@mseep/clawdcursor 1.5.5

package/dist/core/agent.js

@@ -0,0 +1,245 @@
+"use strict";
+/**
+ * Agent — thin entry point that drives the desktop using the unified
+ * agent loop (runAgent) with the configured model. The pipeline morph
+ * machinery has been removed; a capable configured model self-drives
+ * the full toolbox.
+ *
+ * Construction is intentionally minimal — the agent owns the desktop /
+ * a11y / OCR primitives and forwards everything else to runAgent.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Agent = void 0;
+const native_desktop_1 = require("../platform/native-desktop");
+const accessibility_1 = require("../platform/accessibility");
+const ocr_engine_1 = require("../platform/ocr-engine");
+const doctor_1 = require("../surface/doctor");
+const agent_1 = require("./agent-loop/agent");
+const platform_1 = require("../platform");
+const banner_1 = require("./banner");
+/**
+ * Provider-agnostic Anthropic-endpoint detector. Anthropic native endpoints
+ * use the `/messages` API shape; everything else (OpenAI, Groq, Together,
+ * Kimi, DeepSeek, Ollama, Gemini-via-OpenAI-compat) uses `/chat/completions`.
+ * Local endpoints and Ollama always take the OpenAI-compat path even if their
+ * host happens to match an Anthropic-ish substring.
+ */
+function isAnthropicEndpoint(baseUrl) {
+    if (!baseUrl)
+        return false;
+    if (baseUrl.includes('localhost'))
+        return false;
+    if (baseUrl.includes('11434'))
+        return false; // Ollama default port
+    return baseUrl.includes('anthropic.com');
+}
+class Agent {
+    desktop;
+    a11y;
+    ocrEngine;
+    config;
+    resolvedConfig = null;
+    hasApiKey;
+    state = {
+        status: 'idle',
+        stepsCompleted: 0,
+        stepsTotal: 0,
+    };
+    aborted = false;
+    /** Cancels the in-flight LLM fetch on abort(). Fresh per executeTask(). */
+    abortCtl = null;
+    /** The in-flight task promise — lets /stop wait for the abort to settle. */
+    currentRun = null;
+    taskExecutionLocked = false;
+    constructor(config, resolvedConfig) {
+        this.config = config;
+        this.resolvedConfig = resolvedConfig ?? null;
+        this.desktop = new native_desktop_1.NativeDesktop(config);
+        this.a11y = new accessibility_1.AccessibilityBridge();
+        this.ocrEngine = new ocr_engine_1.OcrEngine();
+        // hasApiKey gates the offline-mode banner — true if any cloud key is
+        // configured. Local LLM (Ollama) is always available via the loop,
+        // so absence of cloud keys just means we'll print an offline notice.
+        const hasCloudKey = !!(config.ai.apiKey && config.ai.apiKey.length > 0);
+        const hasVisionKey = !!(config.ai.visionApiKey && config.ai.visionApiKey.length > 0);
+        this.hasApiKey = hasCloudKey || hasVisionKey;
+        if (!this.hasApiKey) {
+            console.log(`⚡ Running in offline mode (no API key).`);
+            console.log(`   To unlock AI, set AI_API_KEY (or run: clawdcursor doctor)`);
+        }
+    }
+    async connect() {
+        await this.desktop.connect();
+        // Warm up the PSRunner bridge so assembly loading happens in background
+        this.a11y.warmup().catch(() => { });
+        // Touch the OCR engine so any first-call latency is paid up front.
+        void this.ocrEngine;
+    }
+    /** Safety-net timeout — only fires if task is truly stuck (stagnation + abort didn't catch it) */
+    static TASK_TIMEOUT_MS = 12 * 60 * 1000; // 12 minutes
+    async executeTask(task) {
+        // Atomic concurrency guard — boolean lock prevents TOCTOU race
+        // where two simultaneous /task requests both see status === 'idle'
+        if (this.taskExecutionLocked || this.state.status !== 'idle') {
+            return {
+                success: false,
+                steps: [{ action: 'error', description: 'Agent is busy', success: false, timestamp: Date.now() }],
+                duration: 0,
+            };
+        }
+        this.taskExecutionLocked = true;
+        this.aborted = false;
+        this.abortCtl = new AbortController();
+        const startTime = Date.now();
+        // Wrap the entire task with a global wall-clock timeout.
+        let timeoutHandle = null;
+        const timeoutPromise = new Promise((resolve) => {
+            timeoutHandle = setTimeout(() => {
+                this.aborted = true;
+                console.warn(`\n⏱ Task timed out after ${Agent.TASK_TIMEOUT_MS / 60000} minutes`);
+                resolve({
+                    success: false,
+                    steps: [{ action: 'error', description: `Task timed out after ${Agent.TASK_TIMEOUT_MS / 60000} minutes`, success: false, timestamp: Date.now() }],
+                    duration: Date.now() - startTime,
+                });
+            }, Agent.TASK_TIMEOUT_MS);
+        });
+        // Transparency: the on-screen banner stays up for the WHOLE task so a
+        // human at the machine always knows automation is live (and can
+        // double-click it to stop). Pin/unpin — tool-activity touches must not
+        // hide it mid-task.
+        banner_1.controlBanner.pin();
+        try {
+            this.currentRun = this._executeTask(task, startTime);
+            return await Promise.race([this.currentRun, timeoutPromise]);
+        }
+        finally {
+            if (timeoutHandle !== null)
+                clearTimeout(timeoutHandle);
+            this.taskExecutionLocked = false;
+            this.currentRun = null;
+            banner_1.controlBanner.unpin();
+        }
+    }
+    /**
+     * Wait until the in-flight task settles (or the timeout elapses). Used by
+     * the /stop path so an abort can print its "aborted by user"
+     * acknowledgment before the process exits — previously stop was a hard
+     * kill 500ms after the HTTP response, mid-turn, with zero output.
+     */
+    async waitForIdle(timeoutMs) {
+        const run = this.currentRun;
+        if (!run)
+            return;
+        await Promise.race([
+            run.then(() => undefined, () => undefined),
+            new Promise(resolve => setTimeout(resolve, timeoutMs)),
+        ]);
+    }
+    /**
+     * Thin task executor — runs the unified agent loop with the configured model.
+     * No pipeline morph, no mode ladder, no verifier. A capable model self-drives
+     * the full toolbox.
+     */
+    async _executeTask(task, startTime) {
+        // Resolve the LLM configuration from the disk config + CLI overlay.
+        const pipelineConfig = (0, doctor_1.loadPipelineConfig)(this.resolvedConfig);
+        const hasTextModel = !!(pipelineConfig?.layer2.model && pipelineConfig.layer2.baseUrl);
+        const hasVisionModel = !!(pipelineConfig?.layer3?.model && pipelineConfig?.layer3?.baseUrl);
+        // Build direct LLM configs for the unified agent. Prefer text; fall back
+        // to vision model if text is absent (vision models handle tool_use too).
+        const textConfig = hasTextModel && pipelineConfig
+            ? {
+                baseUrl: pipelineConfig.layer2.baseUrl,
+                model: pipelineConfig.layer2.model,
+                apiKey: pipelineConfig.layer2.apiKey || pipelineConfig.apiKey || '',
+                isAnthropic: isAnthropicEndpoint(pipelineConfig.layer2.baseUrl),
+                maxTokens: 1024,
+            }
+            : undefined;
+        const visionLayer = pipelineConfig?.layer3;
+        const visionConfig = hasVisionModel && visionLayer && pipelineConfig
+            ? {
+                baseUrl: visionLayer.baseUrl,
+                model: visionLayer.model,
+                apiKey: visionLayer.apiKey || pipelineConfig.apiKey || '',
+                isAnthropic: isAnthropicEndpoint(visionLayer.baseUrl),
+                maxTokens: 1024,
+            }
+            : undefined;
+        if (!hasTextModel && !hasVisionModel) {
+            console.log('⚡ No AI model configured. Run `clawdcursor doctor` to configure a provider.');
+        }
+        // Clear lastResult at task start so a poller can't read a stale result
+        // from a prior run while a new task is in flight.
+        this.state = { ...this.state, status: 'thinking', currentTask: task, stepsCompleted: 0, stepsTotal: 0, lastResult: undefined };
+        // Get the platform adapter. Lazy-initialised per call (cheap re-call).
+        const adapter = await (0, platform_1.getPlatform)();
+        // Resolve CDP driver if wired externally.
+        const cdp = this.cdpDriver ?? null;
+        // Resolve UIMapHolder if wired externally (by cli.ts daemon setup).
+        const uiMaps = this.uiMapHolder ?? undefined;
+        // Run the thin agent loop with the FULL toolbox.
+        // The agent loop prefers a11y-first (cheapest) and only calls screenshot
+        // when it genuinely needs pixels.
+        const agentResult = await (0, agent_1.runAgent)({
+            task,
+            isAborted: () => this.aborted,
+            abortSignal: this.abortCtl?.signal,
+        }, {
+            adapter,
+            llm: { text: textConfig, vision: visionConfig },
+            cdp,
+            uiMaps,
+        });
+        const steps = agentResult.steps.length > 0
+            ? agentResult.steps.map(s => ({
+                action: s.toolName,
+                description: s.result.text,
+                success: s.result.success,
+                timestamp: Date.now(),
+                layer: 'unified',
+                method: s.toolName,
+                latencyMs: s.durationMs,
+            }))
+            : [{
+                    action: agentResult.exit,
+                    description: agentResult.text,
+                    success: agentResult.success,
+                    timestamp: Date.now(),
+                    layer: 'unified',
+                }];
+        if (agentResult.text) {
+            console.log(`   ${agentResult.text}`);
+        }
+        const taskResult = {
+            success: agentResult.success,
+            steps,
+            duration: Date.now() - startTime,
+        };
+        this.state = { ...this.state, status: 'idle', lastResult: taskResult };
+        return taskResult;
+    }
+    abort() {
+        this.aborted = true;
+        // Cancel the in-flight LLM fetch too — the cooperative flag alone only
+        // takes effect at the next loop checkpoint, i.e. after the current
+        // (up to 45s) LLM call returns.
+        this.abortCtl?.abort();
+        this.state = { status: 'idle', stepsCompleted: 0, stepsTotal: 0 };
+    }
+    getState() {
+        return { ...this.state };
+    }
+    getDesktop() {
+        return this.desktop;
+    }
+    getA11y() {
+        return this.a11y;
+    }
+    disconnect() {
+        this.desktop.disconnect();
+    }
+}
+exports.Agent = Agent;
+//# sourceMappingURL=agent.js.map

package/dist/core/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../src/core/agent.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAEH,+DAA2D;AAC3D,6DAAgE;AAChE,uDAAmD;AACnD,8CAAuD;AACvD,8CAA8C;AAC9C,0CAA0C;AAC1C,qCAAyC;AAIzC;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,OAA2B;IACtD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,sBAAsB;IACnE,OAAO,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;AAC3C,CAAC;AAED,MAAa,KAAK;IACR,OAAO,CAAgB;IACvB,IAAI,CAAsB;IAC1B,SAAS,CAAY;IACrB,MAAM,CAAc;IACpB,cAAc,GAA0B,IAAI,CAAC;IAC7C,SAAS,CAAU;IACnB,KAAK,GAAe;QAC1B,MAAM,EAAE,MAAM;QACd,cAAc,EAAE,CAAC;QACjB,UAAU,EAAE,CAAC;KACd,CAAC;IACM,OAAO,GAAG,KAAK,CAAC;IACxB,2EAA2E;IACnE,QAAQ,GAA2B,IAAI,CAAC;IAChD,4EAA4E;IACpE,UAAU,GAA+B,IAAI,CAAC;IAC9C,mBAAmB,GAAG,KAAK,CAAC;IAEpC,YAAY,MAAmB,EAAE,cAA+B;QAC9D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,cAAc,GAAG,cAAc,IAAI,IAAI,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,IAAI,8BAAa,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,IAAI,mCAAmB,EAAE,CAAC;QACtC,IAAI,CAAC,SAAS,GAAG,IAAI,sBAAS,EAAE,CAAC;QAEjC,qEAAqE;QACrE,mEAAmE;QACnE,qEAAqE;QACrE,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACxE,MAAM,YAAY,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,IAAI,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,SAAS,GAAG,WAAW,IAAI,YAAY,CAAC;QAE7C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAE7B,wEAAwE;QACxE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAEnC,mEAAmE;QACnE,KAAK,IAAI,CAAC,SAAS,CAAC;IACtB,CAAC;IAED,kGAAkG;IAC1F,MAAM,CAAU,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;IAEvE,KAAK,CAAC,WAAW,CAAC,IAAY;QAC5B,+DAA+D;QAC/D,mEAAmE;QACnE,IAAI,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7D,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACjG,QAAQ,EAAE,CAAC;aACZ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;QAEhC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,yDAAyD;QACzD,IAAI,aAAa,GAAyC,IAAI,CAAC;QAC/D,MAAM,cAAc,GAAG,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,EAAE;YACzD,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC,4BAA4B,KAAK,CAAC,eAAe,GAAG,KAAK,UAAU,CAAC,CAAC;gBAClF,OAAO,CAAC;oBACN,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,wBAAwB,KAAK,CAAC,eAAe,GAAG,KAAK,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;oBACjJ,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBACjC,CAAC,CAAC;YACL,CAAC,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,sEAAsE;QACtE,gEAAgE;QAChE,uEAAuE;QACvE,oBAAoB;QACpB,sBAAa,CAAC,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACrD,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;QAC/D,CAAC;gBAAS,CAAC;YACT,IAAI,aAAa,KAAK,IAAI;gBAAE,YAAY,CAAC,aAAa,CAAC,CAAC;YACxD,IAAI,CAAC,mBAAmB,GAAG,KAAK,CAAC;YACjC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,sBAAa,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CAAC,SAAiB;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC;QAC5B,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,MAAM,OAAO,CAAC,IAAI,CAAC;YACjB,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC;YAC1C,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;SAC7D,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,SAAiB;QACxD,oEAAoE;QACpE,MAAM,cAAc,GAAG,IAAA,2BAAkB,EAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAE/D,MAAM,YAAY,GAAK,CAAC,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC,KAAK,IAAI,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzF,MAAM,cAAc,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,IAAI,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAE5F,yEAAyE;QACzE,yEAAyE;QACzE,MAAM,UAAU,GAAG,YAAY,IAAI,cAAc;YAC/C,CAAC,CAAC;gBACE,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,OAAO;gBACtC,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,KAAK;gBAClC,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,IAAI,cAAc,CAAC,MAAM,IAAI,EAAE;gBACnE,WAAW,EAAE,mBAAmB,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC/D,SAAS,EAAE,IAAI;aAChB;YACH,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,WAAW,GAAG,cAAc,EAAE,MAAM,CAAC;QAC3C,MAAM,YAAY,GAAG,cAAc,IAAI,WAAW,IAAI,cAAc;YAClE,CAAC,CAAC;gBACE,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,MAAM,EAAE,WAAW,CAAC,MAAM,IAAI,cAAc,CAAC,MAAM,IAAI,EAAE;gBACzD,WAAW,EAAE,mBAAmB,CAAC,WAAW,CAAC,OAAO,CAAC;gBACrD,SAAS,EAAE,IAAI;aAChB;YACH,CAAC,CAAC,SAAS,CAAC;QAEd,IAAI,CAAC,YAAY,IAAI,CAAC,cAAc,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;QAC7F,CAAC;QAED,uEAAuE;QACvE,kDAAkD;QAClD,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;QAE/H,uEAAuE;QACvE,MAAM,OAAO,GAAG,MAAM,IAAA,sBAAW,GAAE,CAAC;QAEpC,0CAA0C;QAC1C,MAAM,GAAG,GAAI,IAAmE,CAAC,SAAS,IAAI,IAAI,CAAC;QAEnG,oEAAoE;QACpE,MAAM,MAAM,GAAI,IAAsE,CAAC,WAAW,IAAI,SAAS,CAAC;QAEhH,iDAAiD;QACjD,yEAAyE;QACzE,kCAAkC;QAClC,MAAM,WAAW,GAAG,MAAM,IAAA,gBAAQ,EAChC;YACE,IAAI;YACJ,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO;YAC7B,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM;SACnC,EACD;YACE,OAAO;YACP,GAAG,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE;YAC/C,GAAG;YACH,MAAM;SACP,CACF,CAAC;QAEF,MAAM,KAAK,GAAiB,WAAW,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YACtD,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC1B,MAAM,EAAE,CAAC,CAAC,QAAQ;gBAClB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI;gBAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO;gBACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,KAAK,EAAE,SAAkB;gBACzB,MAAM,EAAE,CAAC,CAAC,QAAQ;gBAClB,SAAS,EAAE,CAAC,CAAC,UAAU;aACxB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;oBACC,MAAM,EAAE,WAAW,CAAC,IAAI;oBACxB,WAAW,EAAE,WAAW,CAAC,IAAI;oBAC7B,OAAO,EAAE,WAAW,CAAC,OAAO;oBAC5B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,KAAK,EAAE,SAAkB;iBAC1B,CAAC,CAAC;QAEP,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,UAAU,GAAe;YAC7B,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,KAAK;YACL,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACjC,CAAC;QACF,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;QACvE,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,uEAAuE;QACvE,mEAAmE;QACnE,gCAAgC;QAChC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IACpE,CAAC;IAED,QAAQ;QACN,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,UAAU;QACR,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;IAC5B,CAAC;;AA5OH,sBA6OC"}

package/dist/core/app-categories.d.ts

@@ -0,0 +1,67 @@
+/**
+ * App categorization data — the single source of truth for app-pattern
+ * matching across clawdcursor.
+ *
+ * Why this file exists. v0.9's agnostic-audit subagent flagged three
+ * places where app-specific patterns were inlined as regexes deep inside
+ * other modules:
+ *   - src/core/router/webview2.ts hardcoded the WebView2 settle list
+ *   - src/core/safety.ts hardcoded the sensitive-app list
+ *   - src/tools/electron_bridge.ts had its own KNOWN_APPS array
+ *
+ * Each of those was small, but together they meant "the list of apps
+ * clawdcursor knows about" was scattered across three files in three
+ * directories. Adding a new app required changing code in N places and
+ * was easy to miss. Worse, the names duplicated (Outlook appeared in
+ * both WebView2 and sensitive lists, with slightly different wording).
+ *
+ * This module consolidates the app-data so:
+ *   - Categorization decisions live next to one another.
+ *   - The agent loop / pipeline never imports this file — only the
+ *     small helper modules that need to make a categorization call do.
+ *   - Adding a new app means editing one row in one file.
+ *
+ * Anti-design note. This file is intentionally not exported from any
+ * index. Importers reach in explicitly so it's clear at the call-site
+ * that they're consulting app-category data, not running app-specific
+ * logic. The autonomous pipeline (agent loop, decomposer, verifier,
+ * preprocessor) does NOT import from here and never should — those
+ * components stay model- and app-agnostic by construction.
+ */
+/**
+ * Apps that render their UI inside Chromium / Edge WebView2 / Electron.
+ * For these the OS-level UI Automation tree is sparse — clawdcursor needs
+ * a longer settle window after launch and may need to attach via CDP
+ * (`relaunch_with_cdp`) to read the real DOM.
+ *
+ * Matched against process name OR alias name (case-insensitive substring).
+ * Adding a new app here is the only change needed to give it the longer
+ * WebView2 settle treatment.
+ */
+export declare const WEBVIEW2_APPS: readonly string[];
+/**
+ * Apps where any unlabeled click/keystroke is potentially destructive —
+ * email send, banking transfer, password manager autofill, private
+ * messaging hit-send. The safety gate elevates click-family tools to
+ * `confirm` when active app matches one of these AND no target label
+ * was supplied.
+ *
+ * Matched against active-window process name (case-insensitive substring).
+ * This is the canonical sensitive list; the `clawdcursor consent` flow
+ * also surfaces these categories to the user at install time.
+ */
+export declare const SENSITIVE_APPS: readonly string[];
+/**
+ * Build a case-insensitive regex from a list of substring patterns.
+ * Used by callers that need the regex form (e.g. the existing
+ * webview2 helper and safety gate both `.test()` a process name).
+ *
+ * Word-boundary `\b` is used so we don't false-match (`mail` inside
+ * `gmail` is fine because both are listed; but `signal` doesn't match
+ * `signaling`).
+ */
+export declare function buildAppRegex(patterns: readonly string[]): RegExp;
+/** Convenience: regex form of {@link WEBVIEW2_APPS}. */
+export declare const WEBVIEW2_APPS_PATTERN: RegExp;
+/** Convenience: regex form of {@link SENSITIVE_APPS}. */
+export declare const SENSITIVE_APPS_PATTERN: RegExp;

package/dist/core/app-categories.js

@@ -0,0 +1,108 @@
+"use strict";
+/**
+ * App categorization data — the single source of truth for app-pattern
+ * matching across clawdcursor.
+ *
+ * Why this file exists. v0.9's agnostic-audit subagent flagged three
+ * places where app-specific patterns were inlined as regexes deep inside
+ * other modules:
+ *   - src/core/router/webview2.ts hardcoded the WebView2 settle list
+ *   - src/core/safety.ts hardcoded the sensitive-app list
+ *   - src/tools/electron_bridge.ts had its own KNOWN_APPS array
+ *
+ * Each of those was small, but together they meant "the list of apps
+ * clawdcursor knows about" was scattered across three files in three
+ * directories. Adding a new app required changing code in N places and
+ * was easy to miss. Worse, the names duplicated (Outlook appeared in
+ * both WebView2 and sensitive lists, with slightly different wording).
+ *
+ * This module consolidates the app-data so:
+ *   - Categorization decisions live next to one another.
+ *   - The agent loop / pipeline never imports this file — only the
+ *     small helper modules that need to make a categorization call do.
+ *   - Adding a new app means editing one row in one file.
+ *
+ * Anti-design note. This file is intentionally not exported from any
+ * index. Importers reach in explicitly so it's clear at the call-site
+ * that they're consulting app-category data, not running app-specific
+ * logic. The autonomous pipeline (agent loop, decomposer, verifier,
+ * preprocessor) does NOT import from here and never should — those
+ * components stay model- and app-agnostic by construction.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SENSITIVE_APPS_PATTERN = exports.WEBVIEW2_APPS_PATTERN = exports.SENSITIVE_APPS = exports.WEBVIEW2_APPS = void 0;
+exports.buildAppRegex = buildAppRegex;
+/**
+ * Apps that render their UI inside Chromium / Edge WebView2 / Electron.
+ * For these the OS-level UI Automation tree is sparse — clawdcursor needs
+ * a longer settle window after launch and may need to attach via CDP
+ * (`relaunch_with_cdp`) to read the real DOM.
+ *
+ * Matched against process name OR alias name (case-insensitive substring).
+ * Adding a new app here is the only change needed to give it the longer
+ * WebView2 settle treatment.
+ */
+exports.WEBVIEW2_APPS = [
+    'olk', // Microsoft New Outlook (Win11)
+    'outlook',
+    'teams', // Microsoft Teams
+    'slack',
+    'discord',
+    'spotify',
+    'vscode', // VS Code
+    'code', // VS Code on macOS / Linux
+    'obsidian',
+    'notion',
+];
+/**
+ * Apps where any unlabeled click/keystroke is potentially destructive —
+ * email send, banking transfer, password manager autofill, private
+ * messaging hit-send. The safety gate elevates click-family tools to
+ * `confirm` when active app matches one of these AND no target label
+ * was supplied.
+ *
+ * Matched against active-window process name (case-insensitive substring).
+ * This is the canonical sensitive list; the `clawdcursor consent` flow
+ * also surfaces these categories to the user at install time.
+ */
+exports.SENSITIVE_APPS = [
+    // Email
+    'outlook',
+    'olk',
+    'mail',
+    'gmail',
+    'thunderbird',
+    // Finance
+    'banking',
+    // Password managers
+    '1password',
+    'lastpass',
+    'bitwarden',
+    'keeper',
+    'dashlane',
+    // Private messaging
+    'signal',
+    'whatsapp',
+    'messages',
+    'telegram',
+    'imessage',
+    'wickr',
+];
+/**
+ * Build a case-insensitive regex from a list of substring patterns.
+ * Used by callers that need the regex form (e.g. the existing
+ * webview2 helper and safety gate both `.test()` a process name).
+ *
+ * Word-boundary `\b` is used so we don't false-match (`mail` inside
+ * `gmail` is fine because both are listed; but `signal` doesn't match
+ * `signaling`).
+ */
+function buildAppRegex(patterns) {
+    const alt = patterns.map(p => p.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')).join('|');
+    return new RegExp(`\\b(?:${alt})\\b`, 'i');
+}
+/** Convenience: regex form of {@link WEBVIEW2_APPS}. */
+exports.WEBVIEW2_APPS_PATTERN = buildAppRegex(exports.WEBVIEW2_APPS);
+/** Convenience: regex form of {@link SENSITIVE_APPS}. */
+exports.SENSITIVE_APPS_PATTERN = buildAppRegex(exports.SENSITIVE_APPS);
+//# sourceMappingURL=app-categories.js.map

package/dist/core/app-categories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-categories.js","sourceRoot":"","sources":["../../src/core/app-categories.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;;;AAqEH,sCAGC;AAtED;;;;;;;;;GASG;AACU,QAAA,aAAa,GAAsB;IAC9C,KAAK,EAAQ,gCAAgC;IAC7C,SAAS;IACT,OAAO,EAAM,kBAAkB;IAC/B,OAAO;IACP,SAAS;IACT,SAAS;IACT,QAAQ,EAAK,UAAU;IACvB,MAAM,EAAO,2BAA2B;IACxC,UAAU;IACV,QAAQ;CACT,CAAC;AAEF;;;;;;;;;;GAUG;AACU,QAAA,cAAc,GAAsB;IAC/C,QAAQ;IACR,SAAS;IACT,KAAK;IACL,MAAM;IACN,OAAO;IACP,aAAa;IACb,UAAU;IACV,SAAS;IACT,oBAAoB;IACpB,WAAW;IACX,UAAU;IACV,WAAW;IACX,QAAQ;IACR,UAAU;IACV,oBAAoB;IACpB,QAAQ;IACR,UAAU;IACV,UAAU;IACV,UAAU;IACV,UAAU;IACV,OAAO;CACR,CAAC;AAEF;;;;;;;;GAQG;AACH,SAAgB,aAAa,CAAC,QAA2B;IACvD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClF,OAAO,IAAI,MAAM,CAAC,SAAS,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED,wDAAwD;AAC3C,QAAA,qBAAqB,GAAW,aAAa,CAAC,qBAAa,CAAC,CAAC;AAE1E,yDAAyD;AAC5C,QAAA,sBAAsB,GAAW,aAAa,CAAC,sBAAc,CAAC,CAAC"}

package/dist/core/banner.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Control banner — the on-screen "desktop control in progress" indicators:
+ *   - scripts/banner.ps1: topmost, no-activate pill with a blinking red dot;
+ *     carries the double-click → stop affordance.
+ *   - scripts/edge-glow.ps1: a full-screen, click-through amber glow that pulses
+ *     on all four screen edges. Pure ambient signal; spawned/killed in lockstep
+ *     with the pill so the two are always in sync. Opt out via CLAWD_NO_GLOW=1.
+ *
+ * Transparency contract: whenever an agent is actively driving this desktop,
+ * a human at the machine sees it — and can kill it (double-click → the parent
+ * runs the `clawdcursor stop` flow). Two lifecycles feed it:
+ *
+ *   - pin()/unpin(): the autonomous task loop pins the banner for the whole
+ *     task (agent.executeTask). A pinned banner ignores idle timers.
+ *   - touch(): every consequential (safetyTier ≥ 1) MCP tool call pokes the
+ *     banner; it shows on the first poke and auto-hides after IDLE_HIDE_MS of
+ *     inactivity. This covers EXTERNAL agents (editor-hosted over stdio or
+ *     HTTP /mcp) where there is no task boundary to hook.
+ *
+ * Windows-only today (WinForms via the warm PowerShell host); macOS/Linux are
+ * silent no-ops — the API is platform-neutral so adapters can land later.
+ * Disable via `--no-banner` or CLAWD_NO_BANNER=1.
+ */
+import { type ChildProcess } from 'child_process';
+type Spawner = () => ChildProcess;
+declare class ControlBanner {
+    private child;
+    private glowChild;
+    private idleTimer;
+    private pinned;
+    private enabled;
+    private glowEnabled;
+    private onStopRequested;
+    private spawner;
+    private glowSpawner;
+    /** Wire the double-click → stop callback (the `clawdcursor stop` flow). */
+    configure(opts: {
+        onStopRequested?: () => void;
+    }): void;
+    /** Hard enable/disable (CLI --no-banner / config). Disabling hides immediately. */
+    setEnabled(v: boolean): void;
+    isVisible(): boolean;
+    /** Show and keep shown until unpin() — the autonomous-task lifecycle. */
+    pin(): void;
+    /** Release the task pin; hides unless tool activity re-touches it. */
+    unpin(): void;
+    /**
+     * Activity poke from a consequential tool call: show now, auto-hide after
+     * IDLE_HIDE_MS without further pokes. No-op on the timer while pinned.
+     */
+    touch(idleMs?: number): void;
+    private exitHookInstalled;
+    private show;
+    /** The "control in progress" pill — also the BANNER_STOP / kill-switch source. */
+    private spawnPill;
+    /** The ambient screen-edge glow — pure visual, click-through, no stdout. */
+    private spawnGlow;
+    private installExitHook;
+    private killGlow;
+    private forceHide;
+    private clearIdleTimer;
+    __setSpawnerForTests(s: Spawner): void;
+    __setGlowSpawnerForTests(s: Spawner): void;
+    __setPlatformEnabledForTests(v: boolean): void;
+    __setGlowEnabledForTests(v: boolean): void;
+    __resetForTests(): void;
+}
+/** Singleton — one banner per process (daemon or stdio MCP server). */
+export declare const controlBanner: ControlBanner;
+export {};