@mseep/clawdcursor 1.5.5

package/dist/core/router/aliases.js

@@ -0,0 +1,104 @@
+"use strict";
+/**
+ * APP_ALIASES — the 40-app, 3-OS canonical app table.
+ *
+ * Ported verbatim from src/action-router.ts (v0.6.3 heritage). Each row
+ * maps a user-facing natural-language name to the set of actual process
+ * names on each OS plus the macOS app bundle name.
+ *
+ * Adding an app = one row here, nothing else. No business-logic file
+ * should reference raw process names — they go through this table.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.APP_ALIASES = void 0;
+exports.resolveAlias = resolveAlias;
+const normalize_1 = require("./normalize");
+exports.APP_ALIASES = {
+    // Drawing / editors
+    'paint': { processNames: ['mspaint'], searchTerm: 'Paint', executable: 'mspaint.exe', alwaysNewInstance: true },
+    'mspaint': { processNames: ['mspaint'], searchTerm: 'Paint', executable: 'mspaint.exe', alwaysNewInstance: true },
+    // Notepad is UWP on Win11 (Microsoft.WindowsNotepad). The classic
+    // `notepad.exe` redirector still exists but spawns the UWP app via
+    // ApplicationFrameHost, so the polled window has processName "Notepad"
+    // not "notepad.exe". uwpAppId is the reliable Win11 launch route.
+    'notepad': { processNames: ['Notepad', 'notepad', 'ApplicationFrameHost'], searchTerm: 'Notepad', executable: 'notepad.exe', uwpAppId: 'Microsoft.WindowsNotepad_8wekyb3d8bbwe!App', alwaysNewInstance: true, macOSAppName: 'TextEdit' },
+    'textedit': { processNames: ['TextEdit'], searchTerm: 'TextEdit', macOSAppName: 'TextEdit' },
+    // Utility (Windows Calculator is UWP on Win10+; direct `Start-Process calc` fails)
+    'calculator': { processNames: ['CalculatorApp', 'Calculator', 'calc'], searchTerm: 'Calculator', macOSAppName: 'Calculator', uwpAppId: 'Microsoft.WindowsCalculator_8wekyb3d8bbwe!App' },
+    'calc': { processNames: ['CalculatorApp', 'Calculator', 'calc'], searchTerm: 'Calculator', macOSAppName: 'Calculator', uwpAppId: 'Microsoft.WindowsCalculator_8wekyb3d8bbwe!App' },
+    // Browsers — executables let the direct-launch strategy fire first on Win32.
+    // If the exe isn't on PATH, the router's Start Menu search fallback picks up.
+    'chrome': { processNames: ['chrome', 'Google Chrome'], searchTerm: 'Chrome', executable: 'chrome.exe', macOSAppName: 'Google Chrome' },
+    'google chrome': { processNames: ['chrome', 'Google Chrome'], searchTerm: 'Chrome', executable: 'chrome.exe', macOSAppName: 'Google Chrome' },
+    'firefox': { processNames: ['firefox'], searchTerm: 'Firefox', executable: 'firefox.exe', macOSAppName: 'Firefox' },
+    'safari': { processNames: ['Safari'], searchTerm: 'Safari', macOSAppName: 'Safari' },
+    'edge': { processNames: ['msedge'], searchTerm: 'Edge', executable: 'msedge.exe', macOSAppName: 'Microsoft Edge' },
+    'microsoft edge': { processNames: ['msedge'], searchTerm: 'Edge', executable: 'msedge.exe', macOSAppName: 'Microsoft Edge' },
+    // Office
+    'outlook': { processNames: ['OUTLOOK', 'olk'], searchTerm: 'Outlook', macOSAppName: 'Microsoft Outlook' },
+    'microsoft outlook': { processNames: ['OUTLOOK', 'olk'], searchTerm: 'Outlook', macOSAppName: 'Microsoft Outlook' },
+    'word': { processNames: ['WINWORD'], searchTerm: 'Word', macOSAppName: 'Microsoft Word' },
+    'excel': { processNames: ['EXCEL'], searchTerm: 'Excel', macOSAppName: 'Microsoft Excel' },
+    // Shell
+    'explorer': { processNames: ['explorer'], searchTerm: 'File Explorer', macOSAppName: 'Finder' },
+    'finder': { processNames: ['Finder'], searchTerm: 'Finder', macOSAppName: 'Finder' },
+    'file explorer': { processNames: ['explorer'], searchTerm: 'File Explorer', macOSAppName: 'Finder' },
+    'cmd': { processNames: ['cmd'], searchTerm: 'Command Prompt', macOSAppName: 'Terminal' },
+    'terminal': { processNames: ['WindowsTerminal', 'cmd', 'Terminal'], searchTerm: 'Terminal', macOSAppName: 'Terminal' },
+    'powershell': { processNames: ['powershell', 'pwsh'], searchTerm: 'PowerShell' },
+    // Dev tools
+    'vscode': { processNames: ['Code'], searchTerm: 'Visual Studio Code', macOSAppName: 'Visual Studio Code' },
+    'code': { processNames: ['Code'], searchTerm: 'Visual Studio Code', macOSAppName: 'Visual Studio Code' },
+    'cursor': { processNames: ['Cursor'], searchTerm: 'Cursor', macOSAppName: 'Cursor' },
+    'xcode': { processNames: ['Xcode'], searchTerm: 'Xcode', macOSAppName: 'Xcode' },
+    'wezterm': { processNames: ['WezTerm', 'wezterm'], searchTerm: 'WezTerm', macOSAppName: 'WezTerm' },
+    'iterm': { processNames: ['iTerm2', 'iTerm'], searchTerm: 'iTerm', macOSAppName: 'iTerm' },
+    'iterm2': { processNames: ['iTerm2'], searchTerm: 'iTerm2', macOSAppName: 'iTerm' },
+    // Settings / system
+    'settings': { processNames: ['SystemSettings'], searchTerm: 'Settings', macOSAppName: 'System Settings' },
+    'system settings': { processNames: ['System Preferences', 'System Settings'], searchTerm: 'System Settings', macOSAppName: 'System Settings' },
+    'task manager': { processNames: ['Taskmgr'], searchTerm: 'Task Manager', macOSAppName: 'Activity Monitor' },
+    'activity monitor': { processNames: ['Activity Monitor'], searchTerm: 'Activity Monitor', macOSAppName: 'Activity Monitor' },
+    // Collab / comms
+    'figma': { processNames: ['Figma'], searchTerm: 'Figma', macOSAppName: 'Figma' },
+    'slack': { processNames: ['Slack', 'slack'], searchTerm: 'Slack', macOSAppName: 'Slack' },
+    'teams': { processNames: ['ms-teams', 'Teams'], searchTerm: 'Teams', macOSAppName: 'Microsoft Teams' },
+    'discord': { processNames: ['Discord'], searchTerm: 'Discord', macOSAppName: 'Discord' },
+    // Media
+    'spotify': { processNames: ['Spotify'], searchTerm: 'Spotify', macOSAppName: 'Spotify' },
+    // Apple native
+    'notes': { processNames: ['Notes'], searchTerm: 'Notes', macOSAppName: 'Notes' },
+    'mail': { processNames: ['Mail'], searchTerm: 'Mail', macOSAppName: 'Mail' },
+};
+/**
+ * Resolve a user-facing app name to its alias row. Goes through
+ * `normalizeAppName` first so phrasings like "the Outlook app",
+ * "Edge browser", or '"chrome"' all match the same canonical key as
+ * the bare app name. Returns null for unknown apps — caller should
+ * fall back to `launchApp(name)` with the raw string.
+ *
+ * This is the single choke point for "name → alias row". Every caller
+ * (router, agent's `open_app`, MCP `mcp__clawdcursor__window`, REST
+ * `/execute`) hits this function, so adding normalization here means
+ * we don't have to push the same logic into every entry point.
+ */
+function resolveAlias(name) {
+    const k = (0, normalize_1.normalizeAppName)(name);
+    if (!k)
+        return null;
+    // Try the normalized form first.
+    let hit = exports.APP_ALIASES[k];
+    // Fallback: if the user's literal phrase was multi-word with a filler
+    // suffix that took it back below an alias key (e.g. "music app" → "music"
+    // → no alias), try the un-normalized form too. Cheap and only fires
+    // when normalization didn't help.
+    if (!hit) {
+        const literal = name.trim().toLowerCase().replace(/['"`‘’“”]/g, '');
+        if (literal !== k)
+            hit = exports.APP_ALIASES[literal];
+    }
+    if (!hit)
+        return null;
+    return { key: k, ...hit };
+}
+//# sourceMappingURL=aliases.js.map

package/dist/core/router/aliases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aliases.js","sourceRoot":"","sources":["../../../src/core/router/aliases.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AA4GH,oCAeC;AAzHD,2CAA+C;AA2BlC,QAAA,WAAW,GAA6B;IACnD,oBAAoB;IACpB,OAAO,EAAe,EAAE,YAAY,EAAE,CAAC,SAAS,CAAC,EAA2B,UAAU,EAAE,OAAO,EAAe,UAAU,EAAE,aAAa,EAAE,iBAAiB,EAAE,IAAI,EAAE;IAClK,SAAS,EAAa,EAAE,YAAY,EAAE,CAAC,SAAS,CAAC,EAA2B,UAAU,EAAE,OAAO,EAAe,UAAU,EAAE,aAAa,EAAE,iBAAiB,EAAE,IAAI,EAAE;IAClK,kEAAkE;IAClE,mEAAmE;IACnE,uEAAuE;IACvE,kEAAkE;IAClE,SAAS,EAAa,EAAE,YAAY,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,sBAAsB,CAAC,EAAE,UAAU,EAAE,SAAS,EAAG,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,4CAA4C,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE;IACpP,UAAU,EAAY,EAAE,YAAY,EAAE,CAAC,UAAU,CAAC,EAA0B,UAAU,EAAE,UAAU,EAAY,YAAY,EAAE,UAAU,EAAE;IAExI,mFAAmF;IACnF,YAAY,EAAU,EAAE,YAAY,EAAE,CAAC,eAAe,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,YAAY,EAAO,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,+CAA+C,EAAE;IACrM,MAAM,EAAgB,EAAE,YAAY,EAAE,CAAC,eAAe,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,YAAY,EAAO,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,+CAA+C,EAAE;IAErM,6EAA6E;IAC7E,8EAA8E;IAC9E,QAAQ,EAAc,EAAE,YAAY,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAW,UAAU,EAAE,QAAQ,EAAc,UAAU,EAAE,YAAY,EAAG,YAAY,EAAE,eAAe,EAAE;IACxK,eAAe,EAAO,EAAE,YAAY,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAW,UAAU,EAAE,QAAQ,EAAc,UAAU,EAAE,YAAY,EAAG,YAAY,EAAE,eAAe,EAAE;IACxK,SAAS,EAAa,EAAE,YAAY,EAAE,CAAC,SAAS,CAAC,EAA2B,UAAU,EAAE,SAAS,EAAa,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE;IAClK,QAAQ,EAAc,EAAE,YAAY,EAAE,CAAC,QAAQ,CAAC,EAA4B,UAAU,EAAE,QAAQ,EAAc,YAAY,EAAE,QAAQ,EAAE;IACtI,MAAM,EAAgB,EAAE,YAAY,EAAE,CAAC,QAAQ,CAAC,EAA4B,UAAU,EAAE,MAAM,EAAgB,UAAU,EAAE,YAAY,EAAG,YAAY,EAAE,gBAAgB,EAAE;IACzK,gBAAgB,EAAM,EAAE,YAAY,EAAE,CAAC,QAAQ,CAAC,EAA4B,UAAU,EAAE,MAAM,EAAgB,UAAU,EAAE,YAAY,EAAG,YAAY,EAAE,gBAAgB,EAAE;IAEzK,SAAS;IACT,SAAS,EAAa,EAAE,YAAY,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,EAAoB,UAAU,EAAE,SAAS,EAAa,YAAY,EAAE,mBAAmB,EAAE;IACjJ,mBAAmB,EAAG,EAAE,YAAY,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,EAAoB,UAAU,EAAE,SAAS,EAAa,YAAY,EAAE,mBAAmB,EAAE;IACjJ,MAAM,EAAgB,EAAE,YAAY,EAAE,CAAC,SAAS,CAAC,EAA2B,UAAU,EAAE,MAAM,EAAgB,YAAY,EAAE,gBAAgB,EAAE;IAC9I,OAAO,EAAe,EAAE,YAAY,EAAE,CAAC,OAAO,CAAC,EAA6B,UAAU,EAAE,OAAO,EAAe,YAAY,EAAE,iBAAiB,EAAE;IAE/I,QAAQ;IACR,UAAU,EAAY,EAAE,YAAY,EAAE,CAAC,UAAU,CAAC,EAA0B,UAAU,EAAE,eAAe,EAAO,YAAY,EAAE,QAAQ,EAAE;IACtI,QAAQ,EAAc,EAAE,YAAY,EAAE,CAAC,QAAQ,CAAC,EAA4B,UAAU,EAAE,QAAQ,EAAc,YAAY,EAAE,QAAQ,EAAE;IACtI,eAAe,EAAO,EAAE,YAAY,EAAE,CAAC,UAAU,CAAC,EAA0B,UAAU,EAAE,eAAe,EAAO,YAAY,EAAE,QAAQ,EAAE;IACtI,KAAK,EAAiB,EAAE,YAAY,EAAE,CAAC,KAAK,CAAC,EAA+B,UAAU,EAAE,gBAAgB,EAAM,YAAY,EAAE,UAAU,EAAE;IACxI,UAAU,EAAY,EAAE,YAAY,EAAE,CAAC,iBAAiB,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,UAAU,EAAE,UAAU,EAAU,YAAY,EAAE,UAAU,EAAE;IACxI,YAAY,EAAU,EAAE,YAAY,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,EAAgB,UAAU,EAAE,YAAY,EAAE;IAEtG,YAAY;IACZ,QAAQ,EAAc,EAAE,YAAY,EAAE,CAAC,MAAM,CAAC,EAA8B,UAAU,EAAE,oBAAoB,EAAE,YAAY,EAAE,oBAAoB,EAAE;IAClJ,MAAM,EAAgB,EAAE,YAAY,EAAE,CAAC,MAAM,CAAC,EAA8B,UAAU,EAAE,oBAAoB,EAAE,YAAY,EAAE,oBAAoB,EAAE;IAClJ,QAAQ,EAAc,EAAE,YAAY,EAAE,CAAC,QAAQ,CAAC,EAA4B,UAAU,EAAE,QAAQ,EAAc,YAAY,EAAE,QAAQ,EAAE;IACtI,OAAO,EAAe,EAAE,YAAY,EAAE,CAAC,OAAO,CAAC,EAA6B,UAAU,EAAE,OAAO,EAAe,YAAY,EAAE,OAAO,EAAE;IACrI,SAAS,EAAa,EAAE,YAAY,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAgB,UAAU,EAAE,SAAS,EAAa,YAAY,EAAE,SAAS,EAAE;IACvI,OAAO,EAAe,EAAE,YAAY,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAmB,UAAU,EAAE,OAAO,EAAe,YAAY,EAAE,OAAO,EAAE;IACrI,QAAQ,EAAc,EAAE,YAAY,EAAE,CAAC,QAAQ,CAAC,EAA4B,UAAU,EAAE,QAAQ,EAAc,YAAY,EAAE,OAAO,EAAE;IAErI,oBAAoB;IACpB,UAAU,EAAY,EAAE,YAAY,EAAE,CAAC,gBAAgB,CAAC,EAAoB,UAAU,EAAE,UAAU,EAAY,YAAY,EAAE,iBAAiB,EAAE;IAC/I,iBAAiB,EAAK,EAAE,YAAY,EAAE,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,EAAE,UAAU,EAAE,iBAAiB,EAAE,YAAY,EAAE,iBAAiB,EAAE;IACjJ,cAAc,EAAQ,EAAE,YAAY,EAAE,CAAC,SAAS,CAAC,EAA2B,UAAU,EAAE,cAAc,EAAQ,YAAY,EAAE,kBAAkB,EAAE;IAChJ,kBAAkB,EAAI,EAAE,YAAY,EAAE,CAAC,kBAAkB,CAAC,EAAkB,UAAU,EAAE,kBAAkB,EAAI,YAAY,EAAE,kBAAkB,EAAE;IAEhJ,iBAAiB;IACjB,OAAO,EAAe,EAAE,YAAY,EAAE,CAAC,OAAO,CAAC,EAA6B,UAAU,EAAE,OAAO,EAAe,YAAY,EAAE,OAAO,EAAE;IACrI,OAAO,EAAe,EAAE,YAAY,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAoB,UAAU,EAAE,OAAO,EAAe,YAAY,EAAE,OAAO,EAAE;IACrI,OAAO,EAAe,EAAE,YAAY,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAiB,UAAU,EAAE,OAAO,EAAe,YAAY,EAAE,iBAAiB,EAAE;IAC/I,SAAS,EAAa,EAAE,YAAY,EAAE,CAAC,SAAS,CAAC,EAA2B,UAAU,EAAE,SAAS,EAAa,YAAY,EAAE,SAAS,EAAE;IAEvI,QAAQ;IACR,SAAS,EAAa,EAAE,YAAY,EAAE,CAAC,SAAS,CAAC,EAA2B,UAAU,EAAE,SAAS,EAAa,YAAY,EAAE,SAAS,EAAE;IAEvI,eAAe;IACf,OAAO,EAAe,EAAE,YAAY,EAAE,CAAC,OAAO,CAAC,EAA6B,UAAU,EAAE,OAAO,EAAe,YAAY,EAAE,OAAO,EAAE;IACrI,MAAM,EAAgB,EAAE,YAAY,EAAE,CAAC,MAAM,CAAC,EAA8B,UAAU,EAAE,MAAM,EAAgB,YAAY,EAAE,MAAM,EAAE;CACrI,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,SAAgB,YAAY,CAAC,IAAY;IACvC,MAAM,CAAC,GAAG,IAAA,4BAAgB,EAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,iCAAiC;IACjC,IAAI,GAAG,GAAG,mBAAW,CAAC,CAAC,CAAC,CAAC;IACzB,sEAAsE;IACtE,0EAA0E;IAC1E,oEAAoE;IACpE,kCAAkC;IAClC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACpE,IAAI,OAAO,KAAK,CAAC;YAAE,GAAG,GAAG,mBAAW,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC;AAC5B,CAAC"}

package/dist/core/router/normalize.d.ts

@@ -0,0 +1,41 @@
+/**
+ * `normalizeAppName` — turn a free-form app reference into the short
+ * canonical token the alias table is keyed on.
+ *
+ * Background. When a user says "open outlook app" the router's regex
+ * `/^(?:open|launch|start|run)\s+(.+?)$/` captures `"outlook app"`. The
+ * alias table is keyed on `'outlook'` — so without normalization the
+ * lookup misses, the launcher falls back to "type literal string into
+ * Start Menu", and Windows Search returns whichever app it ranks
+ * highest for "outlook app" (often nothing useful). Same pattern hits
+ * "the calculator", "edge browser", "chrome browser", etc.
+ *
+ * Properties:
+ *   - **App-agnostic.** No allowlist of specific apps. Operates on
+ *     stop-word stripping rules that work for any English app name.
+ *   - **OS-agnostic.** Pure string transform. No platform calls.
+ *   - **Model-agnostic.** Can be applied at the alias-resolution choke
+ *     point so every caller (router, agent's open_app, MCP, REST) gets
+ *     it without knowing it exists.
+ *
+ * Why not ask the LLM to normalize? Because the agent's `open_app` tool
+ * receives a `name` argument from the LLM directly, and we want the
+ * platform layer to be defensive against whatever the LLM emits — same
+ * model, same capability, different days, different verbosity. Doing
+ * this in code is cheaper, deterministic, and testable.
+ */
+/**
+ * Normalize an app reference. Returns a lowercased, trimmed, filler-
+ * word-stripped string suitable for direct lookup against
+ * `APP_ALIASES`. Returns the empty string for empty / whitespace input.
+ *
+ * Examples:
+ *   "Outlook"                  → "outlook"
+ *   "the Outlook app"          → "outlook"
+ *   "Microsoft Outlook"        → "microsoft outlook"
+ *   "Edge browser"             → "edge"
+ *   '"google chrome browser"'  → "google chrome"
+ *   "calc app application"     → "calc"
+ *   ""                         → ""
+ */
+export declare function normalizeAppName(name: string): string;

package/dist/core/router/normalize.js

@@ -0,0 +1,80 @@
+"use strict";
+/**
+ * `normalizeAppName` — turn a free-form app reference into the short
+ * canonical token the alias table is keyed on.
+ *
+ * Background. When a user says "open outlook app" the router's regex
+ * `/^(?:open|launch|start|run)\s+(.+?)$/` captures `"outlook app"`. The
+ * alias table is keyed on `'outlook'` — so without normalization the
+ * lookup misses, the launcher falls back to "type literal string into
+ * Start Menu", and Windows Search returns whichever app it ranks
+ * highest for "outlook app" (often nothing useful). Same pattern hits
+ * "the calculator", "edge browser", "chrome browser", etc.
+ *
+ * Properties:
+ *   - **App-agnostic.** No allowlist of specific apps. Operates on
+ *     stop-word stripping rules that work for any English app name.
+ *   - **OS-agnostic.** Pure string transform. No platform calls.
+ *   - **Model-agnostic.** Can be applied at the alias-resolution choke
+ *     point so every caller (router, agent's open_app, MCP, REST) gets
+ *     it without knowing it exists.
+ *
+ * Why not ask the LLM to normalize? Because the agent's `open_app` tool
+ * receives a `name` argument from the LLM directly, and we want the
+ * platform layer to be defensive against whatever the LLM emits — same
+ * model, same capability, different days, different verbosity. Doing
+ * this in code is cheaper, deterministic, and testable.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizeAppName = normalizeAppName;
+/**
+ * Articles to strip from the front of an app reference.
+ * "the outlook" → "outlook" / "an excel sheet" → "excel sheet".
+ */
+const ARTICLE_PREFIX = /^(?:the|a|an)\s+/i;
+/**
+ * Generic suffixes that don't change which app the user means.
+ * "outlook app" → "outlook" / "edge browser" → "edge" /
+ * "calculator window" → "calculator" / "chrome program" → "chrome".
+ *
+ * Run iteratively so doubled suffixes ("outlook app application")
+ * collapse correctly.
+ */
+const FILLER_SUFFIX = /\s+(?:app|application|browser|window|program)$/i;
+/**
+ * Quotes / smart quotes the LLM sometimes wraps app names in.
+ * Stripped globally so `"outlook"` and `'outlook'` and `"outlook"` all
+ * collapse to `outlook` regardless of where they appear.
+ */
+const QUOTE_CHARS = /['"`‘’“”]/g;
+/**
+ * Normalize an app reference. Returns a lowercased, trimmed, filler-
+ * word-stripped string suitable for direct lookup against
+ * `APP_ALIASES`. Returns the empty string for empty / whitespace input.
+ *
+ * Examples:
+ *   "Outlook"                  → "outlook"
+ *   "the Outlook app"          → "outlook"
+ *   "Microsoft Outlook"        → "microsoft outlook"
+ *   "Edge browser"             → "edge"
+ *   '"google chrome browser"'  → "google chrome"
+ *   "calc app application"     → "calc"
+ *   ""                         → ""
+ */
+function normalizeAppName(name) {
+    let s = name.replace(QUOTE_CHARS, '').trim().toLowerCase();
+    if (!s)
+        return '';
+    s = s.replace(ARTICLE_PREFIX, '').trim();
+    // Iteratively strip suffixes — handles "outlook app application",
+    // "edge browser app", etc. Bounded to a few passes so a pathological
+    // input never loops.
+    for (let i = 0; i < 4; i += 1) {
+        const next = s.replace(FILLER_SUFFIX, '').trim();
+        if (next === s)
+            break;
+        s = next;
+    }
+    return s;
+}
+//# sourceMappingURL=normalize.js.map

package/dist/core/router/normalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.js","sourceRoot":"","sources":["../../../src/core/router/normalize.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;;AAuCH,4CAaC;AAlDD;;;GAGG;AACH,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAE3C;;;;;;;GAOG;AACH,MAAM,aAAa,GAAG,iDAAiD,CAAC;AAExE;;;;GAIG;AACH,MAAM,WAAW,GAAG,YAAY,CAAC;AAEjC;;;;;;;;;;;;;GAaG;AACH,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3D,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,kEAAkE;IAClE,qEAAqE;IACrE,qBAAqB;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,IAAI,IAAI,KAAK,CAAC;YAAE,MAAM;QACtB,CAAC,GAAG,IAAI,CAAC;IACX,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/core/safety.d.ts

@@ -0,0 +1,126 @@
+/**
+ * SafetyLayer — unified gate for every agent action (v0.8.1 rebuild).
+ *
+ * v0.8.0's `src/safety.ts` classified only by description-string match, which
+ * the audit correctly flagged as trivially bypassable (a `mouse_click(x,y)` on
+ * a Send button never contains the word "send"). V2 orchestrator didn't call
+ * SafetyLayer at all, and the `/action` REST endpoint bypassed it entirely.
+ *
+ * v0.8.1 fixes the chokepoint problem:
+ *  - Pure function `evaluate(action, context) → Decision` keyed on the ACTION
+ *    TYPE, not on description prose. A mouse_click on a button whose OCR
+ *    label matches a Confirm-tier pattern elevates to Confirm. A key combo
+ *    in BLOCKED_KEYS returns Block.
+ *  - Registry-driven coverage test (`safety-coverage.test.ts`) enforces
+ *    that every MCP tool handler invokes `evaluate` before its first side
+ *    effect.
+ *  - Decision is observable via the audit log (`safety.decision` events).
+ *
+ * Model-agnostic: no LLM calls. Pure rule engine.
+ */
+export type Tier = 'read' | 'input' | 'destructive' | 'system';
+export type Decision = {
+    decision: 'allow';
+    tier: Tier;
+} | {
+    decision: 'confirm';
+    tier: Tier;
+    reason: string;
+} | {
+    decision: 'block';
+    tier: Tier;
+    reason: string;
+};
+/**
+ * Numeric safety tier used on `ToolDefinition.safetyTier` and returned by
+ * the PR6 canonical `evaluate()` signature.
+ *
+ *   0 — read-only  (screenshot, a11y snapshot …)
+ *   1 — neutral    (click, type, scroll — reversible)
+ *   2 — mutation   (close_window, write_clipboard …)
+ *   3 — destructive (cdp_evaluate, relaunch_with_cdp …)
+ */
+export type NumericTier = 0 | 1 | 2 | 3;
+/**
+ * Canonical safety decision returned by every call site.
+ *
+ * - `allow: true`  → proceed.
+ * - `allow: false` → block or ask for confirmation; inspect `suggestedAction`.
+ */
+export interface SafetyDecision {
+    allow: boolean;
+    reason?: string;
+    suggestedAction?: 'block' | 'warn' | 'proceed';
+    tier: NumericTier;
+}
+/** What the evaluator sees. Tool name is CANONICAL — not a description. */
+export interface EvaluationContext {
+    /** Canonical tool / action name (e.g. "mouse_click", "a11y_set_value"). */
+    tool: string;
+    /** Arbitrary args shape — typed by caller; evaluator pattern-matches safely. */
+    args: Record<string, unknown>;
+    /** Optional OCR label of the element the action targets, when known. */
+    targetLabel?: string;
+    /** Optional active app name — raises the tier for sensitive domains
+     *  (email, banking, messaging, password managers). */
+    activeApp?: string;
+    /**
+     * The natural-language task the user submitted to the agent. When the
+     * target label appears verbatim in this text, the user has provided
+     * explicit consent for this destructive action and we skip the confirm
+     * tier. Without this field, all destructive matches require confirm
+     * (current behaviour). Pattern-based; works for any model + any app.
+     */
+    userTaskText?: string;
+    /**
+     * PR6: explicit numeric safety tier from the tool definition. When
+     * present, this overrides the TOOL_TIER name-lookup table so the gate
+     * consults the tool's own declared tier rather than guessing from the
+     * tool name string.
+     */
+    toolSafetyTier?: NumericTier;
+}
+/**
+ * Evaluate an action. Pure function — no side effects other than the
+ * `safety.decision` audit log.
+ *
+ * When `ctx.toolSafetyTier` is provided (set from `ToolDefinition.safetyTier`),
+ * it overrides the TOOL_TIER name-lookup for the base tier so the gate
+ * uses the tool's own declared tier rather than guessing from the name.
+ * Blocked-key and cdp_evaluate checks still run unconditionally.
+ */
+export declare function evaluate(ctx: EvaluationContext): Decision;
+/**
+ * Convenience predicate. Returns true if the decision allows the action to
+ * proceed without user confirmation.
+ */
+export declare function isAllowed(d: Decision): boolean;
+/**
+ * Canonical single safety gate used by every call site (PR6).
+ *
+ * Accepts the PR6 interface shape:
+ *   { toolName, args, ctx? }
+ *
+ * Returns a `SafetyDecision` with `allow: boolean` so callers don't need to
+ * inspect the legacy `decision` string.  The gate is the ONLY place that
+ * decides allow/block — no inline `if (toolName === 'desktop_screenshot')`
+ * branching anywhere else.
+ *
+ * Call sites:
+ *   1. `src/core/agent-loop/agent.ts`  — agent loop, every tool call
+ *   2. `src/tools/safety-gate.ts`      — MCP wrapper + REST execute middleware
+ *
+ * The `safetyTier` field is read from the tool's `ToolDefinition.safetyTier`
+ * by the caller before passing here; when absent the gate falls back to the
+ * internal TOOL_TIER name-lookup table.
+ */
+export declare function evaluateInput(input: {
+    toolName: string;
+    args: Record<string, unknown>;
+    safetyTier?: NumericTier;
+    ctx?: {
+        targetLabel?: string;
+        activeApp?: string;
+        userIntent?: string;
+    };
+}): SafetyDecision;