadyState> {\n\tawait macosHelper.ensureInstalled(signal);\n\tif (!(await macosHelper.ensureDaemon(signal))) {\n\t\tthrow new Error(`ada-computer-use helper app daemon did not start. Helper app: ${HELPER_APP_PATH}`);\n\t}\n\tconst helperDiagnostics = await macosHelper.ensureProtocol(signal);\n\tassertPlatformArchitecture(\"macOS\", helperDiagnostics);\n\n\tconst now = Date.now();\n\tconst cachedStatus = state.permissionStatus;\n\tconst canUseCachedPermissions =\n\t\tcachedStatus?.accessibility && cachedStatus.screenRecording && now - state.lastPermissionCheckAt < 2_000;\n\tif (canUseCachedPermissions) {\n\t\treturn { ...state, helperDiagnostics };\n\t}\n\n\tlet permissionStatus = await checkPermissions(signal);\n\tlet lastPermissionCheckAt = now;\n\n\tif (!permissionStatus.accessibility || !permissionStatus.screenRecording) {\n\t\t// Attribution \"caller\" means the helper is not running as the\n\t\t// canonical installed app — grants would attach to the wrong identity.\n\t\tconst attributionHint =\n\t\t\tpermissionStatus.source?.attribution === \"caller\"\n\t\t\t\t? `Warning: the helper is not running as the installed ada-computer-use.app (executable: ${permissionStatus.source?.executablePath ?? \"unknown\"}). Grants made now would attach to the launching app instead. Restart Pi so the canonical helper is used.`\n\t\t\t\t: undefined;\n\t\tpermissionStatus = await ensurePermissions(\n\t\t\tctx,\n\t\t\t{\n\t\t\t\tkinds: macosPermissionKinds,\n\t\t\t\tcopy: {\n\t\t\t\t\tnonInteractiveError: (helperPath) =>\n\t\t\t\t\t\t`ada-computer-use setup requires an interactive session. Start pi in interactive mode. ${GRANT_INSTRUCTIONS}\\nHelper path: ${helperPath}`,\n\t\t\t\t\tprompt: permissionPrompt,\n\t\t\t\t\tincompleteError: (helperPath) =>\n\t\t\t\t\t\t`ada-computer-use setup is incomplete. ${GRANT_INSTRUCTIONS} Helper path: ${helperPath}`,\n\t\t\t\t\treadyMessage: \"ada-computer-use is ready.\",\n\t\t\t\t\tstillMissing: missingPermissionMessage,\n\t\t\t\t},\n\t\t\t\tcheckPermissions: (permissionSignal) => checkPermissions(permissionSignal ?? signal),\n\t\t\t\tregisterPermissions: (permissionSignal) => registerPermissions(permissionSignal ?? signal),\n\t\t\t\topenPermissionPane: async (kind, permissionSignal) => {\n\t\t\t\t\tawait macosHelper.command(\"openPermissionPane\", { kind }, { signal: permissionSignal ?? signal });\n\t\t\t\t},\n\t\t\t\trestartHelper: (permissionSignal) => macosHelper.restart(permissionSignal ?? signal),\n\t\t\t\tpermissionHint: attributionHint,\n\t\t\t},\n\t\t\tHELPER_APP_PATH,\n\t\t\tsignal,\n\t\t);\n\t\tlastPermissionCheckAt = Date.now();\n\t}\n\n\treturn { permissionStatus, lastPermissionCheckAt, helperDiagnostics };\n}\n"]}

package/dist/core/computer/motor/platform/macos/permissions.js

@@ -0,0 +1,118 @@
+import { ensurePermissions } from "../../permissions.js";
+import { assertPlatformArchitecture } from "../architecture.js";
+import { toBoolean, toFiniteNumber, toOptionalString } from "../coerce.js";
+import { HELPER_APP_PATH, macosHelper } from "./helper.js";
+const GRANT_INSTRUCTIONS = "Grant Accessibility and Screen Recording to ada-computer-use.app in System Settings → Privacy & Security. " +
+    "Screen Recording lets the agent see the window; Accessibility lets it interact with the window.";
+const SIGNING_MIGRATION_WARNING = "If these permissions were enabled before this install/update, macOS invalidated the old grants because " +
+    "ada-computer-use.app was re-signed. Re-enable both toggles for the newly signed helper. " +
+    "If a toggle is already on, switch it off and on again.";
+const macosPermissionKinds = [
+    { kind: "accessibility", openOption: "Open Accessibility Settings (missing)" },
+    { kind: "screenRecording", openOption: "Open Screen Recording Settings (missing)" },
+];
+function permissionStatusSummary(status) {
+    const lines = [
+        `Accessibility: ${status.accessibility ? "granted" : "missing"}`,
+        `Screen Recording: ${status.screenRecording ? "granted" : "missing"}`,
+    ];
+    if (status.screenRecordingPreflight && !status.screenRecording) {
+        lines.push("(Screen Recording reads granted in the TCC database but a live capture probe failed — " +
+            "the grant likely belongs to a different app identity, or the helper needs a restart.)");
+    }
+    return lines.join("; ");
+}
+function permissionPrompt(status, helperPath, hint) {
+    return [
+        "ada-computer-use needs macOS permissions for its helper app.",
+        permissionStatusSummary(status),
+        "",
+        `Helper: ada-computer-use.app (${helperPath})`,
+        hint,
+        "",
+        `Important: ${SIGNING_MIGRATION_WARNING}`,
+        "",
+        "ada-computer-use.app is already listed in the pane(s) — enable its toggle, then choose Recheck.",
+    ]
+        .filter(Boolean)
+        .join("\n");
+}
+function missingPermissionMessage(kinds) {
+    return `Still missing after restart: ${kinds.join(" and ")}. ${SIGNING_MIGRATION_WARNING} Then choose Recheck again.`;
+}
+async function checkPermissions(signal) {
+    const result = await macosHelper.command("checkPermissions", {}, { signal });
+    const rawSource = result?.source;
+    return {
+        accessibility: toBoolean(result?.accessibility),
+        // Authoritative: the helper's live ScreenCaptureKit probe.
+        screenRecording: toBoolean(result?.screenRecordingCapturable),
+        // Keep the preflight value separate: disagreement means stale per-process
+        // TCC cache or a grant row belonging to another app identity.
+        screenRecordingPreflight: toBoolean(result?.screenRecordingPreflight),
+        source: rawSource && typeof rawSource === "object"
+            ? {
+                // macOS attributes Accessibility / Screen Recording grants to the
+                // responsible process at the top of the launch chain. "helper-app"
+                // is the canonical installed app via LaunchServices; "caller" means
+                // grants would attach to the launching app instead.
+                attribution: rawSource.attribution === "helper-app" ? "helper-app" : "caller",
+                pid: Math.trunc(toFiniteNumber(rawSource.pid, 0)) || undefined,
+                parentPid: Math.trunc(toFiniteNumber(rawSource.parentPid, 0)) || undefined,
+                executablePath: toOptionalString(rawSource.executablePath),
+                parentPath: toOptionalString(rawSource.parentPath),
+                parentBundleId: toOptionalString(rawSource.parentBundleId),
+                os: toOptionalString(rawSource.macOS),
+            }
+            : undefined,
+    };
+}
+async function registerPermissions(signal) {
+    // Raises the Accessibility prompt and performs a real ScreenCaptureKit
+    // capture attempt so ada-computer-use.app is pre-listed in both Settings
+    // panes; the user only flips toggles, no "+" path picking.
+    await macosHelper.command("registerPermissions", {}, { signal, timeoutMs: 15_000 });
+}
+export async function ensureMacosReady(ctx, state, signal) {
+    await macosHelper.ensureInstalled(signal);
+    if (!(await macosHelper.ensureDaemon(signal))) {
+        throw new Error(`ada-computer-use helper app daemon did not start. Helper app: ${HELPER_APP_PATH}`);
+    }
+    const helperDiagnostics = await macosHelper.ensureProtocol(signal);
+    assertPlatformArchitecture("macOS", helperDiagnostics);
+    const now = Date.now();
+    const cachedStatus = state.permissionStatus;
+    const canUseCachedPermissions = cachedStatus?.accessibility && cachedStatus.screenRecording && now - state.lastPermissionCheckAt < 2_000;
+    if (canUseCachedPermissions) {
+        return { ...state, helperDiagnostics };
+    }
+    let permissionStatus = await checkPermissions(signal);
+    let lastPermissionCheckAt = now;
+    if (!permissionStatus.accessibility || !permissionStatus.screenRecording) {
+        // Attribution "caller" means the helper is not running as the
+        // canonical installed app — grants would attach to the wrong identity.
+        const attributionHint = permissionStatus.source?.attribution === "caller"
+            ? `Warning: the helper is not running as the installed ada-computer-use.app (executable: ${permissionStatus.source?.executablePath ?? "unknown"}). Grants made now would attach to the launching app instead. Restart Pi so the canonical helper is used.`
+            : undefined;
+        permissionStatus = await ensurePermissions(ctx, {
+            kinds: macosPermissionKinds,
+            copy: {
+                nonInteractiveError: (helperPath) => `ada-computer-use setup requires an interactive session. Start pi in interactive mode. ${GRANT_INSTRUCTIONS}\nHelper path: ${helperPath}`,
+                prompt: permissionPrompt,
+                incompleteError: (helperPath) => `ada-computer-use setup is incomplete. ${GRANT_INSTRUCTIONS} Helper path: ${helperPath}`,
+                readyMessage: "ada-computer-use is ready.",
+                stillMissing: missingPermissionMessage,
+            },
+            checkPermissions: (permissionSignal) => checkPermissions(permissionSignal ?? signal),
+            registerPermissions: (permissionSignal) => registerPermissions(permissionSignal ?? signal),
+            openPermissionPane: async (kind, permissionSignal) => {
+                await macosHelper.command("openPermissionPane", { kind }, { signal: permissionSignal ?? signal });
+            },
+            restartHelper: (permissionSignal) => macosHelper.restart(permissionSignal ?? signal),
+            permissionHint: attributionHint,
+        }, HELPER_APP_PATH, signal);
+        lastPermissionCheckAt = Date.now();
+    }
+    return { permissionStatus, lastPermissionCheckAt, helperDiagnostics };
+}
+//# sourceMappingURL=permissions.js.map

package/dist/core/computer/motor/platform/macos/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../../../../../src/core/computer/motor/platform/macos/permissions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAA8C,MAAM,sBAAsB,CAAC;AACrG,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAE3E,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE3D,MAAM,kBAAkB,GACvB,8GAA4G;IAC5G,iGAAiG,CAAC;AAEnG,MAAM,yBAAyB,GAC9B,yGAAyG;IACzG,0FAA0F;IAC1F,wDAAwD,CAAC;AAE1D,MAAM,oBAAoB,GAAG;IAC5B,EAAE,IAAI,EAAE,eAAwB,EAAE,UAAU,EAAE,uCAAuC,EAAE;IACvF,EAAE,IAAI,EAAE,iBAA0B,EAAE,UAAU,EAAE,0CAA0C,EAAE;CAC5F,CAAC;AAEF,SAAS,uBAAuB,CAAC,MAAwB,EAAU;IAClE,MAAM,KAAK,GAAG;QACb,kBAAkB,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE;QAChE,qBAAqB,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE;KACrE,CAAC;IACF,IAAI,MAAM,CAAC,wBAAwB,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QAChE,KAAK,CAAC,IAAI,CACT,0FAAwF;YACvF,uFAAuF,CACxF,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAAA,CACxB;AAED,SAAS,gBAAgB,CAAC,MAAwB,EAAE,UAAkB,EAAE,IAAa,EAAU;IAC9F,OAAO;QACN,8DAA8D;QAC9D,uBAAuB,CAAC,MAAM,CAAC;QAC/B,EAAE;QACF,iCAAiC,UAAU,GAAG;QAC9C,IAAI;QACJ,EAAE;QACF,cAAc,yBAAyB,EAAE;QACzC,EAAE;QACF,mGAAiG;KACjG;SACC,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;AAAA,CACb;AAED,SAAS,wBAAwB,CAAC,KAAuB,EAAU;IAClE,OAAO,gCAAgC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,yBAAyB,6BAA6B,CAAC;AAAA,CACtH;AAED,KAAK,UAAU,gBAAgB,CAAC,MAAoB,EAA6B;IAChF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAM,kBAAkB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,MAAM,EAAE,MAAM,CAAC;IACjC,OAAO;QACN,aAAa,EAAE,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC;QAC/C,2DAA2D;QAC3D,eAAe,EAAE,SAAS,CAAC,MAAM,EAAE,yBAAyB,CAAC;QAC7D,0EAA0E;QAC1E,8DAA8D;QAC9D,wBAAwB,EAAE,SAAS,CAAC,MAAM,EAAE,wBAAwB,CAAC;QACrE,MAAM,EACL,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;YACzC,CAAC,CAAC;gBACA,kEAAkE;gBAClE,mEAAmE;gBACnE,oEAAoE;gBACpE,oDAAoD;gBACpD,WAAW,EAAE,SAAS,CAAC,WAAW,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ;gBAC7E,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS;gBAC9D,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS;gBAC1E,cAAc,EAAE,gBAAgB,CAAC,SAAS,CAAC,cAAc,CAAC;gBAC1D,UAAU,EAAE,gBAAgB,CAAC,SAAS,CAAC,UAAU,CAAC;gBAClD,cAAc,EAAE,gBAAgB,CAAC,SAAS,CAAC,cAAc,CAAC;gBAC1D,EAAE,EAAE,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC;aACrC;YACF,CAAC,CAAC,SAAS;KACb,CAAC;AAAA,CACF;AAED,KAAK,UAAU,mBAAmB,CAAC,MAAoB,EAAiB;IACvE,uEAAuE;IACvE,yEAAyE;IACzE,2DAA2D;IAC3D,MAAM,WAAW,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;AAAA,CACpF;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,GAAqB,EACrB,KAAyB,EACzB,MAAoB,EACU;IAC9B,MAAM,WAAW,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,iEAAiE,eAAe,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,iBAAiB,GAAG,MAAM,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACnE,0BAA0B,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAEvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,YAAY,GAAG,KAAK,CAAC,gBAAgB,CAAC;IAC5C,MAAM,uBAAuB,GAC5B,YAAY,EAAE,aAAa,IAAI,YAAY,CAAC,eAAe,IAAI,GAAG,GAAG,KAAK,CAAC,qBAAqB,GAAG,KAAK,CAAC;IAC1G,IAAI,uBAAuB,EAAE,CAAC;QAC7B,OAAO,EAAE,GAAG,KAAK,EAAE,iBAAiB,EAAE,CAAC;IACxC,CAAC;IAED,IAAI,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,qBAAqB,GAAG,GAAG,CAAC;IAEhC,IAAI,CAAC,gBAAgB,CAAC,aAAa,IAAI,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC;QAC1E,8DAA8D;QAC9D,yEAAuE;QACvE,MAAM,eAAe,GACpB,gBAAgB,CAAC,MAAM,EAAE,WAAW,KAAK,QAAQ;YAChD,CAAC,CAAC,yFAAyF,gBAAgB,CAAC,MAAM,EAAE,cAAc,IAAI,SAAS,2GAA2G;YAC1P,CAAC,CAAC,SAAS,CAAC;QACd,gBAAgB,GAAG,MAAM,iBAAiB,CACzC,GAAG,EACH;YACC,KAAK,EAAE,oBAAoB;YAC3B,IAAI,EAAE;gBACL,mBAAmB,EAAE,CAAC,UAAU,EAAE,EAAE,CACnC,yFAAyF,kBAAkB,kBAAkB,UAAU,EAAE;gBAC1I,MAAM,EAAE,gBAAgB;gBACxB,eAAe,EAAE,CAAC,UAAU,EAAE,EAAE,CAC/B,yCAAyC,kBAAkB,iBAAiB,UAAU,EAAE;gBACzF,YAAY,EAAE,4BAA4B;gBAC1C,YAAY,EAAE,wBAAwB;aACtC;YACD,gBAAgB,EAAE,CAAC,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,gBAAgB,IAAI,MAAM,CAAC;YACpF,mBAAmB,EAAE,CAAC,gBAAgB,EAAE,EAAE,CAAC,mBAAmB,CAAC,gBAAgB,IAAI,MAAM,CAAC;YAC1F,kBAAkB,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CAAC;gBACrD,MAAM,WAAW,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,gBAAgB,IAAI,MAAM,EAAE,CAAC,CAAC;YAAA,CAClG;YACD,aAAa,EAAE,CAAC,gBAAgB,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC;YACpF,cAAc,EAAE,eAAe;SAC/B,EACD,eAAe,EACf,MAAM,CACN,CAAC;QACF,qBAAqB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACpC,CAAC;IAED,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,CAAC;AAAA,CACtE","sourcesContent":["import type { ExtensionContext } from \"../../../../extensions/types.ts\";\nimport { ensurePermissions, type PermissionKind, type PermissionStatus } from \"../../permissions.ts\";\nimport { assertPlatformArchitecture } from \"../architecture.ts\";\nimport { toBoolean, toFiniteNumber, toOptionalString } from \"../coerce.ts\";\nimport type { PlatformReadyState } from \"../types.ts\";\nimport { HELPER_APP_PATH, macosHelper } from \"./helper.ts\";\n\nconst GRANT_INSTRUCTIONS =\n\t\"Grant Accessibility and Screen Recording to ada-computer-use.app in System Settings → Privacy & Security. \" +\n\t\"Screen Recording lets the agent see the window; Accessibility lets it interact with the window.\";\n\nconst SIGNING_MIGRATION_WARNING =\n\t\"If these permissions were enabled before this install/update, macOS invalidated the old grants because \" +\n\t\"ada-computer-use.app was re-signed. Re-enable both toggles for the newly signed helper. \" +\n\t\"If a toggle is already on, switch it off and on again.\";\n\nconst macosPermissionKinds = [\n\t{ kind: \"accessibility\" as const, openOption: \"Open Accessibility Settings (missing)\" },\n\t{ kind: \"screenRecording\" as const, openOption: \"Open Screen Recording Settings (missing)\" },\n];\n\nfunction permissionStatusSummary(status: PermissionStatus): string {\n\tconst lines = [\n\t\t`Accessibility: ${status.accessibility ? \"granted\" : \"missing\"}`,\n\t\t`Screen Recording: ${status.screenRecording ? \"granted\" : \"missing\"}`,\n\t];\n\tif (status.screenRecordingPreflight && !status.screenRecording) {\n\t\tlines.push(\n\t\t\t\"(Screen Recording reads granted in the TCC database but a live capture probe failed — \" +\n\t\t\t\t\"the grant likely belongs to a different app identity, or the helper needs a restart.)\",\n\t\t);\n\t}\n\treturn lines.join(\"; \");\n}\n\nfunction permissionPrompt(status: PermissionStatus, helperPath: string, hint?: string): string {\n\treturn [\n\t\t\"ada-computer-use needs macOS permissions for its helper app.\",\n\t\tpermissionStatusSummary(status),\n\t\t\"\",\n\t\t`Helper: ada-computer-use.app (${helperPath})`,\n\t\thint,\n\t\t\"\",\n\t\t`Important: ${SIGNING_MIGRATION_WARNING}`,\n\t\t\"\",\n\t\t\"ada-computer-use.app is already listed in the pane(s) — enable its toggle, then choose Recheck.\",\n\t]\n\t\t.filter(Boolean)\n\t\t.join(\"\\n\");\n}\n\nfunction missingPermissionMessage(kinds: PermissionKind[]): string {\n\treturn `Still missing after restart: ${kinds.join(\" and \")}. ${SIGNING_MIGRATION_WARNING} Then choose Recheck again.`;\n}\n\nasync function checkPermissions(signal?: AbortSignal): Promise<PermissionStatus> {\n\tconst result = await macosHelper.command<any>(\"checkPermissions\", {}, { signal });\n\tconst rawSource = result?.source;\n\treturn {\n\t\taccessibility: toBoolean(result?.accessibility),\n\t\t// Authoritative: the helper's live ScreenCaptureKit probe.\n\t\tscreenRecording: toBoolean(result?.screenRecordingCapturable),\n\t\t// Keep the preflight value separate: disagreement means stale per-process\n\t\t// TCC cache or a grant row belonging to another app identity.\n\t\tscreenRecordingPreflight: toBoolean(result?.screenRecordingPreflight),\n\t\tsource:\n\t\t\trawSource && typeof rawSource === \"object\"\n\t\t\t\t? {\n\t\t\t\t\t\t// macOS attributes Accessibility / Screen Recording grants to the\n\t\t\t\t\t\t// responsible process at the top of the launch chain. \"helper-app\"\n\t\t\t\t\t\t// is the canonical installed app via LaunchServices; \"caller\" means\n\t\t\t\t\t\t// grants would attach to the launching app instead.\n\t\t\t\t\t\tattribution: rawSource.attribution === \"helper-app\" ? \"helper-app\" : \"caller\",\n\t\t\t\t\t\tpid: Math.trunc(toFiniteNumber(rawSource.pid, 0)) || undefined,\n\t\t\t\t\t\tparentPid: Math.trunc(toFiniteNumber(rawSource.parentPid, 0)) || undefined,\n\t\t\t\t\t\texecutablePath: toOptionalString(rawSource.executablePath),\n\t\t\t\t\t\tparentPath: toOptionalString(rawSource.parentPath),\n\t\t\t\t\t\tparentBundleId: toOptionalString(rawSource.parentBundleId),\n\t\t\t\t\t\tos: toOptionalString(rawSource.macOS),\n\t\t\t\t\t}\n\t\t\t\t: undefined,\n\t};\n}\n\nasync function registerPermissions(signal?: AbortSignal): Promise<void> {\n\t// Raises the Accessibility prompt and performs a real ScreenCaptureKit\n\t// capture attempt so ada-computer-use.app is pre-listed in both Settings\n\t// panes; the user only flips toggles, no \"+\" path picking.\n\tawait macosHelper.command(\"registerPermissions\", {}, { signal, timeoutMs: 15_000 });\n}\n\nexport async function ensureMacosReady(\n\tctx: ExtensionContext,\n\tstate: PlatformReadyState,\n\tsignal?: AbortSignal,\n): Promise<PlatformReadyState> {\n\tawait macosHelper.ensureInstalled(signal);\n\tif (!(await macosHelper.ensureDaemon(signal))) {\n\t\tthrow new Error(`ada-computer-use helper app daemon did not start. Helper app: ${HELPER_APP_PATH}`);\n\t}\n\tconst helperDiagnostics = await macosHelper.ensureProtocol(signal);\n\tassertPlatformArchitecture(\"macOS\", helperDiagnostics);\n\n\tconst now = Date.now();\n\tconst cachedStatus = state.permissionStatus;\n\tconst canUseCachedPermissions =\n\t\tcachedStatus?.accessibility && cachedStatus.screenRecording && now - state.lastPermissionCheckAt < 2_000;\n\tif (canUseCachedPermissions) {\n\t\treturn { ...state, helperDiagnostics };\n\t}\n\n\tlet permissionStatus = await checkPermissions(signal);\n\tlet lastPermissionCheckAt = now;\n\n\tif (!permissionStatus.accessibility || !permissionStatus.screenRecording) {\n\t\t// Attribution \"caller\" means the helper is not running as the\n\t\t// canonical installed app — grants would attach to the wrong identity.\n\t\tconst attributionHint =\n\t\t\tpermissionStatus.source?.attribution === \"caller\"\n\t\t\t\t? `Warning: the helper is not running as the installed ada-computer-use.app (executable: ${permissionStatus.source?.executablePath ?? \"unknown\"}). Grants made now would attach to the launching app instead. Restart Pi so the canonical helper is used.`\n\t\t\t\t: undefined;\n\t\tpermissionStatus = await ensurePermissions(\n\t\t\tctx,\n\t\t\t{\n\t\t\t\tkinds: macosPermissionKinds,\n\t\t\t\tcopy: {\n\t\t\t\t\tnonInteractiveError: (helperPath) =>\n\t\t\t\t\t\t`ada-computer-use setup requires an interactive session. Start pi in interactive mode. ${GRANT_INSTRUCTIONS}\\nHelper path: ${helperPath}`,\n\t\t\t\t\tprompt: permissionPrompt,\n\t\t\t\t\tincompleteError: (helperPath) =>\n\t\t\t\t\t\t`ada-computer-use setup is incomplete. ${GRANT_INSTRUCTIONS} Helper path: ${helperPath}`,\n\t\t\t\t\treadyMessage: \"ada-computer-use is ready.\",\n\t\t\t\t\tstillMissing: missingPermissionMessage,\n\t\t\t\t},\n\t\t\t\tcheckPermissions: (permissionSignal) => checkPermissions(permissionSignal ?? signal),\n\t\t\t\tregisterPermissions: (permissionSignal) => registerPermissions(permissionSignal ?? signal),\n\t\t\t\topenPermissionPane: async (kind, permissionSignal) => {\n\t\t\t\t\tawait macosHelper.command(\"openPermissionPane\", { kind }, { signal: permissionSignal ?? signal });\n\t\t\t\t},\n\t\t\t\trestartHelper: (permissionSignal) => macosHelper.restart(permissionSignal ?? signal),\n\t\t\t\tpermissionHint: attributionHint,\n\t\t\t},\n\t\t\tHELPER_APP_PATH,\n\t\t\tsignal,\n\t\t);\n\t\tlastPermissionCheckAt = Date.now();\n\t}\n\n\treturn { permissionStatus, lastPermissionCheckAt, helperDiagnostics };\n}\n"]}