@minhspark/codex-mcp-bridge 1.27.1 → 2.0.0

package/src/native-relay-companion.mjs

@@ -35,7 +35,7 @@ import { createRuntimeState } from "./runtime-state.mjs";
 import { hardenedBridgeEnabled } from "./hardened-root-policy.mjs";
 import { protectCurrentUserPipe } from "./windows-pipe-acl.mjs";
 import { createHardenedRootPolicy } from "./hardened-root-policy.mjs";
-import { removeRelayFile, relayFileIdentity, verifyRelaySocketMode } from "./native-relay-files.mjs";
+import { releasePrivateSocketLinks, removeRelayFile, relayFileIdentity, staleSocketIdentity, verifyRelaySocketMode } from "./native-relay-files.mjs";
 
 import { NativeCreationReceipts, creationIdValid } from "./native-creation-receipts.mjs";
 import { registerRemoteCodexTools } from "./remote-codex-tools.mjs";
@@ -43,7 +43,7 @@ import { remoteCodexSocketPath, remoteNativeAdapter, remoteRequestResponse } fro
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.27.1";
+const VERSION = "2.0.0";
 const log = (msg) => process.stderr.write(`[native-relay] ${msg}\n`);
 
 function errorResponse(code, message, sent, details) {
@@ -565,9 +565,13 @@ export class RelaySocketServer {
         try { fs.linkSync(privatePath, this.socketPath); break; }
         catch (error) {
           if (error.code !== "EEXIST") throw error;
-          if (!replaceStale || attempt || await this.#socketIsLive()) throw new Error(`another native relay companion already owns ${this.socketPath}`);
+          if (!replaceStale || attempt) throw new Error(`another native relay companion already owns ${this.socketPath}`);
+          const stale = staleSocketIdentity(this.socketPath);
+          if (stale === null) continue;
+          if (await this.#socketIsLive()) throw new Error(`another native relay companion already owns ${this.socketPath}`);
           this.log(`removing the stale relay socket left at ${this.socketPath}`);
-          removeRelayFile(this.socketPath);
+          releasePrivateSocketLinks(this.socketPath, stale);
+          removeRelayFile(this.socketPath, { expected: stale });
         }
       }
       const identity = fs.lstatSync(this.socketPath, { bigint: true });

package/src/native-relay-files.mjs

@@ -17,6 +17,49 @@ export function relayFileIdentity(target, kind, expected) {
   return current;
 }
 
+const PRIVATE_SOCKET_LINK = /^\.[0-9a-f]{12}\.sock$/;
+
+const ownedSocket = (stat) => stat.isSocket() && (typeof process.getuid !== "function" || stat.uid === BigInt(process.getuid()));
+
+export function staleSocketIdentity(target) {
+  let root;
+  try { root = fs.realpathSync.native(path.dirname(target)); }
+  catch (error) { if (error.code === "ENOENT") return null; throw error; }
+  const file = path.resolve(root, path.basename(target));
+  if (!file.startsWith(root.endsWith(path.sep) ? root : `${root}${path.sep}`)) throw new Error("Relay file escaped its directory");
+  let current;
+  try { current = fs.lstatSync(file, { bigint: true }); }
+  catch (error) { if (error.code === "ENOENT") return null; throw error; }
+  if (!ownedSocket(current)) throw new Error(`Unsafe relay socket file: ${target}`);
+  return { dev: current.dev, ino: current.ino };
+}
+
+export function releasePrivateSocketLinks(target, expected) {
+  let root;
+  try { root = fs.realpathSync.native(path.dirname(target)); }
+  catch (error) { if (error.code === "ENOENT") return 0; throw error; }
+  const prefix = root.endsWith(path.sep) ? root : `${root}${path.sep}`;
+  const file = path.resolve(root, path.basename(target));
+  if (!file.startsWith(prefix)) throw new Error("Relay file escaped its directory");
+  let current;
+  try { current = fs.lstatSync(file, { bigint: true }); }
+  catch (error) { if (error.code === "ENOENT") return 0; throw error; }
+  if (current.nlink === 1n || !ownedSocket(current) || current.dev !== expected.dev || current.ino !== expected.ino) return 0;
+  let released = 0;
+  for (const name of fs.readdirSync(root)) {
+    if (!PRIVATE_SOCKET_LINK.test(name)) continue;
+    const link = path.resolve(root, name);
+    if (!link.startsWith(prefix)) continue;
+    let stat;
+    try { stat = fs.lstatSync(link, { bigint: true }); }
+    catch (error) { if (error.code === "ENOENT") continue; throw error; }
+    if (!ownedSocket(stat) || stat.dev !== current.dev || stat.ino !== current.ino) continue;
+    fs.unlinkSync(link);
+    released += 1;
+  }
+  return released;
+}
+
 export function removeRelayFile(target, { kind = "socket", directory = path.dirname(target), expected } = {}) {
   let root;
   try { root = fs.realpathSync.native(directory); }

package/src/peer-protocol.mjs

@@ -324,29 +324,6 @@ export function readTranscript(sessionId, cwd, limit = 10) {
   return { file, messages: messages.slice(-limit) };
 }
 
-export function readInitialTranscriptMessage(sessionId, cwd) {
-  const file = findTranscriptFile(sessionId, cwd);
-  if (!file || !fs.existsSync(file)) return { file, messages: [] };
-  const descriptor = fs.openSync(file, fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW ?? 0));
-  try {
-    const stat = fs.fstatSync(descriptor);
-    if (!stat.isFile()) return { file, messages: [] };
-    const buffer = Buffer.alloc(Math.min(stat.size, 1024 * 1024));
-    const bytes = fs.readSync(descriptor, buffer, 0, buffer.length, 0);
-    const text = buffer.subarray(0, bytes).toString("utf8");
-    for (const line of text.slice(0, text.lastIndexOf("\n") + 1).split("\n")) {
-      if (!line.trim()) continue;
-      let entry;
-      try { entry = JSON.parse(line); } catch { return { file, messages: [] }; }
-      if (entry.isMeta || entry.isSidechain || entry.message?.role !== "user") continue;
-      const content = entry.message.content;
-      const initial = (Array.isArray(content) ? content.filter((part) => part?.type === "text").map((part) => part.text ?? "").join("\n") : String(content ?? "")).trim();
-      return { file, messages: initial ? [{ role: "user", text: initial }] : [] };
-    }
-    return { file, messages: [] };
-  } finally { fs.closeSync(descriptor); }
-}
-
 /**
  * Claude Code records an injected peer message in one of two shapes. An idle
  * recipient starts a new turn with a user entry whose uuid is the message id

package/src/platform.mjs

@@ -561,23 +561,3 @@ export async function openThreadInCodexApp(threadId, { activate = true, platform
   await run("open", args, { timeout: 10000 });
   return url;
 }
-
-export async function openClaudeCodeComposer(url, { platform = process.platform, env = process.env, run = execFileAsync } = {}) {
-  const parsed = new URL(url);
-  const keys = parsed.pathname === "/continue" ? ["session"] : ["q", "folder"];
-  if (parsed.protocol !== "claude:" || parsed.hostname !== "code" || !["/new", "/continue"].includes(parsed.pathname) || parsed.username || parsed.password || parsed.port || parsed.hash
-      || [...parsed.searchParams.keys()].some((key) => !keys.includes(key) || parsed.searchParams.getAll(key).length !== 1)
-      || (parsed.pathname === "/continue" && !/^local_[0-9a-f-]{36}$/i.test(parsed.searchParams.get("session") ?? ""))) {
-    throw new Error("Invalid Claude Desktop Code creation link");
-  }
-  if (platform === "win32") {
-    const shell = windowsPowerShell(env);
-    const encodedUrl = Buffer.from(url, "utf8").toString("base64");
-    const script = String.raw`$ErrorActionPreference='Stop'; $creationUrl=[Text.Encoding]::UTF8.GetString([Convert]::FromBase64String('${encodedUrl}')); try { Start-Process -FilePath $creationUrl -ErrorAction Stop } catch { $desktopPaths=@(Get-Process claude -ErrorAction SilentlyContinue | ForEach-Object { $_.Path } | Where-Object { $_ -match '\\(?:AnthropicClaude\\app-[^\\]+|WindowsApps\\Claude_[^\\]+\\app)\\claude\.exe$' -and (Test-Path -LiteralPath $_) } | Select-Object -Unique); if ($desktopPaths.Count -eq 0 -and $env:LOCALAPPDATA) { $desktopPaths=@(Get-ChildItem -LiteralPath (Join-Path $env:LOCALAPPDATA 'AnthropicClaude') -Directory -Filter 'app-*' -ErrorAction SilentlyContinue | Sort-Object LastWriteTime -Descending | ForEach-Object { Join-Path $_.FullName 'claude.exe' } | Where-Object { Test-Path -LiteralPath $_ } | Select-Object -First 1) }; if ($desktopPaths.Count -ne 1) { throw }; Start-Process -FilePath $desktopPaths[0] -ArgumentList ('"'+$creationUrl+'"') -WindowStyle Hidden -ErrorAction Stop }`;
-    await run(shell, ["-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(script, "utf16le").toString("base64")], { windowsHide: true, timeout: 10000 });
-    return;
-  }
-  const command = platform === "darwin" ? "/usr/bin/open" : platform === "linux" ? "/usr/bin/xdg-open" : null;
-  if (!command) throw new Error("Claude Desktop Code links are unsupported on this platform");
-  await run(command, [url], { windowsHide: true, timeout: 10000 });
-}

package/src/project-onboarding.mjs

@@ -109,7 +109,7 @@ const LIVE_CHECKS = {
   },
   codex: {
     senderDestination: "Each Claude delivery separately verifies the Codex sender, the recipient session, its permission class and the accounts. A project grant does not replace these checks. Check claude_bridge_status in the calling task.",
-    creationTarget: "Creating a new Claude session is confirmed separately through read_claude_creation; this inspection does not open or check one.",
+    creationTarget: "The bridge does not create Claude sessions. The user opens a new session in Claude Desktop; this inspection does not open or check one.",
   },
 };
 

package/src/claude-composer-submit.mjs

@@ -1,102 +0,0 @@
-import { execFile } from "node:child_process";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import { promisify } from "node:util";
-import { setTimeout as delay } from "node:timers/promises";
-
-const execute = promisify(execFile);
-const helperPath = fileURLToPath(new URL("./claude-composer-submit.ps1", import.meta.url));
-
-export async function trustClaudeCodeComposer({ cwd, prompt }, options = {}) {
-  const platform = options.platform ?? process.platform;
-  if (platform !== "win32") return { status: "blocked", reason: "native_workspace_trust_unsupported", platform };
-  if (typeof cwd !== "string" || !path.win32.isAbsolute(cwd)) return { status: "blocked", reason: "absolute_project_path_required" };
-  const payload = Buffer.from(JSON.stringify({ cwd, prompt }), "utf8").toString("base64");
-  try {
-    const result = await (options.run ?? execute)("powershell.exe", ["-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-File", helperPath, "-PayloadBase64", payload, "-Action", "Trust", "-WaitMilliseconds", "8000"], { windowsHide: true, timeout: 12000, encoding: "utf8", maxBuffer: 1024 * 1024 });
-    const trusted = JSON.parse(result.stdout.trim().replace(/^\uFEFF/, ""));
-    if (!["trusted", "absent", "blocked", "uncertain"].includes(trusted?.status)) return { status: "uncertain", reason: "native_workspace_trust_outcome_unknown" };
-    return trusted;
-  } catch { return { status: "uncertain", reason: "native_workspace_trust_outcome_unknown" }; }
-}
-
-export function assessClaudeCodeComposer(snapshot, { prompt, cwd }) {
-  const block = (reason) => ({ status: "blocked", reason });
-  if (!snapshot || !Array.isArray(snapshot.windows) || snapshot.windows.length !== 1) {
-    return block("desktop_window_ambiguous_or_missing");
-  }
-  const window = snapshot.windows[0];
-  if (window.installedDesktop !== true) return block("desktop_process_not_verified");
-  if (snapshot.dialogs?.length) return block("desktop_dialog_requires_attention");
-  if (snapshot.codeSelected !== true) return block("code_mode_not_selected");
-  if (!Array.isArray(snapshot.composers) || snapshot.composers.length !== 1) {
-    return block("composer_ambiguous_or_missing");
-  }
-  const composerText = (text) => typeof text === "string" ? text.replace(/\r\n/g, "\n").split("\n").filter((line) => line !== "").join("\n") : null;
-  if (composerText(snapshot.composers[0].text) !== composerText(prompt)) return block("composer_prompt_mismatch");
-  if (snapshot.worktreeEnabled !== false) return block("original_project_folder_not_verified");
-  if (snapshot.folderCount !== 1 || snapshot.localMode !== true) return block("project_folder_ambiguous_or_remote");
-  if (!Array.isArray(snapshot.selectedFolderPaths) || snapshot.selectedFolderPaths.length !== 1) {
-    return block("selected_project_path_not_verified");
-  }
-  const normalize = (value) => path.win32.normalize(value).replace(/[\\/]+$/, "").toLowerCase();
-  if (typeof snapshot.selectedFolderPaths[0] !== "string" || !path.win32.isAbsolute(snapshot.selectedFolderPaths[0]) || normalize(snapshot.selectedFolderPaths[0]) !== normalize(cwd)) {
-    return block("selected_project_path_mismatch");
-  }
-  if (snapshot.sendButtons?.length !== 1 || snapshot.sendButtons[0].enabled !== true || snapshot.sendButtons[0].invokable !== true) {
-    return block("send_button_ambiguous_disabled_or_unavailable");
-  }
-  return { status: "ready", reason: "exact_composer_and_project_verified", windowId: window.id };
-}
-
-export async function submitClaudeCodeComposer({ prompt, cwd, beforeSubmit }, options = {}) {
-  const platform = options.platform ?? process.platform;
-  if (typeof prompt !== "string" || !prompt.length || typeof cwd !== "string" || !cwd.length) {
-    return { status: "blocked", reason: "prompt_and_project_required" };
-  }
-  if (platform !== "win32") {
-    return { status: "blocked", reason: "native_composer_submission_unsupported", platform };
-  }
-  if (!path.win32.isAbsolute(cwd)) return { status: "blocked", reason: "absolute_project_path_required" };
-  const run = options.run ?? execute;
-  const requestedBudget = options.timeoutMs ?? 20000;
-  const budget = Number.isFinite(requestedBudget) ? Math.max(1000, Math.min(20000, requestedBudget)) : 20000;
-  const started = Date.now();
-  const payload = Buffer.from(JSON.stringify({ prompt, cwd }), "utf8").toString("base64");
-  let attempted = false;
-  try {
-    const call = async (action, windowId) => {
-      const remaining = budget - (Date.now() - started);
-      if (remaining <= 0) throw new Error("Native composer deadline exceeded");
-      const args = ["-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-File", helperPath,
-        "-PayloadBase64", payload, "-Action", action, "-WaitMilliseconds", String(Math.min(8000, remaining - 250))];
-      if (windowId != null) args.push("-ExpectedWindowId", String(windowId));
-      const result = await run("powershell.exe", args, {
-        windowsHide: true, timeout: remaining, maxBuffer: 1024 * 1024, encoding: "utf8",
-      });
-      return JSON.parse(result.stdout.trim().replace(/^\uFEFF/, ""));
-    };
-    const inspection = await call("Inspect");
-    if (inspection.status === "blocked") return { ...inspection, submissionAttempted: false };
-    const assessment = assessClaudeCodeComposer(inspection.snapshot, { prompt, cwd });
-    if (assessment.status !== "ready") return { ...assessment, submissionAttempted: false };
-    if (beforeSubmit) await beforeSubmit();
-    const selection = await call("SelectFolder", assessment.windowId);
-    if (selection.status !== "selected") return { status: "blocked", reason: selection.reason ?? "native_folder_selection_not_confirmed", submissionAttempted: false };
-    await (options.sleep ?? delay)(2000);
-    if (beforeSubmit) await beforeSubmit();
-    attempted = true;
-    const result = await call("Submit", assessment.windowId);
-    if (!["submitted", "blocked", "uncertain"].includes(result.status)) {
-      return { status: "uncertain", reason: "native_submit_result_invalid", submissionAttempted: true };
-    }
-    return { ...result, submissionAttempted: result.status !== "blocked" };
-  } catch (error) {
-    return {
-      status: attempted ? "uncertain" : "blocked",
-      reason: attempted ? "native_submit_outcome_unknown" : "native_accessibility_unavailable",
-      submissionAttempted: attempted,
-      error: error.code ?? error.name ?? "Error",
-    };
-  }
-}

package/src/claude-composer-submit.ps1

@@ -1,211 +0,0 @@
-param(
-    [Parameter(Mandatory = $true)][string]$PayloadBase64,
-    [ValidateSet('Inspect', 'SelectFolder', 'Submit', 'Trust')][string]$Action = 'Inspect',
-    [int]$WaitMilliseconds = 8000,
-    [long]$ExpectedWindowId = 0
-)
-
-$ErrorActionPreference = 'Stop'
-$ProgressPreference = 'SilentlyContinue'
-[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
-Add-Type -AssemblyName UIAutomationClient
-Add-Type -AssemblyName UIAutomationTypes
-$request = [Text.Encoding]::UTF8.GetString([Convert]::FromBase64String($PayloadBase64)) | ConvertFrom-Json
-$deadline = [DateTime]::UtcNow.AddMilliseconds([Math]::Max(0, [Math]::Min(8000, $WaitMilliseconds)))
-$invocationStarted = $false
-
-function Finish([string]$Status, [string]$Reason, $Snapshot = $null) {
-    $result = @{ status = $Status; reason = $Reason }
-    if ($null -ne $Snapshot) { $result.snapshot = $Snapshot }
-    $result | ConvertTo-Json -Depth 8 -Compress
-    exit 0
-}
-
-function Descendants($Element) {
-    return $Element.FindAll([System.Windows.Automation.TreeScope]::Descendants, [System.Windows.Automation.Condition]::TrueCondition)
-}
-
-function Dialogs($Element) {
-    for ($attempt = 0; $attempt -lt 3; $attempt++) {
-        try {
-            @(Descendants $Element | Where-Object { $_.Current.ControlType -eq [System.Windows.Automation.ControlType]::Window -or $_.GetCurrentPropertyValue([System.Windows.Automation.AutomationElement]::IsDialogProperty) -eq $true })
-            return
-        } catch {
-            if ($attempt -eq 2) { throw }
-            Start-Sleep -Milliseconds 150
-        }
-    }
-}
-
-function TextValue($Element) {
-    $pattern = $null
-    if ($Element.TryGetCurrentPattern([System.Windows.Automation.ValuePattern]::Pattern, [ref]$pattern)) {
-        return ([System.Windows.Automation.ValuePattern]$pattern).Current.Value
-    }
-    if ($Element.TryGetCurrentPattern([System.Windows.Automation.TextPattern]::Pattern, [ref]$pattern)) {
-        return ([System.Windows.Automation.TextPattern]$pattern).DocumentRange.GetText(-1)
-    }
-    return $null
-}
-
-function IsInstalledDesktop($Process) {
-    try {
-        $exe = Get-Item -LiteralPath $Process.Path
-        if ($exe.VersionInfo.ProductName -ne 'Claude' -or $exe.VersionInfo.CompanyName -ne 'Anthropic') { return $false }
-        $localRoot = Join-Path $env:LOCALAPPDATA 'AnthropicClaude'
-        $root = [IO.Path]::GetFullPath($localRoot).TrimEnd('\') + '\'
-        if ($exe.FullName.StartsWith($root, [StringComparison]::OrdinalIgnoreCase) -and $exe.Directory.Name -match '^app-\d+(\.\d+)+$' -and $exe.Name -ieq 'claude.exe') { return $true }
-        foreach ($package in @(Get-AppxPackage -Name '*Claude*' -ErrorAction SilentlyContinue)) {
-            if ($package.InstallLocation -and $exe.FullName.StartsWith($package.InstallLocation.TrimEnd('\') + '\', [StringComparison]::OrdinalIgnoreCase)) { return $true }
-        }
-    } catch {}
-    return $false
-}
-
-function PathEqual([string]$First, [string]$Second) {
-    try {
-        if ($First -notmatch '^(?:[A-Za-z]:[\\/]|\\\\[^\\]+\\[^\\]+)') { return $false }
-        return [IO.Path]::GetFullPath($First).TrimEnd('\').Equals([IO.Path]::GetFullPath($Second).TrimEnd('\'), [StringComparison]::OrdinalIgnoreCase)
-    } catch { return $false }
-}
-
-function PromptEqual([string]$First, [string]$Second) {
-    $firstLines = @($First.Replace("`r`n", "`n").Split("`n") | Where-Object { $_ -cne '' })
-    $secondLines = @($Second.Replace("`r`n", "`n").Split("`n") | Where-Object { $_ -cne '' })
-    return ($firstLines -join "`n") -ceq ($secondLines -join "`n")
-}
-
-function SelectedPaths($Folder, $Root) {
-    $expander = [System.Windows.Automation.ExpandCollapsePattern]$Folder.GetCurrentPattern([System.Windows.Automation.ExpandCollapsePattern]::Pattern)
-    try {
-        if ($expander.Current.ExpandCollapseState -eq [System.Windows.Automation.ExpandCollapseState]::Collapsed) { $expander.Expand() }
-        Start-Sleep -Milliseconds 150
-        $menus = @(Descendants $Root | Where-Object { $_.Current.ControlType -eq [System.Windows.Automation.ControlType]::Menu -and $_.Current.Name -eq $Folder.Current.Name -and -not $_.Current.IsOffscreen })
-        if ($menus.Count -ne 1) { throw 'Folder menu not verified' }
-        foreach ($radio in @(Descendants $menus[0] | Where-Object { $_.Current.ControlType -eq [System.Windows.Automation.ControlType]::RadioButton })) {
-            $selection = [System.Windows.Automation.SelectionItemPattern]$radio.GetCurrentPattern([System.Windows.Automation.SelectionItemPattern]::Pattern)
-            if ($selection.Current.IsSelected) { $radio.Current.HelpText }
-        }
-    } finally {
-        if ($expander.Current.ExpandCollapseState -eq [System.Windows.Automation.ExpandCollapseState]::Expanded) { $expander.Collapse() }
-        Start-Sleep -Milliseconds 250
-    }
-}
-
-try {
-    do {
-        $processes = @(Get-Process -Name Claude -ErrorAction SilentlyContinue | Where-Object { $_.MainWindowHandle -ne 0 -and (IsInstalledDesktop $_) })
-        if ($processes.Count -ne 1) { Finish 'blocked' 'desktop_window_ambiguous_or_missing' }
-        $process = $processes[0]
-        $windowId = $process.MainWindowHandle.ToInt64()
-        if ($ExpectedWindowId -ne 0 -and $ExpectedWindowId -ne $windowId) { Finish 'blocked' 'desktop_window_changed' }
-        $root = [System.Windows.Automation.AutomationElement]::FromHandle($process.MainWindowHandle)
-        $elements = Descendants $root
-        $dialogs = @(Dialogs $root)
-        if ($Action -eq 'Trust') {
-            if ($dialogs.Count -gt 0) {
-                if ($dialogs.Count -ne 1 -or $dialogs[0].Current.Name -cne 'Trust this workspace?') { Finish 'blocked' 'workspace_trust_dialog_not_verified' }
-                $trustElements = Descendants $dialogs[0]
-                $trustPaths = @($trustElements | Where-Object { $_.Current.ControlType -eq [System.Windows.Automation.ControlType]::Text -and (PathEqual $_.Current.Name $request.cwd) })
-                $trustButtons = @($trustElements | Where-Object { $_.Current.ControlType -eq [System.Windows.Automation.ControlType]::Button -and $_.Current.Name -ceq 'Trust workspace' -and $_.Current.IsEnabled -and -not $_.Current.IsOffscreen })
-                if ($trustPaths.Count -ne 1 -or $trustButtons.Count -ne 1) { Finish 'blocked' 'workspace_trust_path_mismatch_or_ambiguous' }
-                $trustInvoke = $null
-                if (-not $trustButtons[0].TryGetCurrentPattern([System.Windows.Automation.InvokePattern]::Pattern, [ref]$trustInvoke)) { Finish 'blocked' 'workspace_trust_button_unavailable' }
-                $invocationStarted = $true
-                ([System.Windows.Automation.InvokePattern]$trustInvoke).Invoke()
-                do {
-                    Start-Sleep -Milliseconds 150
-                    $remainingTrust = @(Descendants $root | Where-Object { $_.Current.Name -ceq 'Trust this workspace?' -and $_.Current.ControlType -eq [System.Windows.Automation.ControlType]::Window })
-                    if ($remainingTrust.Count -eq 0) { Finish 'trusted' 'exact_native_workspace_trust_confirmed' }
-                } while ([DateTime]::UtcNow -lt $deadline)
-                Finish 'uncertain' 'native_workspace_trust_outcome_unknown'
-            }
-        }
-        if ($dialogs.Count -gt 0) { Finish 'blocked' 'desktop_dialog_requires_attention' }
-        $composers = @($elements | Where-Object { $_.Current.ControlType -eq [System.Windows.Automation.ControlType]::Edit -and $_.Current.Name -eq 'Prompt' -and -not $_.Current.IsOffscreen })
-        if ($composers.Count -gt 1) { Finish 'blocked' 'composer_ambiguous_or_missing' }
-        if ($composers.Count -eq 1 -and (PromptEqual (TextValue $composers[0]) $request.prompt)) { break }
-        if ([DateTime]::UtcNow -ge $deadline) { Finish 'blocked' 'composer_prompt_mismatch' }
-        Start-Sleep -Milliseconds 150
-    } while ($true)
-
-    $codeControls = @($elements | Where-Object { $_.Current.ControlType -eq [System.Windows.Automation.ControlType]::RadioButton -and $_.Current.Name -eq 'Code' -and -not $_.Current.IsOffscreen })
-    if ($codeControls.Count -ne 1) { Finish 'blocked' 'code_mode_not_selected' }
-    $codeSelected = ([System.Windows.Automation.SelectionItemPattern]$codeControls[0].GetCurrentPattern([System.Windows.Automation.SelectionItemPattern]::Pattern)).Current.IsSelected
-    if (-not $codeSelected) { Finish 'blocked' 'code_mode_not_selected' }
-    $pane = $composers[0]
-    $walker = [System.Windows.Automation.TreeWalker]::ControlViewWalker
-    for ($level = 0; $level -lt 12; $level++) {
-        $pane = $walker.GetParent($pane)
-        if ($null -eq $pane) { Finish 'blocked' 'composer_scope_unavailable' }
-        if ($pane.Current.ClassName -match '(?:^|\s)dframe-pane-primary(?:\s|$)') { break }
-    }
-    if ($pane.Current.ClassName -notmatch '(?:^|\s)dframe-pane-primary(?:\s|$)') { Finish 'blocked' 'composer_scope_unavailable' }
-    $scope = Descendants $pane
-    $pillButtons = @($scope | Where-Object { $_.Current.ControlType -eq [System.Windows.Automation.ControlType]::Button -and $_.Current.ClassName -like '*pill-h*' -and -not $_.Current.IsOffscreen })
-    $localMode = @($pillButtons | Where-Object { $_.Current.Name -eq 'Local' }).Count -eq 1
-    $folders = @($pillButtons | Where-Object { $_.Current.Name -notin @('Local', 'Add another folder') })
-    if (-not $localMode -or $folders.Count -ne 1) { Finish 'blocked' 'project_folder_ambiguous_or_remote' }
-    $worktrees = @($scope | Where-Object { $_.Current.ControlType -eq [System.Windows.Automation.ControlType]::CheckBox -and $_.Current.Name -eq 'worktree' })
-    $worktreeEnabled = $false
-    if ($worktrees.Count -gt 1) { Finish 'blocked' 'original_project_folder_not_verified' }
-    if ($worktrees.Count -eq 1) { $worktreeEnabled = ([System.Windows.Automation.TogglePattern]$worktrees[0].GetCurrentPattern([System.Windows.Automation.TogglePattern]::Pattern)).Current.ToggleState -ne [System.Windows.Automation.ToggleState]::Off }
-    if ($worktreeEnabled) { Finish 'blocked' 'original_project_folder_not_verified' }
-
-    $folder = $folders[0]
-    $paths = @(SelectedPaths $folder $root)
-    if ($paths.Count -ne 1 -or -not (PathEqual $paths[0] $request.cwd)) { Finish 'blocked' 'selected_project_path_mismatch' }
-    $scope = Descendants $pane
-    $sends = @($scope | Where-Object { $_.Current.ControlType -eq [System.Windows.Automation.ControlType]::Button -and $_.Current.Name -eq 'Send' -and -not $_.Current.IsOffscreen })
-    if ($sends.Count -ne 1 -or -not $sends[0].Current.IsEnabled) { Finish 'blocked' 'send_button_ambiguous_disabled_or_unavailable' }
-    $invoke = $null
-    if (-not $sends[0].TryGetCurrentPattern([System.Windows.Automation.InvokePattern]::Pattern, [ref]$invoke)) { Finish 'blocked' 'send_button_ambiguous_disabled_or_unavailable' }
-    $currentPaths = @(SelectedPaths $folder $root)
-    if ($currentPaths.Count -ne 1 -or -not (PathEqual $currentPaths[0] $request.cwd) -or -not (PromptEqual (TextValue $composers[0]) $request.prompt)) { Finish 'blocked' 'composer_changed_before_submission' }
-    $currentDialogs = @(Dialogs $root)
-    if ($currentDialogs.Count -gt 0) { Finish 'blocked' 'desktop_dialog_requires_attention' }
-    if (-not ([System.Windows.Automation.SelectionItemPattern]$codeControls[0].GetCurrentPattern([System.Windows.Automation.SelectionItemPattern]::Pattern)).Current.IsSelected) { Finish 'blocked' 'code_mode_not_selected' }
-    if ($worktrees.Count -eq 1 -and ([System.Windows.Automation.TogglePattern]$worktrees[0].GetCurrentPattern([System.Windows.Automation.TogglePattern]::Pattern)).Current.ToggleState -ne [System.Windows.Automation.ToggleState]::Off) { Finish 'blocked' 'original_project_folder_not_verified' }
-    $snapshot = @{
-        windows = @(@{ id = $windowId; installedDesktop = $true })
-        dialogs = @()
-        codeSelected = $true
-        composers = @(@{ text = (TextValue $composers[0]) })
-        folderCount = $folders.Count
-        localMode = $localMode
-        worktreeEnabled = $worktreeEnabled
-        selectedFolderPaths = @($paths)
-        sendButtons = @(@{ enabled = $true; invokable = $true })
-    }
-    if ($Action -eq 'Inspect') { Finish 'ready' 'exact_composer_and_project_verified' $snapshot }
-    if ($Action -eq 'Trust') { Finish 'absent' 'exact_composer_and_project_verified' $snapshot }
-    if ($Action -eq 'SelectFolder') {
-        $expander = [System.Windows.Automation.ExpandCollapsePattern]$folder.GetCurrentPattern([System.Windows.Automation.ExpandCollapsePattern]::Pattern)
-        $selectionInvoked = $false
-        try {
-            $expander.Expand()
-            Start-Sleep -Milliseconds 150
-            $menus = @(Descendants $root | Where-Object { $_.Current.ControlType -eq [System.Windows.Automation.ControlType]::Menu -and $_.Current.Name -eq $folder.Current.Name -and -not $_.Current.IsOffscreen })
-            if ($menus.Count -ne 1) { throw 'Folder menu not verified' }
-            $choices = @(Descendants $menus[0] | Where-Object { $_.Current.ControlType -eq [System.Windows.Automation.ControlType]::RadioButton -and (PathEqual $_.Current.HelpText $request.cwd) -and $_.Current.IsEnabled -and -not $_.Current.IsOffscreen })
-            if ($choices.Count -ne 1) { throw 'Folder choice not verified' }
-            $choiceInvoke = $null
-            if (-not $choices[0].TryGetCurrentPattern([System.Windows.Automation.InvokePattern]::Pattern, [ref]$choiceInvoke)) { throw 'Folder choice unavailable' }
-            if (-not (PromptEqual (TextValue $composers[0]) $request.prompt)) { throw 'Composer changed' }
-            ([System.Windows.Automation.InvokePattern]$choiceInvoke).Invoke()
-            $selectionInvoked = $true
-        } finally {
-            try {
-                if ($expander.Current.ExpandCollapseState -eq [System.Windows.Automation.ExpandCollapseState]::Expanded) { $expander.Collapse() }
-                Start-Sleep -Milliseconds 250
-            } catch { if (-not $selectionInvoked) { throw } }
-        }
-        Finish 'selected' 'exact_native_folder_explicitly_selected'
-    }
-    $invocationStarted = $true
-    ([System.Windows.Automation.InvokePattern]$invoke).Invoke()
-    Finish 'submitted' 'native_send_invoked_once'
-} catch {
-    if ($invocationStarted) { Finish 'uncertain' 'native_submit_outcome_unknown' }
-    Finish 'blocked' 'native_accessibility_unavailable'
-}