@phnx-labs/agents-cli 1.22.103 → 1.22.105

package/dist/lib/computer/actions.js

@@ -1,162 +0,0 @@
-import * as fs from 'fs';
-import * as path from 'path';
-import { randomUUID } from 'node:crypto';
-import { resolvePolicyPath } from './computer-rpc.js';
-import { COMPUTER_INPUT_GATED_VERBS, formatComputerPermissionGrantHint } from '../permissions.js';
-import { emit as emitEvent } from '../feed/events.js';
-import { recordComputerSession } from '../session/db.js';
-import { resolveActor } from '../actor.js';
-function isComputerInputVerb(verb) {
-    return typeof verb === 'string' && COMPUTER_INPUT_GATED_VERBS.includes(verb);
-}
-function computerSessionId(env = process.env) {
-    return env.CODEX_THREAD_ID
-        || env.CLAUDE_CODE_SESSION_ID
-        || env.CLAUDE_SESSION_ID
-        || env.AGENTS_SESSION_ID
-        || env.AGENTS_RUN_ID
-        || null;
-}
-function admissionCachePath(env = process.env) {
-    if (env.AGENTS_COMPUTER_ADMISSION_CACHE)
-        return env.AGENTS_COMPUTER_ADMISSION_CACHE;
-    return path.join(path.dirname(resolvePolicyPath()), 'computer-target-admissions.json');
-}
-function targetSelector(opts) {
-    return opts.bundle ? `bundle:${opts.bundle}` : 'frontmost';
-}
-function readAdmissionCache(filePath) {
-    try {
-        const parsed = JSON.parse(fs.readFileSync(filePath, 'utf-8'));
-        return Array.isArray(parsed.admissions) ? parsed.admissions.filter(isAdmission) : [];
-    }
-    catch {
-        return [];
-    }
-}
-function isAdmission(v) {
-    if (!v || typeof v !== 'object')
-        return false;
-    const r = v;
-    return r.sessionId !== undefined
-        && typeof r.sessionId === 'string'
-        && typeof r.selector === 'string'
-        && r.gateClass === 'input'
-        && typeof r.pid === 'number'
-        && typeof r.bundle_id === 'string'
-        && typeof r.name === 'string'
-        && typeof r.admittedAtMs === 'number'
-        && isComputerInputVerb(r.admittedByVerb);
-}
-function rememberAdmission(app, opts) {
-    const sessionId = computerSessionId(opts.env);
-    if (!sessionId)
-        return;
-    const filePath = admissionCachePath(opts.env);
-    const admissions = readAdmissionCache(filePath);
-    const next = {
-        sessionId,
-        selector: opts.selector,
-        gateClass: 'input',
-        pid: app.pid,
-        bundle_id: app.bundle_id,
-        name: app.name,
-        admittedAtMs: opts.nowMs ?? Date.now(),
-        admittedByVerb: opts.verb,
-    };
-    const filtered = admissions.filter((a) => !(a.sessionId === sessionId && a.selector === opts.selector && a.gateClass === 'input'));
-    filtered.push(next);
-    try {
-        fs.mkdirSync(path.dirname(filePath), { recursive: true });
-        fs.writeFileSync(filePath, JSON.stringify({ admissions: filtered }, null, 2), { mode: 0o600 });
-    }
-    catch {
-        // Cache persistence is best-effort; the daemon remains the final gate.
-    }
-}
-function findAdmission(opts) {
-    const sessionId = computerSessionId(opts.env);
-    if (!sessionId)
-        return null;
-    const admissions = readAdmissionCache(admissionCachePath(opts.env));
-    const matches = admissions
-        .filter((a) => a.sessionId === sessionId && a.selector === opts.selector && a.gateClass === 'input')
-        .sort((a, b) => b.admittedAtMs - a.admittedAtMs);
-    return matches[0] ?? null;
-}
-export function pickTarget(list, opts) {
-    if (opts.pid != null) {
-        const app = list.find((a) => a.pid === opts.pid);
-        return { ok: true, app: app ?? { pid: opts.pid, name: '', bundle_id: '', active: false } };
-    }
-    if (opts.bundle) {
-        const app = list.find((a) => a.bundle_id === opts.bundle);
-        if (!app) {
-            return {
-                ok: false,
-                error: `bundle not in allow list (or not running): ${opts.bundle}\n${formatComputerPermissionGrantHint(opts.bundle)}`,
-            };
-        }
-        return { ok: true, app };
-    }
-    const active = list.find((a) => a.active);
-    if (!active) {
-        return {
-            ok: false,
-            error: `no active app found in allow list\n${formatComputerPermissionGrantHint()}`,
-        };
-    }
-    return { ok: true, app: active };
-}
-function unwrap(r) {
-    if (r.error) {
-        console.error(`error: ${r.error.code}: ${r.error.message}`);
-        process.exit(1);
-    }
-    return r.result ?? {};
-}
-export async function resolveTargetPidDecision(client, opts, gate) {
-    if (opts.pid != null)
-        return { ok: true, pid: opts.pid, source: 'pid' };
-    const apps = unwrap(await client.call('list_apps'));
-    const list = apps.apps || [];
-    const picked = pickTarget(list, opts);
-    const verb = gate?.verb;
-    const selector = targetSelector(opts);
-    if (picked.ok && isComputerInputVerb(verb)) {
-        rememberAdmission(picked.app, { selector, verb, env: gate?.env, nowMs: gate?.nowMs });
-    }
-    if (!picked.ok) {
-        if (isComputerInputVerb(verb)) {
-            const admitted = findAdmission({ selector, env: gate?.env });
-            if (admitted)
-                return { ok: true, pid: admitted.pid, source: 'session_admission' };
-        }
-        return { ok: false, error: picked.error };
-    }
-    return { ok: true, pid: picked.app.pid, source: 'list_apps' };
-}
-const COMPUTER_INVOCATION_ID = randomUUID();
-export function emitComputerAction(verb, targetPid, opts, extra = {}) {
-    emitEvent('computer.action', {
-        command: verb,
-        invocationId: COMPUTER_INVOCATION_ID,
-        targetPid,
-        bundle: opts.bundle,
-        device: opts.device,
-        ...extra,
-    });
-    try {
-        recordComputerSession({
-            invocationId: COMPUTER_INVOCATION_ID,
-            sessionId: process.env.AGENT_SESSION_ID || process.env.AGENTS_SESSION_ID,
-            launchId: process.env.AGENT_LAUNCH_ID,
-            actor: resolveActor().id,
-            actionCount: 1,
-            taskPreview: typeof extra.task === 'string' ? extra.task : undefined,
-        });
-    }
-    catch {
-        // Recording is best-effort; the action and its event are already done.
-    }
-}

package/dist/lib/computer/computer-rpc.d.ts

@@ -1,39 +0,0 @@
-export interface RPCResponse {
-    id: number | null;
-    result?: Record<string, unknown>;
-    error?: {
-        code: string;
-        message: string;
-    };
-}
-export interface ComputerClient {
-    call(method: string, params?: Record<string, unknown>): Promise<RPCResponse>;
-    close(): Promise<void>;
-}
-export declare function resolveSocketPath(): string;
-export declare function resolveLogPath(): string;
-export declare function resolvePolicyPath(): string;
-export declare function loadComputerAllowList(): string[];
-export declare function writeComputerPolicy(allowedBundleIds: string[]): void;
-export declare function resolvePeersPath(): string;
-export declare function loadDefaultPeers(): string[];
-export declare function writeComputerPeers(allowedExecPaths: string[]): void;
-export declare function resolveHelperExec(): string | null;
-export declare function resolveHelperApp(): string | null;
-export declare function resolveTcpEndpoint(): {
-    host: string;
-    port: number;
-    token: string | null;
-} | null;
-export declare function resolveVncEndpoint(): {
-    host: string;
-    port: number;
-    password: string;
-} | null;
-export declare function openComputerClient(): ComputerClient;
-export declare const RPC_TIMEOUT_MS = 30000;
-export declare function resolveRpcTimeoutMs(env: string | undefined): number;
-export declare function describeTransport(): {
-    kind: 'socket' | 'stdio' | 'tcp' | 'vnc' | 'none';
-    path: string | null;
-};

package/dist/lib/computer/computer-rpc.js

@@ -1,447 +0,0 @@
-// JSON-RPC client for the computer-helper.
-//
-// Two transports, picked at runtime:
-//   - socket: ~/.agents/.cache/helpers/computer.sock (or COMPUTER_HELPER_SOCKET
-//     env) when the launchd daemon is installed and listening. Sub-50ms per
-//     call. Path is internal scratch — sibling of browser.sock.
-//   - stdio: spawn the helper binary as a child process per call. Used in
-//     dev (no install-helper) and as a fallback. The legacy probe.py and
-//     drive-capcut.py scripts in rush/agents still use this shape.
-//
-// Both transports share the same line-delimited JSON-RPC wire format:
-//   in:  {"id":N,"method":"...","params":{...}}
-//   out: {"id":N,"result":{...}} or {"id":N,"error":{"code":"...","message":"..."}}
-import { spawn } from 'child_process';
-import { createConnection } from 'net';
-import * as fs from 'fs';
-import * as path from 'path';
-import { fileURLToPath } from 'url';
-import { getHelpersDir, getLogsDir, getUserPermissionsDir, getPermissionsDir } from '../state.js';
-import { RfbClient, parseVncEndpoint } from './rfb-client.js';
-// Resolve the socket path used by the launchd-managed daemon. Internal
-// scratch — lives under getHelpersDir() (~/.agents/.cache/helpers/),
-// matching browser.sock.
-export function resolveSocketPath() {
-    const envPath = process.env.COMPUTER_HELPER_SOCKET;
-    if (envPath && envPath.length > 0)
-        return envPath;
-    return path.join(getHelpersDir(), 'computer.sock');
-}
-// Default log path for the launchd-managed daemon. Lives in the cache/logs/
-// bucket (matches the scheduler daemon's logs.jsonl convention).
-export function resolveLogPath() {
-    return path.join(getLogsDir(), 'computer-helper.log');
-}
-// Policy file the helper reads at startup and on SIGHUP. Sibling of
-// computer.sock under ~/.agents/.cache/helpers/. Allow-list of bare bundle
-// ids (e.g. "com.apple.mail"), derived from Computer(...) patterns in
-// ~/.agents/permissions/groups/.
-export function resolvePolicyPath() {
-    return path.join(getHelpersDir(), 'computer-policy.json');
-}
-// Walk all permission group YAMLs (user dir wins on name collision) and
-// collect Computer(<bundle-id>) patterns from each group's `allow:` list.
-// Returns distinct bundle ids. Line-by-line regex extraction matches
-// buildPermissionsFromGroups: YAML parsers stumble on the nested quotes in
-// some rule values, but the strict pattern below catches our shape cleanly.
-export function loadComputerAllowList() {
-    const seenFiles = new Set();
-    const allowed = new Set();
-    for (const baseDir of [getUserPermissionsDir(), getPermissionsDir()]) {
-        const groupsDir = path.join(baseDir, 'groups');
-        if (!fs.existsSync(groupsDir))
-            continue;
-        let entries;
-        try {
-            entries = fs.readdirSync(groupsDir, { withFileTypes: true });
-        }
-        catch {
-            continue;
-        }
-        for (const entry of entries) {
-            if (!entry.isFile())
-                continue;
-            if (!entry.name.endsWith('.yml') && !entry.name.endsWith('.yaml'))
-                continue;
-            // User dir wins on filename collision.
-            const stem = entry.name.replace(/\.(yaml|yml)$/, '');
-            if (seenFiles.has(stem))
-                continue;
-            seenFiles.add(stem);
-            const filePath = path.join(groupsDir, entry.name);
-            let content;
-            try {
-                content = fs.readFileSync(filePath, 'utf-8');
-            }
-            catch {
-                continue;
-            }
-            // Strict regex: optional whitespace, dash, quoted Computer(<id>).
-            // Only honors `allow:` lines — `deny:` Computer patterns would be a
-            // contradiction (everything is deny-by-default already).
-            let inAllow = false;
-            for (const rawLine of content.split('\n')) {
-                const line = rawLine.replace(/\r$/, '');
-                const sectionMatch = line.match(/^(\w+)\s*:\s*$/);
-                if (sectionMatch) {
-                    inAllow = sectionMatch[1] === 'allow';
-                    continue;
-                }
-                if (!inAllow)
-                    continue;
-                const ruleMatch = line.match(/^\s*-\s*"Computer\(([^)]+)\)"\s*$/);
-                if (ruleMatch) {
-                    const bundleId = ruleMatch[1].trim();
-                    if (bundleId.length > 0)
-                        allowed.add(bundleId);
-                }
-            }
-        }
-    }
-    return [...allowed].sort();
-}
-// Write the policy file the helper reads at startup and on SIGHUP.
-// Mode 0600 — same lockdown as the socket (lives in the user-owned cache
-// dir, but be explicit).
-export function writeComputerPolicy(allowedBundleIds) {
-    const dir = getHelpersDir();
-    if (!fs.existsSync(dir)) {
-        fs.mkdirSync(dir, { recursive: true });
-    }
-    const policy = { allow: allowedBundleIds };
-    fs.writeFileSync(resolvePolicyPath(), JSON.stringify(policy, null, 2), { mode: 0o600 });
-}
-// Peer-auth (F5): the helper reads a list of executable paths it will
-// accept connections from. Anything else — `nc`, `/usr/bin/python3`, a
-// random electron app — gets the socket closed before its first RPC.
-// File mirrors computer-policy.json: JSON, mode 0600, missing/unparseable
-// means deny-everything.
-export function resolvePeersPath() {
-    return path.join(getHelpersDir(), 'computer-peers.json');
-}
-// Default peer set: this exact `agents` CLI binary plus Rush.app if it's
-// installed. realpath() the symlink chain so we record the on-disk path
-// the helper will see via proc_pidpath, not the shim path.
-//
-// Why path-based instead of codesign-team-id? The agents CLI is unsigned
-// today (npm distribution), and even if we sign Rush.app the team-id
-// check would need a separate roundtrip. Path is concrete and fast; the
-// daemon already runs as the user so anyone who can swap a binary at
-// these paths can do worse via other means.
-export function loadDefaultPeers() {
-    const out = new Set();
-    const add = (p) => {
-        try {
-            out.add(fs.realpathSync(p));
-        }
-        catch {
-            out.add(p);
-        }
-    };
-    // The Node executable currently running the CLI. This is what
-    // proc_pidpath() will report when the CLI calls into the daemon.
-    if (process.execPath)
-        add(process.execPath);
-    // Rush.app — the consumer Electron client. Both the helper-binary and
-    // the main app binary are possible callers depending on how Rush wires
-    // the RPC client.
-    const rushCandidates = [
-        '/Applications/Rush.app/Contents/MacOS/Rush',
-        '/Applications/Rush.app/Contents/MacOS/Electron',
-    ];
-    for (const p of rushCandidates) {
-        if (fs.existsSync(p))
-            add(p);
-    }
-    return [...out].sort();
-}
-// Write the peer-auth allow list. Same mode 0600 + atomic-ish semantics
-// as the policy file. The daemon picks it up at startup and on SIGHUP.
-export function writeComputerPeers(allowedExecPaths) {
-    const dir = getHelpersDir();
-    if (!fs.existsSync(dir)) {
-        fs.mkdirSync(dir, { recursive: true });
-    }
-    fs.writeFileSync(resolvePeersPath(), JSON.stringify({ allow: allowedExecPaths }, null, 2), { mode: 0o600 });
-}
-// Resolve the helper executable inside the dist .app bundle. Used by the stdio
-// fallback and by install-helper to find the source bundle. Only TRUSTED sources
-// are listed here: a local checkout build and the bundled tarball copy. The
-// download cache is deliberately NOT a candidate — a cached bundle is
-// user-writable and must only ever be read through downloadMacHelperApp(), which
-// re-verifies its signature + Team ID + notarization on every cache hit
-// (lib/computer/download.ts). Listing the cache here would let a same-user
-// process plant a differently-signed .app that install-helper trusts.
-export function resolveHelperExec() {
-    const here = path.dirname(fileURLToPath(import.meta.url));
-    const candidates = [
-        // Local build (running from the agents-cli checkout). cli/dist/lib/computer -> repo root (4 up) -> native/computer-mac.
-        path.resolve(here, '..', '..', '..', '..', 'native', 'computer-mac', 'dist', 'ComputerHelper.app', 'Contents', 'MacOS', 'ComputerHelper'),
-        // Bundled with the npm package (dist/lib/computer -> dist/).
-        path.resolve(here, '..', '..', 'computer-helper', 'ComputerHelper.app', 'Contents', 'MacOS', 'ComputerHelper'),
-    ];
-    for (const c of candidates) {
-        if (fs.existsSync(c))
-            return c;
-    }
-    return null;
-}
-// Resolve the dist .app bundle directory (not the inner exec).
-export function resolveHelperApp() {
-    const exec = resolveHelperExec();
-    if (!exec)
-        return null;
-    // exec = <bundle>/Contents/MacOS/ComputerHelper
-    return path.resolve(exec, '..', '..', '..');
-}
-// Resolve the TCP endpoint for the Windows daemon (computer-helper-win), if
-// configured. The Windows helper binds loopback TCP (Program.cs) and the CLI
-// reaches it over an `ssh -L` tunnel, so the endpoint is a local forwarded
-// port. COMPUTER_HELPER_TCP is "host:port" (host defaults to 127.0.0.1);
-// COMPUTER_HELPER_TOKEN is the shared secret sent in the first `auth` frame.
-export function resolveTcpEndpoint() {
-    const raw = process.env.COMPUTER_HELPER_TCP;
-    if (!raw || raw.length === 0)
-        return null;
-    const [hostPart, portPart] = raw.includes(':') ? raw.split(':') : ['127.0.0.1', raw];
-    const port = Number(portPart);
-    if (!Number.isInteger(port) || port <= 0)
-        return null;
-    const token = process.env.COMPUTER_HELPER_TOKEN;
-    return { host: hostPart || '127.0.0.1', port, token: token && token.length > 0 ? token : null };
-}
-// Resolve the VNC/RFB endpoint for driving a remote GUI desktop over the RFB
-// protocol (an x11vnc/Xvnc server — e.g. a headless Linux desktop or an LXD
-// container exposing x11vnc on the host's Tailscale IP). COMPUTER_HELPER_VNC is
-// "host:port" (port defaults to 5901); COMPUTER_HELPER_VNC_PASSWORD is the VNC
-// password. Unlike the native helpers this transport carries a framebuffer, not
-// an accessibility tree, so it is coordinate-based (see rfb-client.ts).
-export function resolveVncEndpoint() {
-    const parsed = parseVncEndpoint(process.env.COMPUTER_HELPER_VNC);
-    if (!parsed)
-        return null;
-    return { ...parsed, password: process.env.COMPUTER_HELPER_VNC_PASSWORD ?? '' };
-}
-// Pick the best transport. Precedence:
-//   1. COMPUTER_HELPER_VNC  -> an RFB/VNC desktop (Linux GUI over the wire).
-//   2. COMPUTER_HELPER_TCP  -> the Windows daemon over a (tunneled) TCP port.
-//   3. the macOS launchd socket if it exists.
-//   4. spawning the helper as a subprocess (legacy/dev fallback).
-export function openComputerClient() {
-    const vnc = resolveVncEndpoint();
-    if (vnc) {
-        return new RfbClient(vnc.host, vnc.port, vnc.password);
-    }
-    const tcp = resolveTcpEndpoint();
-    if (tcp) {
-        return new TcpClient(tcp.host, tcp.port, tcp.token);
-    }
-    const sockPath = resolveSocketPath();
-    if (fs.existsSync(sockPath)) {
-        return new SocketClient(sockPath);
-    }
-    const helperExec = resolveHelperExec();
-    if (!helperExec) {
-        throw new Error('helper not built. Run: ./native/computer-mac/scripts/build.sh debug');
-    }
-    return new StdioClient(helperExec);
-}
-// Per-call RPC timeout. Without it a hung daemon (deadlocked connection
-// queue, stopped process) hangs the CLI forever — the waiter map never
-// settles. 30s clears every daemon-side ceiling (wait caps at 30s,
-// launch_app at 10s, screenshot at 5s). Overridable for slower flows.
-export const RPC_TIMEOUT_MS = 30_000;
-export function resolveRpcTimeoutMs(env) {
-    const n = Number(env);
-    return Number.isFinite(n) && n > 0 ? n : RPC_TIMEOUT_MS;
-}
-// Shared waiter map + line parser. Both transports plug their reader into
-// `handleChunk` and their writer into `send`.
-class BaseClient {
-    buf = '';
-    waiters = new Map();
-    nextId = 1;
-    closed = false;
-    handleChunk(chunk) {
-        this.buf += chunk;
-        let nl;
-        while ((nl = this.buf.indexOf('\n')) !== -1) {
-            const line = this.buf.slice(0, nl);
-            this.buf = this.buf.slice(nl + 1);
-            if (!line)
-                continue;
-            try {
-                const obj = JSON.parse(line);
-                const id = typeof obj.id === 'number' ? obj.id : null;
-                if (id !== null && this.waiters.has(id)) {
-                    const resolve = this.waiters.get(id);
-                    this.waiters.delete(id);
-                    resolve(obj);
-                }
-            }
-            catch {
-                // Drop garbage; helper diagnostics go to stderr / log file.
-            }
-        }
-    }
-    failPending(code, message) {
-        for (const [id, resolve] of this.waiters) {
-            resolve({ id, error: { code, message } });
-        }
-        this.waiters.clear();
-    }
-    async call(method, params) {
-        if (this.closed) {
-            return { id: null, error: { code: 'helper_exited', message: 'helper not running' } };
-        }
-        const id = this.nextId++;
-        const payload = JSON.stringify({ id, method, params: params ?? {} }) + '\n';
-        const timeoutMs = resolveRpcTimeoutMs(process.env.COMPUTER_HELPER_RPC_TIMEOUT_MS);
-        return new Promise((resolve) => {
-            const timer = setTimeout(() => {
-                if (this.waiters.delete(id)) {
-                    resolve({ id, error: { code: 'rpc_timeout', message: `helper did not respond within ${timeoutMs}ms` } });
-                }
-            }, timeoutMs);
-            // Resolve as an error (never reject) so callers flow through unwrap()
-            // uniformly, matching failPending's contract.
-            this.waiters.set(id, (r) => {
-                clearTimeout(timer);
-                resolve(r);
-            });
-            this.send(payload);
-        });
-    }
-}
-class SocketClient extends BaseClient {
-    sock;
-    constructor(socketPath) {
-        super();
-        this.sock = createConnection({ path: socketPath });
-        this.sock.setEncoding('utf8');
-        this.sock.on('data', (chunk) => this.handleChunk(chunk));
-        this.sock.on('error', (err) => {
-            this.closed = true;
-            this.failPending('socket_error', err.message);
-        });
-        this.sock.on('close', () => {
-            this.closed = true;
-            this.failPending('helper_exited', 'socket closed before reply');
-        });
-    }
-    send(payload) {
-        this.sock.write(payload);
-    }
-    async close() {
-        if (this.closed)
-            return;
-        this.sock.end();
-        await new Promise((resolve) => {
-            if (this.closed)
-                return resolve();
-            this.sock.on('close', () => resolve());
-        });
-    }
-}
-// TCP transport for the Windows daemon (computer-helper-win). The daemon
-// binds loopback only (Program.cs); the CLI reaches it over an `ssh -L`
-// tunnel, so `host` is typically 127.0.0.1 + a forwarded port. When a token
-// is configured the daemon accepts only an `auth` frame until authenticated,
-// so we send that first and gate every other call on it.
-class TcpClient extends BaseClient {
-    sock;
-    authReady;
-    constructor(host, port, token) {
-        super();
-        this.sock = createConnection({ host, port });
-        this.sock.setEncoding('utf8');
-        this.sock.on('data', (chunk) => this.handleChunk(chunk));
-        this.sock.on('error', (err) => {
-            this.closed = true;
-            this.failPending('socket_error', err.message);
-        });
-        this.sock.on('close', () => {
-            this.closed = true;
-            this.failPending('helper_exited', 'tcp connection closed before reply');
-        });
-        // Kick off the auth handshake synchronously so its frame (id 1) is the
-        // first thing written. The Windows daemon now REQUIRES a token (it refuses to
-        // start without one); a null token here means no auth frame is sent, the
-        // daemon drops the connection, and the caller is told to re-run `setup`.
-        this.authReady = token ? this.authenticate(token) : Promise.resolve();
-    }
-    async authenticate(token) {
-        const res = await super.call('auth', { token });
-        if (res.error)
-            throw new Error(`computer-helper auth failed: ${res.error.code}`);
-    }
-    async call(method, params) {
-        if (method !== 'auth') {
-            try {
-                await this.authReady;
-            }
-            catch (e) {
-                return { id: null, error: { code: 'auth_failed', message: e.message } };
-            }
-        }
-        return super.call(method, params);
-    }
-    send(payload) {
-        this.sock.write(payload);
-    }
-    async close() {
-        if (this.closed)
-            return;
-        this.sock.end();
-        await new Promise((resolve) => {
-            if (this.closed)
-                return resolve();
-            this.sock.on('close', () => resolve());
-        });
-    }
-}
-class StdioClient extends BaseClient {
-    proc;
-    constructor(helperPath) {
-        super();
-        this.proc = spawn(helperPath, [], { stdio: ['pipe', 'pipe', 'pipe'] });
-        this.proc.stdout.setEncoding('utf8');
-        this.proc.stdout.on('data', (chunk) => this.handleChunk(chunk));
-        this.proc.on('exit', () => {
-            this.closed = true;
-            this.failPending('helper_exited', 'helper exited before reply');
-        });
-    }
-    send(payload) {
-        this.proc.stdin.write(payload);
-    }
-    async close() {
-        if (this.closed)
-            return;
-        this.proc.stdin.end();
-        await new Promise((resolve) => {
-            if (this.closed)
-                return resolve();
-            this.proc.on('exit', () => resolve());
-        });
-    }
-}
-// Describe which transport is currently in use. Useful for diagnostics
-// like `agents computer status`. TCP takes precedence to match
-// openComputerClient() — when COMPUTER_HELPER_TCP is set we drive a remote
-// (Windows) daemon over a tunnel, so callers off macOS (no socket, no local
-// .app) must not be told "no transport". `path` is null: the endpoint is an
-// env-configured host:port, not an on-disk path.
-export function describeTransport() {
-    if (resolveVncEndpoint())
-        return { kind: 'vnc', path: null };
-    if (resolveTcpEndpoint())
-        return { kind: 'tcp', path: null };
-    const sockPath = resolveSocketPath();
-    if (fs.existsSync(sockPath))
-        return { kind: 'socket', path: sockPath };
-    const exec = resolveHelperExec();
-    if (exec)
-        return { kind: 'stdio', path: exec };
-    return { kind: 'none', path: null };
-}

package/dist/lib/computer/des.d.ts

@@ -1 +0,0 @@
-export declare function desEncryptBlock(key8: Buffer, block8: Buffer): Buffer;