@priyanshumit/macos-terminal-mcp 0.3.0

package/dist/safety/queue.js

@@ -0,0 +1,70 @@
+import { randomUUID } from "node:crypto";
+const STALE_MS = 10 * 60 * 1000;
+const pending = new Map();
+export function enqueue(input) {
+    const id = randomUUID();
+    const now = Date.now();
+    const expiresAt = now + STALE_MS;
+    const promise = new Promise((resolve) => {
+        const timer = setTimeout(() => {
+            const entry = pending.get(id);
+            if (entry) {
+                pending.delete(id);
+                entry.resolve({ approved: false, source: "expired" });
+            }
+        }, STALE_MS);
+        pending.set(id, {
+            id,
+            tty: input.tty,
+            command: input.command,
+            matchedPattern: input.matchedPattern,
+            matchedDescription: input.matchedDescription,
+            createdAt: now,
+            expiresAt,
+            resolve,
+            timer,
+        });
+    });
+    return { id, promise };
+}
+export function resolvePending(id, approved, source, reason) {
+    const entry = pending.get(id);
+    if (!entry)
+        return false;
+    clearTimeout(entry.timer);
+    pending.delete(id);
+    entry.resolve({ approved, source, ...(reason ? { reason } : {}) });
+    return true;
+}
+export function listPending() {
+    const now = Date.now();
+    return Array.from(pending.values())
+        .map((e) => ({
+        id: e.id,
+        tty: e.tty,
+        command: e.command,
+        ...(e.matchedPattern ? { matchedPattern: e.matchedPattern } : {}),
+        ...(e.matchedDescription ? { matchedDescription: e.matchedDescription } : {}),
+        createdAt: e.createdAt,
+        expiresAt: e.expiresAt,
+        ageMs: now - e.createdAt,
+    }))
+        .sort((a, b) => a.createdAt - b.createdAt);
+}
+export function getPending(id) {
+    const e = pending.get(id);
+    if (!e)
+        return undefined;
+    const now = Date.now();
+    return {
+        id: e.id,
+        tty: e.tty,
+        command: e.command,
+        ...(e.matchedPattern ? { matchedPattern: e.matchedPattern } : {}),
+        ...(e.matchedDescription ? { matchedDescription: e.matchedDescription } : {}),
+        createdAt: e.createdAt,
+        expiresAt: e.expiresAt,
+        ageMs: now - e.createdAt,
+    };
+}
+//# sourceMappingURL=queue.js.map

package/dist/safety/queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.js","sourceRoot":"","sources":["../../src/safety/queue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAsBzC,MAAM,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAChC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;AAShD,MAAM,UAAU,OAAO,CAAC,KAAmB;IAIzC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,GAAG,GAAG,QAAQ,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,EAAE;QACzD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9B,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnB,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACxD,CAAC;QACH,CAAC,EAAE,QAAQ,CAAC,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;YACd,EAAE;YACF,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,SAAS,EAAE,GAAG;YACd,SAAS;YACT,OAAO;YACP,KAAK;SACN,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,EAAU,EACV,QAAiB,EACjB,MAAwB,EACxB,MAAe;IAEf,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1B,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnB,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC;AACd,CAAC;AAaD,MAAM,UAAU,WAAW;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;SAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,SAAS;KACzB,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EAAU;IACnC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1B,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC"}

package/dist/tools/clear.js

@@ -0,0 +1,100 @@
+import { z } from "zod";
+import { OsascriptError, runJxa } from "../applescript.js";
+import { appendAudit } from "../safety/audit.js";
+import { confirmWithUser, isWriteToolsEnabled, writeToolsDisabledMessage, } from "../safety/confirm.js";
+export function buildClearScript(tty) {
+    return `
+function safe(fn) { try { return fn(); } catch (e) { return null; } }
+var app = Application.currentApplication();
+app.includeStandardAdditions = true;
+(function clearTab(targetTty) {
+  const terminal = Application("Terminal");
+  const wins = terminal.windows();
+  for (let wi = 0; wi < wins.length; wi++) {
+    const w = wins[wi];
+    const tabs = w.tabs();
+    for (let ti = 0; ti < tabs.length; ti++) {
+      const t = tabs[ti];
+      if (safe(function () { return t.tty(); }) === targetTty) {
+        terminal.activate();
+        try { w.frontmost = true; } catch (e) {}
+        try { t.selected = true; } catch (e) {}
+        delay(0.2);
+        Application("System Events").keystroke("k", { using: "command down" });
+        return "OK";
+      }
+    }
+  }
+  throw new Error("No Terminal.app tab found with tty " + targetTty);
+})(${JSON.stringify(tty)});
+`;
+}
+export async function clearHandler({ tty }) {
+    if (!isWriteToolsEnabled()) {
+        return {
+            content: [{ type: "text", text: writeToolsDisabledMessage("terminal_clear") }],
+            isError: true,
+        };
+    }
+    let allowed;
+    try {
+        allowed = await confirmWithUser({
+            title: "macos-terminal-mcp · terminal_clear",
+            message: `Clear scrollback of ${tty}?\n\nThis briefly switches focus to Terminal.app to deliver Cmd+K.`,
+        });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+            content: [{ type: "text", text: `Confirmation dialog failed: ${message}` }],
+            isError: true,
+        };
+    }
+    if (!allowed) {
+        await appendAudit({
+            tool: "terminal_clear",
+            outcome: "denied",
+            tty,
+            source: "dialog",
+        });
+        return { content: [{ type: "text", text: "User denied the clear." }], isError: true };
+    }
+    try {
+        await runJxa(buildClearScript(tty));
+        await appendAudit({
+            tool: "terminal_clear",
+            outcome: "success",
+            tty,
+            source: "dialog",
+        });
+        return { content: [{ type: "text", text: `Cleared scrollback of ${tty}.` }] };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        const hint = err instanceof OsascriptError && /not authorized/i.test(err.stderr)
+            ? "\nMissing Automation OR Accessibility permission. Both are required for keystroke simulation."
+            : "";
+        await appendAudit({
+            tool: "terminal_clear",
+            outcome: "error",
+            tty,
+            errorMessage: message,
+        });
+        return {
+            content: [{ type: "text", text: `terminal_clear failed: ${message}${hint}` }],
+            isError: true,
+        };
+    }
+}
+export function register(server) {
+    server.registerTool("terminal_clear", {
+        description: "Clear the buffer AND scrollback of a specific Terminal.app tab by simulating Cmd+K (Edit → Clear Scrollback). Side effect: briefly steals focus to Terminal.app to deliver the keystroke; the user may need to switch back to their previous app. Requires WRITE_TOOLS_ENABLED=1 and triggers a confirmation dialog.",
+        inputSchema: {
+            tty: z
+                .string()
+                .regex(/^\/dev\/ttys[0-9]+$/)
+                .describe('Target tab tty, e.g. "/dev/ttys003"'),
+        },
+    }, clearHandler);
+}
+//# sourceMappingURL=clear.js.map

package/dist/tools/clear.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clear.js","sourceRoot":"","sources":["../../src/tools/clear.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAE9B,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,OAAO;;;;;;;;;;;;;;;;;;;;;;;KAuBJ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;CACvB,CAAC;AACF,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAE,GAAG,EAAc;IACpD,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;QAC3B,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC9E,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,eAAe,CAAC;YAC9B,KAAK,EAAE,qCAAqC;YAC5C,OAAO,EAAE,uBAAuB,GAAG,oEAAoE;SACxG,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,+BAA+B,OAAO,EAAE,EAAE,CAAC;YAC3E,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,WAAW,CAAC;YAChB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,QAAQ;YACjB,GAAG;YACH,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxF,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;QACpC,MAAM,WAAW,CAAC;YAChB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,SAAS;YAClB,GAAG;YACH,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC;IAChF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,GACR,GAAG,YAAY,cAAc,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YACjE,CAAC,CAAC,+FAA+F;YACjG,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,WAAW,CAAC;YAChB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,OAAO;YAChB,GAAG;YACH,YAAY,EAAE,OAAO;SACtB,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,OAAO,GAAG,IAAI,EAAE,EAAE,CAAC;YAC7E,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,WAAW,EACT,sTAAsT;QACxT,WAAW,EAAE;YACX,GAAG,EAAE,CAAC;iBACH,MAAM,EAAE;iBACR,KAAK,CAAC,qBAAqB,CAAC;iBAC5B,QAAQ,CAAC,qCAAqC,CAAC;SACnD;KACF,EACD,YAAY,CACb,CAAC;AACJ,CAAC"}

package/dist/tools/execute.js

@@ -0,0 +1,158 @@
+import { z } from "zod";
+import { OsascriptError, runJxa } from "../applescript.js";
+import { appendAudit } from "../safety/audit.js";
+import { confirmWithUser, isWriteToolsEnabled, writeToolsDisabledMessage, } from "../safety/confirm.js";
+import { evaluateCommand, loadSafetyConfig } from "../safety/patterns.js";
+import { enqueue, resolvePending } from "../safety/queue.js";
+export function buildExecuteScript(tty, command) {
+    return `
+function safe(fn) { try { return fn(); } catch (e) { return null; } }
+(function executeInTab(targetTty, command) {
+  const terminal = Application("Terminal");
+  const wins = terminal.windows();
+  for (let wi = 0; wi < wins.length; wi++) {
+    const w = wins[wi];
+    const tabs = w.tabs();
+    for (let ti = 0; ti < tabs.length; ti++) {
+      const t = tabs[ti];
+      if (safe(function () { return t.tty(); }) === targetTty) {
+        terminal.doScript(command, { in: t });
+        return "OK";
+      }
+    }
+  }
+  throw new Error("No Terminal.app tab found with tty " + targetTty);
+})(${JSON.stringify(tty)}, ${JSON.stringify(command)});
+`;
+}
+function truncate(s, max) {
+    return s.length > max ? `${s.slice(0, max)}… [${s.length - max} chars elided]` : s;
+}
+export async function executeHandler({ tty, command }) {
+    if (!isWriteToolsEnabled()) {
+        return {
+            content: [{ type: "text", text: writeToolsDisabledMessage("terminal_execute") }],
+            isError: true,
+        };
+    }
+    const config = await loadSafetyConfig();
+    const verdict = evaluateCommand(command, config);
+    if (verdict.level === "forbidden") {
+        const descPart = verdict.matchedDescription ? ` (${verdict.matchedDescription})` : "";
+        await appendAudit({
+            tool: "terminal_execute",
+            outcome: "refused",
+            tty,
+            command,
+            level: "forbidden",
+            matchedPattern: verdict.matchedPattern,
+        });
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Refused: command matches FORBIDDEN pattern ${verdict.matchedPattern}${descPart}. ` +
+                        `Forbidden commands cannot be approved through this tool — run them yourself in a terminal if you need to.`,
+                },
+            ],
+            isError: true,
+        };
+    }
+    let resolutionSource = "auto";
+    if (verdict.level === "requires_approval") {
+        const descPart = verdict.matchedDescription
+            ? `\nMatched: ${verdict.matchedPattern} (${verdict.matchedDescription})`
+            : verdict.matchedPattern
+                ? `\nMatched pattern: ${verdict.matchedPattern}`
+                : "\nNo matching pattern — default policy requires approval.";
+        const { id, promise } = enqueue({
+            tty,
+            command,
+            matchedPattern: verdict.matchedPattern,
+            matchedDescription: verdict.matchedDescription,
+        });
+        void confirmWithUser({
+            title: "macos-terminal-mcp · terminal_execute",
+            message: `Run in ${tty}:\n\n${truncate(command, 800)}${descPart}\n\nQueue id: ${id}`,
+        }).then((allowed) => resolvePending(id, allowed, "dialog"), () => undefined);
+        const result = await promise;
+        if (!result.approved) {
+            const reasonPart = result.reason ? ` (${result.reason})` : "";
+            await appendAudit({
+                tool: "terminal_execute",
+                outcome: "denied",
+                tty,
+                command,
+                level: "requires_approval",
+                matchedPattern: verdict.matchedPattern,
+                source: result.source,
+                ...(result.reason ? { details: { reason: result.reason } } : {}),
+            });
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Command denied via ${result.source}${reasonPart}.`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        resolutionSource = result.source;
+    }
+    try {
+        await runJxa(buildExecuteScript(tty, command));
+        const path = verdict.level === "safe"
+            ? `auto-run (safe pattern: ${verdict.matchedPattern})`
+            : `approved via ${resolutionSource}`;
+        await appendAudit({
+            tool: "terminal_execute",
+            outcome: "success",
+            tty,
+            command,
+            level: verdict.level,
+            matchedPattern: verdict.matchedPattern,
+            source: verdict.level === "safe" ? "auto" : resolutionSource,
+        });
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Executed in ${tty} [${path}]: ${truncate(command, 200)}`,
+                },
+            ],
+        };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        const hint = err instanceof OsascriptError && /not authorized/i.test(err.stderr)
+            ? "\nAutomation permission missing — System Settings → Privacy & Security → Automation."
+            : "";
+        await appendAudit({
+            tool: "terminal_execute",
+            outcome: "error",
+            tty,
+            command,
+            level: verdict.level,
+            matchedPattern: verdict.matchedPattern,
+            errorMessage: message,
+        });
+        return {
+            content: [{ type: "text", text: `terminal_execute failed: ${message}${hint}` }],
+            isError: true,
+        };
+    }
+}
+export function register(server) {
+    server.registerTool("terminal_execute", {
+        description: 'Run a shell command in a specific Terminal.app tab identified by its tty (e.g. "/dev/ttys003"). Behaves as if the command was typed by the user and Enter was pressed — output appears in the tab. Three-tier safety: "safe" patterns auto-run, "requires_approval" patterns trigger a native confirmation dialog, "forbidden" patterns are refused outright. Requires WRITE_TOOLS_ENABLED=1.',
+        inputSchema: {
+            tty: z
+                .string()
+                .regex(/^\/dev\/ttys[0-9]+$/)
+                .describe('Target tab tty, e.g. "/dev/ttys003"'),
+            command: z.string().min(1).max(8192).describe("Shell command to run in the target tab"),
+        },
+    }, executeHandler);
+}
+//# sourceMappingURL=execute.js.map

package/dist/tools/execute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.js","sourceRoot":"","sources":["../../src/tools/execute.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAE7D,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,OAAe;IAC7D,OAAO;;;;;;;;;;;;;;;;;KAiBJ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;CACnD,CAAC;AACF,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,GAAW;IACtC,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAE,GAAG,EAAE,OAAO,EAAgB;IACjE,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;QAC3B,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAChF,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAEjD,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,MAAM,WAAW,CAAC;YAChB,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,SAAS;YAClB,GAAG;YACH,OAAO;YACP,KAAK,EAAE,WAAW;YAClB,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EACF,8CAA8C,OAAO,CAAC,cAAc,GAAG,QAAQ,IAAI;wBACnF,2GAA2G;iBAC9G;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,GAA4C,MAAM,CAAC;IACvE,IAAI,OAAO,CAAC,KAAK,KAAK,mBAAmB,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,kBAAkB;YACzC,CAAC,CAAC,cAAc,OAAO,CAAC,cAAc,KAAK,OAAO,CAAC,kBAAkB,GAAG;YACxE,CAAC,CAAC,OAAO,CAAC,cAAc;gBACtB,CAAC,CAAC,sBAAsB,OAAO,CAAC,cAAc,EAAE;gBAChD,CAAC,CAAC,2DAA2D,CAAC;QAElE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;YAC9B,GAAG;YACH,OAAO;YACP,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;SAC/C,CAAC,CAAC;QAEH,KAAK,eAAe,CAAC;YACnB,KAAK,EAAE,uCAAuC;YAC9C,OAAO,EAAE,UAAU,GAAG,QAAQ,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,QAAQ,iBAAiB,EAAE,EAAE;SACrF,CAAC,CAAC,IAAI,CACL,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,EAClD,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,MAAM,WAAW,CAAC;gBAChB,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,QAAQ;gBACjB,GAAG;gBACH,OAAO;gBACP,KAAK,EAAE,mBAAmB;gBAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjE,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,sBAAsB,MAAM,CAAC,MAAM,GAAG,UAAU,GAAG;qBAC1D;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IACnC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/C,MAAM,IAAI,GACR,OAAO,CAAC,KAAK,KAAK,MAAM;YACtB,CAAC,CAAC,2BAA2B,OAAO,CAAC,cAAc,GAAG;YACtD,CAAC,CAAC,gBAAgB,gBAAgB,EAAE,CAAC;QACzC,MAAM,WAAW,CAAC;YAChB,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,SAAS;YAClB,GAAG;YACH,OAAO;YACP,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,MAAM,EAAE,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB;SAC7D,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,eAAe,GAAG,KAAK,IAAI,MAAM,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE;iBAChE;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,GACR,GAAG,YAAY,cAAc,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YACjE,CAAC,CAAC,sFAAsF;YACxF,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,WAAW,CAAC;YAChB,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,OAAO;YAChB,GAAG;YACH,OAAO;YACP,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,YAAY,EAAE,OAAO;SACtB,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,OAAO,GAAG,IAAI,EAAE,EAAE,CAAC;YAC/E,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;QACE,WAAW,EACT,+XAA+X;QACjY,WAAW,EAAE;YACX,GAAG,EAAE,CAAC;iBACH,MAAM,EAAE;iBACR,KAAK,CAAC,qBAAqB,CAAC;iBAC5B,QAAQ,CAAC,qCAAqC,CAAC;YAClD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;SACxF;KACF,EACD,cAAc,CACf,CAAC;AACJ,CAAC"}

package/dist/tools/list.js

@@ -0,0 +1,52 @@
+import { OsascriptError, runJxa } from "../applescript.js";
+const LIST_SCRIPT = `
+function safe(fn) {
+  try { return fn(); } catch (e) { return null; }
+}
+(function listTerminals() {
+  const terminal = Application("Terminal");
+  const result = [];
+  const wins = terminal.windows();
+  for (let wi = 0; wi < wins.length; wi++) {
+    const w = wins[wi];
+    const tabs = w.tabs();
+    for (let ti = 0; ti < tabs.length; ti++) {
+      const t = tabs[ti];
+      result.push({
+        windowId: safe(function () { return w.id(); }),
+        windowName: safe(function () { return w.name(); }) || "",
+        tabIndex: ti + 1,
+        tty: safe(function () { return t.tty(); }) || "",
+        title: safe(function () { return t.customTitle(); }) || safe(function () { return t.title(); }) || "",
+        busy: safe(function () { return t.busy(); }) || false,
+        selected: safe(function () { return t.selected(); }) || false,
+        processes: safe(function () { return t.processes(); }) || [],
+      });
+    }
+  }
+  return JSON.stringify(result);
+})();
+`;
+export async function listHandler() {
+    try {
+        const json = await runJxa(LIST_SCRIPT);
+        return { content: [{ type: "text", text: json }] };
+    }
+    catch (err) {
+        const hint = err instanceof OsascriptError && /not authorized/i.test(err.stderr)
+            ? "\n\nThis usually means Automation permission has not been granted. Open System Settings → Privacy & Security → Automation and allow the MCP server's host process to control Terminal.app."
+            : "";
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+            content: [{ type: "text", text: `terminal_list failed: ${message}${hint}` }],
+            isError: true,
+        };
+    }
+}
+export function register(server) {
+    server.registerTool("terminal_list", {
+        description: 'List every open Terminal.app window and tab with metadata. Returns a JSON array where each entry has: windowId, windowName, tabIndex, tty, title, busy (is a command running), selected (is the active tab), processes (foreground process names). Use the `tty` value (e.g. "/dev/ttys003") as the stable identifier when calling terminal_read.',
+        annotations: { readOnlyHint: true, idempotentHint: true },
+    }, listHandler);
+}
+//# sourceMappingURL=list.js.map

package/dist/tools/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../src/tools/list.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3D,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2BnB,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QACvC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GACR,GAAG,YAAY,cAAc,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YACjE,CAAC,CAAC,4LAA4L;YAC9L,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,OAAO,GAAG,IAAI,EAAE,EAAE,CAAC;YAC5E,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,WAAW,EACT,mVAAmV;QACrV,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;KAC1D,EACD,WAAW,CACZ,CAAC;AACJ,CAAC"}

package/dist/tools/pending.js

@@ -0,0 +1,125 @@
+import { z } from "zod";
+import { appendAudit } from "../safety/audit.js";
+import { confirmWithUser, isWriteToolsEnabled, writeToolsDisabledMessage, } from "../safety/confirm.js";
+import { getPending, listPending, resolvePending } from "../safety/queue.js";
+function asTextResult(text, isError = false) {
+    return { content: [{ type: "text", text }], ...(isError ? { isError } : {}) };
+}
+function truncate(s, max) {
+    return s.length > max ? `${s.slice(0, max)}… [${s.length - max} chars elided]` : s;
+}
+function registerList(server) {
+    server.registerTool("pending_list", {
+        description: "List commands currently awaiting approval. Each entry has {id, tty, command, matchedPattern?, matchedDescription?, createdAt, expiresAt, ageMs}. Entries auto-expire 10 minutes after enqueue. Read-only — does not require WRITE_TOOLS_ENABLED.",
+        annotations: { readOnlyHint: true, idempotentHint: true },
+    }, async () => {
+        const snapshot = listPending();
+        return asTextResult(JSON.stringify(snapshot, null, 2));
+    });
+}
+function registerApprove(server) {
+    server.registerTool("pending_approve", {
+        description: "Approve a queued command by its id. Triggers a native confirmation dialog showing the queued command details before resolving. Requires WRITE_TOOLS_ENABLED=1. Calling this races with the native dialog originally raised by terminal_execute — whichever resolves first wins.",
+        inputSchema: {
+            id: z
+                .string()
+                .uuid()
+                .describe("Pending queue entry id (from pending_list or terminal_execute response)"),
+        },
+    }, async ({ id }) => {
+        if (!isWriteToolsEnabled()) {
+            return asTextResult(writeToolsDisabledMessage("pending_approve"), true);
+        }
+        const entry = getPending(id);
+        if (!entry) {
+            return asTextResult(`No pending entry with id ${id} (expired, already resolved, or never existed).`, true);
+        }
+        const descPart = entry.matchedDescription
+            ? `\nMatched: ${entry.matchedPattern} (${entry.matchedDescription})`
+            : entry.matchedPattern
+                ? `\nMatched pattern: ${entry.matchedPattern}`
+                : "";
+        const allowed = await confirmWithUser({
+            title: "macos-terminal-mcp · pending_approve",
+            message: `Approve queued command?\n\n` +
+                `Target: ${entry.tty}\n` +
+                `Command: ${truncate(entry.command, 800)}${descPart}\n` +
+                `Queue id: ${id}`,
+        });
+        if (!allowed) {
+            await appendAudit({
+                tool: "pending_approve",
+                outcome: "denied",
+                tty: entry.tty,
+                command: entry.command,
+                source: "dialog",
+                details: { queueId: id },
+            });
+            return asTextResult("User denied the approval.", true);
+        }
+        const ok = resolvePending(id, true, "queue");
+        if (!ok) {
+            return asTextResult(`Entry ${id} was already resolved by another path (likely the original dialog).`, true);
+        }
+        await appendAudit({
+            tool: "pending_approve",
+            outcome: "success",
+            tty: entry.tty,
+            command: entry.command,
+            source: "queue",
+            details: { queueId: id },
+        });
+        return asTextResult(`Approved ${id}.`);
+    });
+}
+function registerDeny(server) {
+    server.registerTool("pending_deny", {
+        description: "Deny a queued command by its id. Triggers a confirmation dialog with the queued command details. Requires WRITE_TOOLS_ENABLED=1.",
+        inputSchema: {
+            id: z.string().uuid().describe("Pending queue entry id"),
+            reason: z
+                .string()
+                .max(500)
+                .optional()
+                .describe("Optional human-readable reason for denial"),
+        },
+    }, async ({ id, reason }) => {
+        if (!isWriteToolsEnabled()) {
+            return asTextResult(writeToolsDisabledMessage("pending_deny"), true);
+        }
+        const entry = getPending(id);
+        if (!entry) {
+            return asTextResult(`No pending entry with id ${id} (expired, already resolved, or never existed).`, true);
+        }
+        const reasonPart = reason ? `\n\nReason: ${reason}` : "";
+        const allowed = await confirmWithUser({
+            title: "macos-terminal-mcp · pending_deny",
+            message: `Deny queued command?\n\n` +
+                `Target: ${entry.tty}\n` +
+                `Command: ${truncate(entry.command, 800)}\n` +
+                `Queue id: ${id}${reasonPart}`,
+        });
+        if (!allowed) {
+            return asTextResult("User cancelled the denial.", true);
+        }
+        const ok = resolvePending(id, false, "queue", reason);
+        if (!ok) {
+            return asTextResult(`Entry ${id} was already resolved by another path.`, true);
+        }
+        await appendAudit({
+            tool: "pending_deny",
+            outcome: "success",
+            tty: entry.tty,
+            command: entry.command,
+            source: "queue",
+            details: { queueId: id, ...(reason ? { reason } : {}) },
+        });
+        return asTextResult(`Denied ${id}${reason ? `: ${reason}` : ""}.`);
+    });
+}
+export function register(server) {
+    registerList(server);
+    registerApprove(server);
+    registerDeny(server);
+}
+//# sourceMappingURL=pending.js.map

package/dist/tools/pending.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending.js","sourceRoot":"","sources":["../../src/tools/pending.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAE7E,SAAS,YAAY,CAAC,IAAY,EAAE,OAAO,GAAG,KAAK;IACjD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAChF,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,GAAW;IACtC,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,YAAY,CAAC,MAAiB;IACrC,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,WAAW,EACT,kPAAkP;QACpP,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;KAC1D,EACD,KAAK,IAA6B,EAAE;QAClC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,OAAO,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAiB;IACxC,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,WAAW,EACT,iRAAiR;QACnR,WAAW,EAAE;YACX,EAAE,EAAE,CAAC;iBACF,MAAM,EAAE;iBACR,IAAI,EAAE;iBACN,QAAQ,CAAC,yEAAyE,CAAC;SACvF;KACF,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,EAA2B,EAAE;QACxC,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;YAC3B,OAAO,YAAY,CAAC,yBAAyB,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,YAAY,CACjB,4BAA4B,EAAE,iDAAiD,EAC/E,IAAI,CACL,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,kBAAkB;YACvC,CAAC,CAAC,cAAc,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,kBAAkB,GAAG;YACpE,CAAC,CAAC,KAAK,CAAC,cAAc;gBACpB,CAAC,CAAC,sBAAsB,KAAK,CAAC,cAAc,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC;YACpC,KAAK,EAAE,sCAAsC;YAC7C,OAAO,EACL,6BAA6B;gBAC7B,WAAW,KAAK,CAAC,GAAG,IAAI;gBACxB,YAAY,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,QAAQ,IAAI;gBACvD,aAAa,EAAE,EAAE;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,WAAW,CAAC;gBAChB,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,QAAQ;gBACjB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;aACzB,CAAC,CAAC;YACH,OAAO,YAAY,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,EAAE,GAAG,cAAc,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,OAAO,YAAY,CACjB,SAAS,EAAE,qEAAqE,EAChF,IAAI,CACL,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,CAAC;YAChB,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,SAAS;YAClB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;SACzB,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,MAAiB;IACrC,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,WAAW,EACT,kIAAkI;QACpI,WAAW,EAAE;YACX,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;YACxD,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,2CAA2C,CAAC;SACzD;KACF,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAA2B,EAAE;QAChD,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;YAC3B,OAAO,YAAY,CAAC,yBAAyB,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,YAAY,CACjB,4BAA4B,EAAE,iDAAiD,EAC/E,IAAI,CACL,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,eAAe,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC;YACpC,KAAK,EAAE,mCAAmC;YAC1C,OAAO,EACL,0BAA0B;gBAC1B,WAAW,KAAK,CAAC,GAAG,IAAI;gBACxB,YAAY,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI;gBAC5C,aAAa,EAAE,GAAG,UAAU,EAAE;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,YAAY,CAAC,4BAA4B,EAAE,IAAI,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,EAAE,GAAG,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,OAAO,YAAY,CAAC,SAAS,EAAE,wCAAwC,EAAE,IAAI,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,WAAW,CAAC;YAChB,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,SAAS;YAClB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;SACxD,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACrE,CAAC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,YAAY,CAAC,MAAM,CAAC,CAAC;IACrB,eAAe,CAAC,MAAM,CAAC,CAAC;IACxB,YAAY,CAAC,MAAM,CAAC,CAAC;AACvB,CAAC"}

package/dist/tools/read.js

@@ -0,0 +1,64 @@
+import { z } from "zod";
+import { OsascriptError, runJxa } from "../applescript.js";
+export function buildReadScript(tty) {
+    return `
+function safe(fn) {
+  try { return fn(); } catch (e) { return null; }
+}
+(function readTerminal(targetTty) {
+  const terminal = Application("Terminal");
+  const wins = terminal.windows();
+  for (let wi = 0; wi < wins.length; wi++) {
+    const w = wins[wi];
+    const tabs = w.tabs();
+    for (let ti = 0; ti < tabs.length; ti++) {
+      const t = tabs[ti];
+      if (safe(function () { return t.tty(); }) === targetTty) {
+        return safe(function () { return t.contents(); }) || "";
+      }
+    }
+  }
+  throw new Error("No Terminal.app tab found with tty " + targetTty);
+})(${JSON.stringify(tty)});
+`;
+}
+export async function readHandler({ tty, lines }) {
+    try {
+        let text = await runJxa(buildReadScript(tty));
+        if (lines !== undefined) {
+            const split = text.split("\n");
+            text = split.slice(-lines).join("\n");
+        }
+        return { content: [{ type: "text", text }] };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        const hint = err instanceof OsascriptError && /not authorized/i.test(err.stderr)
+            ? "\n\nAutomation permission missing — System Settings → Privacy & Security → Automation."
+            : "";
+        return {
+            content: [{ type: "text", text: `terminal_read failed: ${message}${hint}` }],
+            isError: true,
+        };
+    }
+}
+export function register(server) {
+    server.registerTool("terminal_read", {
+        description: 'Read the full contents (visible buffer + scrollback) of a specific Terminal.app tab identified by its tty (e.g. "/dev/ttys003"). Call terminal_list first to discover tty values. Optional `lines` returns only the last N lines.',
+        inputSchema: {
+            tty: z
+                .string()
+                .regex(/^\/dev\/ttys[0-9]+$/)
+                .describe('The tty path identifying the target tab, e.g. "/dev/ttys003"'),
+            lines: z
+                .number()
+                .int()
+                .positive()
+                .max(20000)
+                .optional()
+                .describe("If provided, return only the last N lines of the buffer."),
+        },
+        annotations: { readOnlyHint: true, idempotentHint: true },
+    }, readHandler);
+}
+//# sourceMappingURL=read.js.map

package/dist/tools/read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../src/tools/read.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3D,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO;;;;;;;;;;;;;;;;;;KAkBJ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;CACvB,CAAC;AACF,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAAE,GAAG,EAAE,KAAK,EAAa;IACzD,IAAI,CAAC;QACH,IAAI,IAAI,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,GACR,GAAG,YAAY,cAAc,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YACjE,CAAC,CAAC,wFAAwF;YAC1F,CAAC,CAAC,EAAE,CAAC;QACT,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,OAAO,GAAG,IAAI,EAAE,EAAE,CAAC;YAC5E,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,WAAW,EACT,mOAAmO;QACrO,WAAW,EAAE;YACX,GAAG,EAAE,CAAC;iBACH,MAAM,EAAE;iBACR,KAAK,CAAC,qBAAqB,CAAC;iBAC5B,QAAQ,CAAC,8DAA8D,CAAC;YAC3E,KAAK,EAAE,CAAC;iBACL,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,EAAE;iBACV,GAAG,CAAC,KAAK,CAAC;iBACV,QAAQ,EAAE;iBACV,QAAQ,CAAC,0DAA0D,CAAC;SACxE;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;KAC1D,EACD,WAAW,CACZ,CAAC;AACJ,CAAC"}

package/dist/tools/register.js

@@ -0,0 +1,15 @@
+import * as clear from "./clear.js";
+import * as execute from "./execute.js";
+import * as list from "./list.js";
+import * as pending from "./pending.js";
+import * as read from "./read.js";
+import * as safety from "./safety.js";
+export function registerAll(server) {
+    list.register(server);
+    read.register(server);
+    execute.register(server);
+    clear.register(server);
+    safety.register(server);
+    pending.register(server);
+}
+//# sourceMappingURL=register.js.map

package/dist/tools/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../src/tools/register.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC,MAAM,UAAU,WAAW,CAAC,MAAiB;IAC3C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzB,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC"}