@reason-machines/cli-linux-arm64-musl 0.2.276 → 0.2.278

package/bin/vm-hands/vm-hands-entry-lite-jwqqfjba.js

@@ -0,0 +1,759 @@
+// @bun
+import{Dd as me}from"./vm-hands-entry-lite-gqncr2j0.js";import{ee as X,fe as ee,he as lt,ie as pe,le as xt,me as bt,ne as $,we as L,xe as Ge}from"./vm-hands-entry-lite-5pxbx31d.js";import{Be as v,Ce as z,Ke as gt,ze as E}from"./vm-hands-entry-lite-bfwf82rw.js";import{eg as ht,hg as wt,kg as D,mg as Lt,ng as oe}from"./vm-hands-entry-lite-2xas56hm.js";import{Mg as Se,Ng as re}from"./vm-hands-entry-lite-s2xydt0n.js";import{Vg as be}from"./vm-hands-entry-lite-s5qn1k80.js";import{Xg as T}from"./vm-hands-entry-lite-9pmag2qk.js";import{Fh as xe,zh as we}from"./vm-hands-entry-lite-anaydk9m.js";import{Gh as _}from"./vm-hands-entry-lite-ffg7rf02.js";import{spawn as I}from"child_process";import{randomUUID as ye}from"crypto";import{closeSync as Vr,copyFileSync as ie,existsSync as _t,fstatSync as Er,mkdirSync as ce,openSync as vr,readdirSync as K,readFileSync as Ae,readlinkSync as to,renameSync as eo,rmSync as ro,statSync as oo}from"fs";import{connect as so}from"net";import{userInfo as ge}from"os";import{basename as ne,dirname as ut,join as b}from"path";var yt=`import { spawn, execFileSync } from "node:child_process";
+import { createHash, randomUUID } from "node:crypto";
+import { readFileSync, readlinkSync, lstatSync, realpathSync, statSync, mkdtempSync, mkdirSync, chmodSync, writeFileSync, readdirSync, rmSync, openSync, readSync, closeSync, renameSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { basename, join } from "node:path";
+
+const fail = code => { throw new Error(code); };
+const record = value => value && typeof value === "object" && !Array.isArray(value);
+const text = result => Array.isArray(result?.content) ? result.content.filter(item => item.type === "text").map(item => item.text).join("\\n") : "";
+export const CLICKABLE_ROLES = new Set(["button", "push button", "toggle button", "check box", "checkbox", "radio button", "radio", "link", "menu item", "check menu item", "tab", "text field", "entry", "combo box", "list item", "tree item"]);
+const ACCESSIBLE_CLICK_ACTIONS = /^(?:click|press|activate|invoke|toggle|select)$/i;
+function stableJson(value) {
+  if (Array.isArray(value)) return value.map(stableJson);
+  if (record(value)) return Object.fromEntries(Object.keys(value).sort().map(key => [key, stableJson(value[key])]));
+  return value;
+}
+export function accessibilityState(result, platform = "linux") {
+  const structured = record(result?.structuredContent) ? result.structuredContent : null;
+  const rawElements = Array.isArray(structured?.elements) ? structured.elements : [];
+  const elements = rawElements.flatMap(item => {
+    if (!record(item) || !Number.isSafeInteger(item.index) || item.index < 0 || item.index > 9999) return [];
+    const roleValue = item.localizedControlType || item.controlType || item.role;
+    if (typeof roleValue !== "string" || !roleValue.trim()) return [];
+    const actions = Array.isArray(item.actions) ? item.actions.filter(action => typeof action === "string") : [];
+    return [{ index: item.index, role: roleValue.trim().replace(/\\s+/g, " ").toLowerCase(), actions }];
+  });
+  const nativeText = text(result).replace(/\\r\\n?/g, "\\n");
+  const treeLines = Array.isArray(structured?.treeLines) ? structured.treeLines.filter(line => typeof line === "string")
+    : nativeText.split("\\n").filter(line => (platform === "darwin" ? /^\\t*\\d+ / : /^\\t+\\d+ /).test(line));
+  // OCU 0.3.5 Linux emits its AT-SPI tree as text only. Preserve the exact
+  // native indices/roles/actions; never guess indices from labels or pixels.
+  if (!structured) {
+    const roles = [...CLICKABLE_ROLES].sort((a,b) => b.length-a.length);
+    const seen = new Set();
+    for (const line of treeLines) {
+      if (platform === "darwin") {
+        // Stock OCU 0.3.5 macOS hides primary AXPress from Secondary Actions
+        // and omits frames for ordinary controls. Keep its native index/role;
+        // OCU resolves that exact element and performs the accessibility click.
+        // Coordinate actions retain their separate screenshot bounds checks.
+        const native = /^\\t*(\\d+) (.+)$/.exec(line);
+        if (!native) continue;
+        const index = Number(native[1]);
+        if (seen.has(index)) fail("cloud_computer_accessibility_tree_invalid");
+        seen.add(index);
+        const role = roles.find(value => native[2] === value || native[2].startsWith(value + " "));
+        if (!role || index > 9999 || !Number.isSafeInteger(index)) continue;
+        const traits = /^\\s*\\(([^)]*)\\)/.exec(native[2].slice(role.length));
+        if (traits && traits[1].split(",").some(value => value.trim() === "disabled")) continue;
+        const actions = /(?:,)? Secondary Actions: (.+)$/.exec(native[2]);
+        elements.push({ index, role, actions: actions ? actions[1].split(", ") : [], platform: "darwin" });
+        continue;
+      }
+      const match = /^\\t+(\\d+) (.+?) Frame: \\{x: (-?\\d+), y: (-?\\d+), width: (\\d+), height: (\\d+)\\}$/.exec(line);
+      if (!match) continue;
+      const index = Number(match[1]);
+      if (seen.has(index)) fail("cloud_computer_accessibility_tree_invalid");
+      seen.add(index);
+      const role = roles.find(value => match[2].startsWith(value + " "));
+      const actionMatch = / Secondary Actions: ([a-z -]+(?:, [a-z -]+)*)$/.exec(match[2]);
+      if (!role || !actionMatch || index > 9999 || Number(match[3]) < 0 || Number(match[4]) < 0
+        || Number(match[5]) < 1 || Number(match[6]) < 1) continue;
+      elements.push({ index, role, actions: actionMatch[1].split(", ") });
+    }
+  }
+  const fingerprint = structured
+    ? JSON.stringify(stableJson(structured))
+    : treeLines.length ? treeLines.join("\\n") : nativeText;
+  return {
+    hash: createHash("sha256").update(fingerprint).digest("hex"),
+    elements,
+    treeLines,
+  };
+}
+export function assertAccessibilityTreeMatches(expected, current) {
+  if (typeof expected?.accessibilityTreeHash !== "string" || !/^[a-f0-9]{64}$/.test(expected.accessibilityTreeHash)
+    || expected.accessibilityTreeHash !== current?.accessibilityTreeHash) fail("cloud_computer_accessibility_tree_changed");
+}
+export function assertSafeComputerTarget(target, action) {
+  if (!target || !Number.isSafeInteger(target.pid) || target.pid <= 0 || !target.executable || !target.processStart) fail("cloud_computer_window_unavailable");
+  const name = basename(target.executable).toLowerCase();
+  if (/(?:chrome|chromium|firefox|msedge|brave|safari)/i.test(name + " " + target.app)) fail("cloud_computer_use_browser_use");
+  if (/^(?:xterm|uxterm|gnome-terminal(?:-server)?|konsole|xfce4-terminal|mate-terminal|qterminal|lxterminal|tilix|kitty|alacritty|terminal|iterm2?|bash|sh|zsh|fish|mc|pcmanfm|thunar|nautilus|dolphin|nemo|finder|openbox|tint2|dock|spotlight|systemuiserver|system settings|system preferences|code|code-oss|electron|gedit|kate|leafpad|mousepad|textedit|automator|script editor|shortcuts|emacs|gvim|vim|nvim|python[0-9.]*|node|ruby|perl|wish[0-9.]*|tclsh[0-9.]*)$/i.test(name)
+    || /(?:devtools|developer tools|javascript console)/i.test(target.title)
+    || /(?:com\\.apple\\.(?:Terminal|Finder|Automator|ScriptEditor2|Shortcuts|systempreferences|dock|Spotlight)|com\\.googlecode\\.iterm2)/i.test(target.app)) fail("cloud_computer_use_bash");
+  if (action?.kind === "key_press") {
+    const parts = action.key.toLowerCase().split("+"); const key = parts.pop(); const mods = new Set(parts);
+    if (key === "f12" || (mods.has("ctrl") && mods.has("shift") && ["i","j","c","k"].includes(key))
+      || (mods.has("alt") && ["f2","f4","tab"].includes(key)) || mods.has("super") || mods.has("meta") || mods.has("cmd")
+      || (mods.has("ctrl") && mods.has("alt"))) fail("cloud_computer_shortcut_restricted");
+  }
+}
+export function sameComputerTarget(a, b) {
+  return ["app","pid","title","width","height","executable","processStart"].every(key => a?.[key] === b?.[key]);
+}
+function provider(command, args) {
+  const child = spawn(command, args, { stdio: ["pipe", "pipe", "ignore"], env: process.env });
+  let counter = 0, buffer = "", closedCode = null; const pending = new Map();
+  const exited = new Promise(resolve => {
+    child.once("exit", resolve);
+    // Spawn failure means no child exists. Errors after a PID was assigned
+    // (including a failed kill) still require an actual exit receipt.
+    child.once("error", () => { if (child.pid === undefined) resolve(); });
+  });
+  child.stdout.setEncoding("utf8"); child.stdout.on("data", chunk => {
+    buffer += chunk; if (buffer.length > 16 * 1024 * 1024) { child.kill(); return; }
+    let index; while ((index = buffer.indexOf("\\n")) >= 0) {
+      const line = buffer.slice(0,index); buffer = buffer.slice(index+1); let message;
+      try { message = JSON.parse(line); } catch { continue; }
+      const wait = pending.get(message.id); if (!wait) continue; pending.delete(message.id); clearTimeout(wait.timer);
+      if (message.error) wait.reject(new Error("cloud_automation_provider_error")); else wait.resolve(message.result);
+    }
+  });
+  const closed = code => { closedCode = code; for (const wait of pending.values()) { clearTimeout(wait.timer); wait.reject(new Error(code)); } pending.clear(); };
+  child.stdin.on("error", () => closed("cloud_automation_provider_closed"));
+  child.on("error", () => closed("cloud_automation_provider_unavailable"));
+  child.on("exit", () => closed("cloud_automation_provider_closed"));
+  const rpc = (method, params) => new Promise((resolve,reject) => {
+    if (closedCode) { reject(new Error(closedCode)); return; }
+    const id = ++counter; const timer = setTimeout(() => { pending.delete(id); reject(new Error("cloud_automation_provider_timeout")); child.kill(); }, 45000);
+    pending.set(id,{resolve,reject,timer}); child.stdin.write(JSON.stringify({jsonrpc:"2.0",id,method,params})+"\\n");
+  });
+  return { rpc, exited, forceClose() { child.kill("SIGKILL"); }, notify(method) { child.stdin.write(JSON.stringify({jsonrpc:"2.0",method})+"\\n"); }, close() { child.stdin.end(); child.kill(); closed("cloud_automation_provider_closed"); } };
+}
+export function checkedProviderResult(result, { computer = false, platform = process.platform } = {}) {
+  if (!record(result) || result.isError === true || result.structuredContent?.error) {
+    // OCU 0.3.5 emits this fixed error text, without a structured permission code.
+    // Scope the translation to its macOS Computer result, never browser content.
+    if (computer && platform === "darwin" && result?.isError === true
+      && text(result).startsWith("Accessibility permission is required. Run \`open-computer-use doctor\` and grant access to Open Computer Use.")) {
+      fail("cloud_computer_accessibility_permission_required");
+    }
+    // Stock OBU MCP exposes its Go Unix-socket read deadline as one error text.
+    // Match the transport envelope, never ordinary page/tool content or OCU.
+    if (!computer && result?.isError === true && Array.isArray(result.content)
+      && result.content.length === 1 && result.content[0]?.type === "text"
+      && typeof result.content[0].text === "string"
+      && /^read unix [^\\r\\n]{1,1000}: i\\/o timeout$/.test(result.content[0].text)) fail("cloud_automation_provider_timeout");
+    if (result?.structuredContent?.error?.code === -32000
+      && /^Timed out after \\d+ms waiting for CDP command\\.$/.test(result?.structuredContent?.error?.message ?? "")) fail("cloud_automation_browser_capture_timeout");
+    fail("cloud_automation_provider_refused");
+  }
+  return result;
+}
+export function parseMacPermissionStatus(output) {
+  const match = /^Permissions: accessibility=(granted|missing), screenRecording=(granted|missing)$/m.exec(output.trim());
+  if (!match) return null;
+  return { accessibility: match[1], screenRecording: match[2] };
+}
+export function computerSnapshotImage(result) {
+  const images = Array.isArray(result?.content) ? result.content.filter(block => block?.type === "image") : [];
+  // OCU may omit a screenshot when ScreenCaptureKit fails. This alone does not
+  // establish a permission denial; it can also mean a missing window or timeout.
+  if (images.length === 0) fail("cloud_computer_screen_capture_unavailable");
+  const image = images.find(block => block.mimeType === "image/png");
+  if (!image || typeof image.data !== "string" || image.data.length > 12 * 1024 * 1024) fail("cloud_computer_display_image_invalid");
+  return image;
+}
+// Linux OCU ends each line with the window title, which is page text and may
+// itself contain brackets ("Issue [WIP] - Google Chrome"). Matching the fixed
+// marker prefix keeps such a window listed; macOS markers never contain "]".
+const LINUX_RUNNING_APP_LINE = /^(.*?) -- (.*?) \\[(running), pid=\\d+, window=.*\\]$/;
+export function parseRunningApps(result) {
+  return text(result).split("\\n").flatMap(line => {
+    const match = LINUX_RUNNING_APP_LINE.exec(line) ?? /^(.*?) (?:\u2014|--) (.*?) \\[([^\\]]*)\\]$/.exec(line);
+    if (!match || !/(?:^|,\\s*)running(?:,|$)/.test(match[3]) || match[2].length > 256 || /[\\x00-\\x1f/]/.test(match[2])) return [];
+    return [{name:match[1].slice(0,256),app:match[2]}];
+  }).slice(0,100);
+}
+function targetFor(result, expectedApp) {
+  const lines = text(result); const identity = /^App=(.+) \\(pid (\\d+)\\)\\nWindow: ("(?:[^"\\\\]|\\\\.)*"), App: /m.exec(lines);
+  if (!identity || identity[1] !== expectedApp) fail("cloud_computer_window_changed");
+  const image = computerSnapshotImage(result);
+  const png = Buffer.from(image.data,"base64");
+  if (png.length < 24 || png.subarray(0,8).toString("hex") !== "89504e470d0a1a0a") fail("cloud_computer_display_image_invalid");
+  const width=png.readUInt32BE(16),height=png.readUInt32BE(20),pid=Number(identity[2]);
+  if (!Number.isSafeInteger(pid) || pid <= 0 || width<1 || height<1 || width>8192 || height>8192 || width*height>25000000) fail("cloud_computer_window_unavailable");
+  let executable,processStart;
+  if (process.platform === "linux") {
+    executable=readlinkSync(\`/proc/\${pid}/exe\`); const stat=readFileSync(\`/proc/\${pid}/stat\`,"utf8"); processStart=stat.slice(stat.lastIndexOf(")")+2).split(/\\s+/)[19];
+  } else {
+    executable=execFileSync("/bin/ps",["-p",String(pid),"-o","comm="],{encoding:"utf8",timeout:3000}).trim();
+    processStart=execFileSync("/bin/ps",["-p",String(pid),"-o","lstart="],{encoding:"utf8",timeout:3000}).trim();
+  }
+  if (!executable || !processStart) fail("cloud_computer_window_unavailable");
+  const tree = accessibilityState(result, process.platform);
+  return {app:identity[1],pid,title:JSON.parse(identity[3]),width,height,executable,processStart,accessibilityTreeHash:tree.hash};
+}
+export function computerSnapshotOptions(request, platform = process.platform) {
+  // Stock 0.3.5 action refresh uses its 1200/64 defaults. Revalidate that
+  // receipt with identical bounds so an unchanged tree hashes identically.
+  const stockActionTree = platform === "darwin" && request.operation === "act"
+    && request.expected?.stockActionTree === true;
+  return { app: request.app, text_limit: 500,
+    max_tree_nodes: stockActionTree ? 1200 : 300,
+    max_tree_depth: stockActionTree ? 64 : 30 };
+}
+// Stock macOS OCU refreshes the screenshot/tree after input. Failure to
+// validate that observation must never turn completed input into a retry.
+export function macComputerActionObservation(result, before) {
+  try {
+    if (result?.isError || !Array.isArray(result?.content)
+      || result.content.filter(item => item?.type === "image").length !== 1)
+      fail("cloud_computer_display_image_invalid");
+    const target = targetFor(result, before.app);
+    if (!["app", "pid", "executable", "processStart"].every(key => target[key] === before[key]))
+      fail("cloud_computer_window_changed");
+    return { actionCompleted: true, afterSnapshot: { target: { ...target, stockActionTree: true }, content: result.content } };
+  } catch {
+    return { actionCompleted: true, afterSnapshotError: "invalid_post_action_snapshot" };
+  }
+}
+export function actionTool(action, app, target, elements = []) {
+  if (!record(action)) fail("cloud_computer_action_invalid");
+  const keys={click_pixel:["kind","x","y"],click_element:["kind","element_index","role"],type_text:["kind","text"],key_press:["kind","key"],drag:["kind","from_x","from_y","to_x","to_y","duration_ms","steps"]}[action.kind];
+  if (!keys || Object.keys(action).some(key=>!keys.includes(key))) fail("cloud_computer_action_invalid");
+  const point = (x,y) => { if (!Number.isSafeInteger(x)||!Number.isSafeInteger(y)||x<0||y<0||x>=target.width||y>=target.height) fail("cloud_computer_action_out_of_bounds"); };
+  if (action.kind === "click_pixel") { point(action.x,action.y); return ["click",{app,x:action.x,y:action.y,click_count:1,mouse_button:"left"}]; }
+  if (action.kind === "click_element") {
+    if (!Number.isSafeInteger(action.element_index) || action.element_index < 0 || action.element_index > 9999
+      || typeof action.role !== "string" || action.role.length > 128) fail("cloud_computer_action_invalid");
+    const role = action.role.trim().replace(/\\s+/g, " ").toLowerCase();
+    const element = elements.find(candidate => candidate.index === action.element_index);
+    if (!element || element.role !== role || !CLICKABLE_ROLES.has(role)
+      || (element.platform !== "darwin" && element.actions.length > 0 && !element.actions.some(candidate => ACCESSIBLE_CLICK_ACTIONS.test(candidate)))) {
+      fail("cloud_computer_accessibility_target_invalid");
+    }
+    return ["click",{app,element_index:String(action.element_index),click_method:"accessibility"}];
+  }
+  if (action.kind === "type_text" && typeof action.text === "string" && action.text.length <= 8192) return ["type_text",{app,text:action.text}];
+  if (action.kind === "key_press" && typeof action.key === "string" && /^(?:(?:ctrl|alt|shift|super)\\+){0,4}(?:[a-zA-Z0-9*/=.-]|Return|Tab|Escape|BackSpace|Delete|space|Left|Right|Up|Down|Home|End|Page_Up|Page_Down|F(?:[1-9]|1[0-2]))$/.test(action.key)) return ["press_key",{app,key:action.key}];
+  if (action.kind === "drag") { point(action.from_x,action.from_y);point(action.to_x,action.to_y);if(!Number.isSafeInteger(action.duration_ms)||action.duration_ms<100||action.duration_ms>2000||!Number.isSafeInteger(action.steps)||action.steps<1||action.steps>120)fail("cloud_computer_action_invalid");return ["drag",{app,from_x:action.from_x,from_y:action.from_y,to_x:action.to_x,to_y:action.to_y}]; }
+  fail("cloud_computer_action_unsupported");
+}
+const explicitTabTools = new Set(["navigate", "wait_load", "page_info", "cdp", "move_mouse", "wait_file_chooser"]);
+export function validateBrowserTab(request) {
+  if (explicitTabTools.has(request.tool) && (!record(request.arguments) || !Number.isSafeInteger(request.arguments.tab_id) || request.arguments.tab_id <= 0)) fail("cloud_automation_browser_tab_id_required");
+  if (request.tool === "call" && request.arguments?.method === "waitForFileChooser"
+    && (!record(request.arguments.params) || !Number.isSafeInteger(request.arguments.params.tabId) || request.arguments.params.tabId <= 0)) fail("cloud_automation_browser_tab_id_required");
+}
+const browserNetworkReasons = new Map([
+  ["ERR_CONNECTION_REFUSED", "connection_refused"], ["ERR_CONNECTION_RESET", "connection_reset"],
+  ["ERR_NAME_NOT_RESOLVED", "name_not_resolved"], ["ERR_INTERNET_DISCONNECTED", "internet_disconnected"],
+  ["ERR_TIMED_OUT", "timed_out"], ["ERR_CONNECTION_TIMED_OUT", "timed_out"], ["ERR_ABORTED", "aborted"],
+  // The machine's egress proxy refused the host (CONNECT 403): a network policy, not the site.
+  ["ERR_TUNNEL_CONNECTION_FAILED", "egress_blocked"],
+]);
+function browserRefusalReason(value) {
+  if (typeof value !== "string") return "provider_refused";
+  const code = /\\bnet::(ERR_[A-Z_]+)\\b/.exec(value.slice(0, 8192))?.[1];
+  return browserNetworkReasons.get(code) ?? "provider_refused";
+}
+class BrowserProviderFailure extends Error {
+  constructor(error, stage, reason) {
+    super(error instanceof Error && /^cloud_automation_[a-z0-9_]+$/.test(error.message) ? error.message : "cloud_automation_failed");
+    this.stage = stage; this.reason = reason;
+  }
+}
+class ComputerProviderFailure extends Error {
+  constructor(error, stage, reason) {
+    super(error instanceof Error && /^cloud_(?:automation|computer)_[a-z0-9_]+$/.test(error.message) ? error.message : "cloud_automation_failed");
+    this.stage = stage; this.reason = reason;
+  }
+}
+export async function callComputerTool(call, name, args, platform = process.platform) {
+  const stage = name === "list_apps" ? "list_apps" : name === "get_app_state" ? "get_app_state" : "action";
+  let result;
+  try {
+    result = await call(name, args);
+    return checkedProviderResult(result, { computer: true, platform });
+  } catch (error) {
+    // OCU 0.3.5's fixed error when the app has no window on screen (hidden, minimized
+    // or on another Space) and its own recovery could not bring one up: the window
+    // is unavailable to Computer use, not a provider refusal.
+    if (platform === "darwin" && name === "get_app_state" && result?.isError === true
+      && Array.isArray(result.content) && result.content.length === 1 && result.content[0]?.type === "text"
+      && result.content[0].text === "Apple event error -10005: cgWindowNotFound") fail("cloud_computer_window_unavailable");
+    // Match only the fixed stock OCU refusal, never echo provider text or input.
+    const editableRequired = platform === "darwin" && name === "type_text" && result?.isError === true
+      && Array.isArray(result.content) && result.content.length === 1 && result.content[0]?.type === "text"
+      && result.content[0].text === "type_text requires a focused editable text element. Click a text entry area first, or use set_value on a settable text element.";
+    const reason = editableRequired ? "focused_editable_required"
+      : error?.message === "cloud_computer_accessibility_permission_required" ? "accessibility_permission_required"
+      : error?.message === "cloud_automation_provider_timeout" ? "timed_out"
+      : error?.message === "cloud_automation_provider_closed" ? "provider_closed"
+      : error?.message === "cloud_automation_provider_unavailable" ? "provider_unavailable"
+      : error?.message === "cloud_automation_provider_error" ? "provider_error" : "provider_refused";
+    throw new ComputerProviderFailure(error, stage, reason);
+  }
+}
+export function cloudAutomationFailure(error) {
+  const errorCode = error instanceof Error && /^cloud_(?:automation|computer)_[a-z0-9_]+$/.test(error.message) ? error.message : "cloud_automation_failed";
+  return { ok: false, errorCode, ...(error instanceof BrowserProviderFailure ? { browserFailure: { stage: error.stage, reason: error.reason } } : {}), ...(error instanceof ComputerProviderFailure ? { computerFailure: { stage: error.stage, reason: error.reason } } : {}) };
+}
+async function browserStage(stage, action) {
+  try { return await action(); }
+  catch (error) {
+    if (error instanceof BrowserProviderFailure) throw error;
+    const reason = error?.message === "cloud_automation_browser_capture_timeout" || error?.message === "cloud_automation_provider_timeout" ? "timed_out"
+      : error?.message === "cloud_automation_browser_target_invalid" ? "invalid_target" : "provider_refused";
+    throw new BrowserProviderFailure(error, stage, reason);
+  }
+}
+function checkedBrowserResult(result, stage, fileInput = false) {
+  try { return checkedProviderResult(result); }
+  catch (error) {
+    const raw = result?.structuredContent?.error?.message ?? text(result);
+    const fileInputDenied = fileInput && result?.structuredContent?.error?.code === -32000
+      && result.structuredContent.error.message === "Not allowed";
+    const reason = fileInputDenied ? "file_input_not_allowed"
+      : error?.message === "cloud_automation_browser_capture_timeout" || error?.message === "cloud_automation_provider_timeout"
+        ? "timed_out" : browserRefusalReason(raw);
+    throw new BrowserProviderFailure(error, stage, reason);
+  }
+}
+export async function callDiscoveredBrowserTool(rpc, request) {
+  validateBrowserTab(request);
+  const startedAt = performance.now();
+  const discovery = await rpc("tools/list", {});
+  const discoveryMs = performance.now() - startedAt;
+  if (!Array.isArray(discovery?.tools)) fail("cloud_automation_response_invalid");
+  if (request.tool === "run_action_plan" || !discovery.tools.some(tool => tool?.name === request.tool))
+    fail("cloud_automation_browser_tool_unavailable");
+  const callStartedAt = performance.now();
+  const result = await callBrowserTool((name, args) => rpc("tools/call", { name, arguments: args }), request);
+  return { result, browserTimings: { discoveryMs, callMs: performance.now() - callStartedAt } };
+}
+
+// A cloud Session's browser or computer screenshot is also kept as a file on
+// its machine (request.saveScreenshot), so the agent can show it to the user by
+// path. The newest ten stay. Saving never fails the capture: no path is
+// returned instead.
+export const BROWSER_SCREENSHOT_DIRECTORY = "/tmp/reason-screenshots";
+export function saveBrowserScreenshot(result, options) {
+  return saveScreenshotPng(result?.structuredContent?.result?.data, options);
+}
+/** The one PNG of a computer snapshot's content (Open Computer Use returns the window as an image block). */
+export function saveComputerScreenshot(content, options) {
+  const images = Array.isArray(content) ? content.filter(item => item?.type === "image") : [];
+  return images.length === 1 && images[0].mimeType === "image/png" ? saveScreenshotPng(images[0].data, options) : undefined;
+}
+function saveScreenshotPng(data, { directory = BROWSER_SCREENSHOT_DIRECTORY, keep = 10 } = {}) {
+  try {
+    if (typeof data !== "string") return undefined;
+    const bytes = Buffer.from(data, "base64");
+    if (bytes.length < 24 || bytes.subarray(0, 8).toString("hex") !== "89504e470d0a1a0a") return undefined;
+    mkdirSync(directory, { recursive: true, mode: 0o755 });
+    const owner = lstatSync(directory);
+    if (!owner.isDirectory() || owner.isSymbolicLink() || owner.uid !== process.getuid?.()) return undefined;
+    chmodSync(directory, 0o755);
+    const path = join(directory, \`\${randomUUID()}.png\`);
+    writeFileSync(path, bytes, { mode: 0o644, flag: "wx" });
+    chmodSync(path, 0o644);
+    const saved = readdirSync(directory).filter(name => /^[0-9a-f-]{36}\\.png$/.test(name))
+      .map(name => ({ name, info: lstatSync(join(directory, name)) }))
+      .filter(file => file.info.isFile() && file.info.uid === process.getuid?.())
+      .sort((a, b) => b.info.mtimeMs - a.info.mtimeMs);
+    for (const file of saved.filter(file => join(directory, file.name) !== path).slice(keep - 1)) rmSync(join(directory, file.name), { force: true });
+    return path;
+  } catch { return undefined; }
+}
+
+// A cloud Session's screen recording (request.operation record_start, then
+// record_stop). Explicit and bounded: nothing records unless the agent asks,
+// ffmpeg ends by itself after \`seconds\` or at the size limit, and one recording
+// runs at a time. Each request is its own short process, so ffmpeg runs
+// detached and a small state file names it for the stop request. The newest
+// five recordings stay.
+export const BROWSER_RECORDING_DIRECTORY = "/tmp/reason-recordings";
+export const BROWSER_RECORDING_MAX_SECONDS = 30;
+const RECORDING_MAX_BYTES = 10 * 1024 * 1024;
+const RECORDING_STATE = "active.json";
+const RECORDING_PROGRESS = "progress";
+const pause = ms => new Promise(resolve => setTimeout(resolve, ms));
+function recordingDirectory(directory) {
+  mkdirSync(directory, { recursive: true, mode: 0o755 });
+  const owner = lstatSync(directory);
+  if (!owner.isDirectory() || owner.isSymbolicLink() || owner.uid !== process.getuid?.()) fail("cloud_automation_recording_unavailable");
+  chmodSync(directory, 0o755);
+}
+/** True while \`pid\` is still the recorder writing \`path\`, so a reused process id is never signalled. */
+function recorderRunning(pid, path) {
+  try {
+    // A finished recorder not yet reaped is a zombie, with no command line: not running.
+    if (process.platform === "linux") return readFileSync(\`/proc/\${pid}/cmdline\`, "utf8").split("\\0").includes(path);
+    const row = execFileSync("/bin/ps", ["-p", String(pid), "-o", "stat=,args="], { encoding: "utf8", timeout: 5000, maxBuffer: 65536, stdio: ["ignore", "pipe", "ignore"] }).trim();
+    return !row.startsWith("Z") && row.includes(path);
+  } catch { return false; }
+}
+function activeRecording(directory) {
+  try {
+    const state = JSON.parse(readFileSync(join(directory, RECORDING_STATE), "utf8"));
+    if (!record(state) || !Number.isSafeInteger(state.pid) || state.pid <= 1 || typeof state.path !== "string"
+      || !state.path.startsWith(\`\${directory}/\`) || !/^[0-9a-f-]{36}\\.webm$/.test(state.path.slice(directory.length + 1))
+      || !Number.isSafeInteger(state.seconds) || !Number.isFinite(state.startedAt)) return undefined;
+    return state;
+  } catch { return undefined; }
+}
+export async function startBrowserRecording(seconds, { directory = BROWSER_RECORDING_DIRECTORY, ffmpeg = "ffmpeg", display = process.env.DISPLAY || ":99", keep = 5 } = {}) {
+  if (!Number.isSafeInteger(seconds) || seconds < 1 || seconds > BROWSER_RECORDING_MAX_SECONDS) fail("cloud_automation_recording_seconds_invalid");
+  recordingDirectory(directory);
+  const running = activeRecording(directory);
+  if (running && recorderRunning(running.pid, running.path)) fail("cloud_automation_recording_active");
+  const path = join(directory, \`\${randomUUID()}.webm\`);
+  const saved = readdirSync(directory).filter(name => /^[0-9a-f-]{36}\\.webm$/.test(name))
+    .map(name => ({ name, info: lstatSync(join(directory, name)) }))
+    .filter(file => file.info.isFile() && file.info.uid === process.getuid?.())
+    .sort((a, b) => b.info.mtimeMs - a.info.mtimeMs);
+  for (const file of saved.slice(keep - 1)) rmSync(join(directory, file.name), { force: true });
+  const progress = join(directory, RECORDING_PROGRESS);
+  rmSync(progress, { force: true });
+  const child = spawn(ffmpeg, ["-nostdin", "-hide_banner", "-loglevel", "error", "-y",
+    "-f", "x11grab", "-framerate", "12", "-i", display, "-t", String(seconds),
+    "-vf", "scale=1280:-2", "-c:v", "libvpx", "-deadline", "realtime", "-b:v", "700k",
+    "-an", "-fs", String(RECORDING_MAX_BYTES), "-progress", progress, path], { stdio: "ignore", detached: true });
+  let exited = false;
+  child.once("exit", () => { exited = true; });
+  try { await new Promise((resolve, reject) => { child.once("spawn", resolve); child.once("error", reject); }); }
+  catch { fail("cloud_automation_recording_unavailable"); }
+  // Started means ffmpeg reports a captured frame (the file itself stays empty
+  // for seconds while the muxer buffers); a missing display or encoder ends it
+  // within this wait instead.
+  const startedAt = Date.now();
+  let begun = false;
+  while (!exited && !begun && Date.now() - startedAt < 6000) {
+    await pause(100);
+    try { begun = /^frame=\\s*[1-9]/m.test(readFileSync(progress, "utf8")); } catch {}
+  }
+  if (exited || !begun) {
+    if (!exited) { try { process.kill(child.pid, "SIGKILL"); } catch {} }
+    rmSync(path, { force: true });
+    rmSync(progress, { force: true });
+    fail("cloud_automation_recording_unavailable");
+  }
+  const state = join(directory, RECORDING_STATE);
+  writeFileSync(\`\${state}.\${process.pid}\`, JSON.stringify({ pid: child.pid, path, seconds, startedAt }), { mode: 0o600 });
+  renameSync(\`\${state}.\${process.pid}\`, state);
+  child.unref();
+  return { ok: true, recording: { seconds } };
+}
+export async function stopBrowserRecording({ directory = BROWSER_RECORDING_DIRECTORY } = {}) {
+  const state = activeRecording(directory);
+  if (!state) fail("cloud_automation_recording_not_started");
+  // SIGINT lets ffmpeg finish the file; it has already ended by itself when
+  // the requested seconds ran out.
+  if (recorderRunning(state.pid, state.path)) {
+    try { process.kill(state.pid, "SIGINT"); } catch {}
+    for (let waited = 0; waited < 8000 && recorderRunning(state.pid, state.path); waited += 150) await pause(150);
+    if (recorderRunning(state.pid, state.path)) { try { process.kill(state.pid, "SIGKILL"); } catch {} await pause(300); }
+  }
+  rmSync(join(directory, RECORDING_STATE), { force: true });
+  rmSync(join(directory, RECORDING_PROGRESS), { force: true });
+  let fd;
+  try {
+    const file = lstatSync(state.path);
+    if (!file.isFile() || file.uid !== process.getuid?.() || file.size < 128 || file.size > RECORDING_MAX_BYTES + 65536) throw new Error();
+    fd = openSync(state.path, "r");
+    const head = Buffer.alloc(4);
+    if (readSync(fd, head, 0, 4, 0) !== 4 || head.toString("hex") !== "1a45dfa3") throw new Error();
+    chmodSync(state.path, 0o644);
+    return { ok: true, recordingPath: state.path, recordingBytes: file.size,
+      recordingSeconds: Math.max(1, Math.min(state.seconds, Math.round((Date.now() - state.startedAt) / 1000))) };
+  } catch {
+    rmSync(state.path, { force: true });
+    fail("cloud_automation_recording_failed");
+  } finally { if (fd !== undefined) closeSync(fd); }
+}
+
+export async function callBrowserTool(call, request) {
+  validateBrowserTab(request);
+  const args = request.arguments ?? {};
+  const rpcCdp = request.tool === "call" && args.method === "executeCdp";
+  const cdpMethod = request.tool === "cdp" ? args.method : rpcCdp ? args.params?.method : undefined;
+  const cdpTabId = request.tool === "cdp" ? args.tab_id : rpcCdp ? args.params?.target?.tabId : undefined;
+  // A person's own Chrome (cli/local-automation.ts) keeps agent tabs in the
+  // background: bringing one to the front would replace the tab they are
+  // looking at. Screenshots of a background tab still work, and OBU's tab-scoped
+  // CDP still refuses a tab outside this session.
+  const background = process.env.REASON_AUTOMATION_BACKGROUND_TABS === "1";
+  const foreground = async tabId => browserStage("foreground", async () => {
+    if (!Number.isSafeInteger(tabId) || tabId <= 0) fail("cloud_automation_browser_target_invalid");
+    if (background) return;
+    // This CDP call revalidates membership in the same pinned OBU session.
+    // Never pick an ambient Chrome tab or trust OBU's logical \`active\` flag.
+    checkedBrowserResult(await call("cdp", { tab_id: tabId, method: "Page.bringToFront", params: {} }), "foreground");
+  });
+  const fileChooserTab = request.tool === "wait_file_chooser" ? args.tab_id
+    : request.tool === "call" && args.method === "waitForFileChooser" ? args.params.tabId : undefined;
+  if (fileChooserTab !== undefined) {
+    // OBU 0.1.42 enables interception but does not enable Page events on a fresh
+    // debugger attachment. Use its scoped CDP tool before the unchanged wait.
+    await browserStage("provider_call", async () => checkedBrowserResult(
+      await call("cdp", { tab_id: fileChooserTab, method: "Page.enable", params: {} }), "provider_call"));
+  }
+  // Capture must observe the presented target, including the raw RPC spelling.
+  if (cdpMethod === "Page.captureScreenshot") await foreground(cdpTabId);
+  const result = await browserStage("provider_call", async () => checkedBrowserResult(await call(request.tool, args), "provider_call", cdpMethod === "DOM.setFileInputFiles"));
+  const opened = request.tool === "open_tab";
+  const created = request.tool === "call" && args.method === "createTab";
+  if (opened || created) {
+    // Stock OBU 0.1.42 creates background tabs. Its active:true means logical
+    // session selection, not the visible browser tab. Preserve the exact result
+    // while presenting only the successfully created, returned tab.
+    const payload = result.structuredContent?.result;
+    if (opened && payload?.navigate?.errorText) throw new BrowserProviderFailure(new Error("cloud_automation_provider_refused"), "navigation", browserRefusalReason(payload.navigate.errorText));
+    await foreground(opened ? payload?.tab?.id : payload?.id);
+  } else if (request.tool === "navigate" || request.tool === "page_info" || cdpMethod === "Page.navigate") {
+    if (result.structuredContent?.result?.errorText) throw new BrowserProviderFailure(new Error("cloud_automation_provider_refused"), "navigation", browserRefusalReason(result.structuredContent.result.errorText));
+    await foreground(cdpMethod === "Page.navigate" ? cdpTabId : args.tab_id);
+  }
+  return result;
+}
+
+const SIMULATOR_APP = "com.apple.iphonesimulator";
+// Installed Apple Simulator only. Never resolve a caller-supplied path or use
+// LaunchServices' possibly different registered Xcode as launch authority.
+export function installedMacSimulator({ execute = execFileSync, realpath = realpathSync, stat = statSync } = {}) {
+  const options = { encoding: "utf8", timeout: 5000, maxBuffer: 4096, stdio: ["ignore", "pipe", "ignore"] };
+  let developer, bundle, executable;
+  try {
+    developer = realpath(execute("/usr/bin/xcode-select", ["-p"], options).trim());
+    if (!/^\\/Applications\\/Xcode[^/]*\\.app\\/Contents\\/Developer$/.test(developer)) fail("cloud_computer_simulator_unavailable");
+    bundle = realpath(join(developer, "Applications/Simulator.app"));
+    executable = realpath(join(bundle, "Contents/MacOS/Simulator"));
+    if (bundle !== join(developer, "Applications/Simulator.app") || executable !== join(bundle, "Contents/MacOS/Simulator")) fail("cloud_computer_simulator_unavailable");
+    // A writable parent could swap an otherwise signed bundle after validation.
+    for (let path = executable; path !== "/"; path = path.slice(0, path.lastIndexOf("/")) || "/") {
+      const info = stat(path);
+      if (info.uid !== 0 || (info.mode & 0o022) !== 0) fail("cloud_computer_simulator_unavailable");
+    }
+    const identifier = execute("/usr/bin/plutil", ["-extract", "CFBundleIdentifier", "raw", "-o", "-", join(bundle, "Contents/Info.plist")], options).trim();
+    const binary = execute("/usr/bin/plutil", ["-extract", "CFBundleExecutable", "raw", "-o", "-", join(bundle, "Contents/Info.plist")], options).trim();
+    if (identifier !== SIMULATOR_APP || binary !== "Simulator") fail("cloud_computer_simulator_unavailable");
+    execute("/usr/bin/codesign", ["--verify", "--strict", "-R", "anchor apple", bundle], options);
+  } catch { fail("cloud_computer_simulator_unavailable"); }
+  return { app: SIMULATOR_APP, bundle, executable };
+}
+export function assertInstalledSimulatorTarget(target, installed) {
+  assertSafeComputerTarget(target);
+  if (target.app !== installed.app || target.executable !== installed.executable) fail("cloud_computer_simulator_identity_changed");
+}
+export function observeInstalledSimulator(installed, execute = execFileSync) {
+  const options = { encoding: "utf8", timeout: 5000, maxBuffer: 1024 * 1024, stdio: ["ignore", "pipe", "ignore"] };
+  let rows;
+  try { rows = execute("/bin/ps", ["-axo", "pid=,comm="], options).split("\\n"); }
+  catch { fail("cloud_computer_simulator_launch_uncertain"); }
+  const pids = rows.flatMap(row => {
+    const match = /^\\s*(\\d+)\\s+(.+)$/.exec(row);
+    return match && match[2] === installed.executable ? [Number(match[1])] : [];
+  });
+  if (pids.length !== 1 || !Number.isSafeInteger(pids[0]) || pids[0] <= 0) fail("cloud_computer_simulator_launch_uncertain");
+  try {
+    const processStart = execute("/bin/ps", ["-p", String(pids[0]), "-o", "lstart="], options).trim();
+    const executable = execute("/bin/ps", ["-p", String(pids[0]), "-o", "comm="], options).trim();
+    const target = { app: installed.app, pid: pids[0], executable, processStart };
+    assertInstalledSimulatorTarget(target, installed);
+    return target;
+  } catch { fail("cloud_computer_simulator_launch_uncertain"); }
+}
+export async function launchInstalledSimulator(call, { platform = process.platform, resolve = installedMacSimulator, execute = execFileSync, observe = observeInstalledSimulator } = {}) {
+  if (platform !== "darwin") fail("cloud_computer_simulator_unavailable");
+  const installed = resolve();
+  const running = parseRunningApps(await call("list_apps", {})).some(app => app.app === installed.app);
+  if (!running) {
+    // No -n: a repeated observation cannot request a second instance. A timeout
+    // is uncertain; never retry open here or kill a potentially pre-existing app.
+    try { execute("/usr/bin/open", ["-a", installed.bundle], { timeout: 5000, stdio: "ignore" }); }
+    catch { fail("cloud_computer_simulator_launch_uncertain"); }
+  }
+  // Do not call stock get_app_state here: if a just-listed process exits, its
+  // implicit launch uses LaunchServices registration rather than this exact path.
+  const target = observe(installed);
+  assertInstalledSimulatorTarget(target, installed);
+  return { ok: true, launched: "Simulator", target };
+}
+
+// A headless Device runs this same file with its installed desktop components
+// (cli/local-automation.ts); cloud machines leave both variables unset.
+export function automationCommand(kind, env = process.env, platform = process.platform) {
+  const override = kind === "computer" ? env.REASON_AUTOMATION_OCU : env.REASON_AUTOMATION_OBU;
+  if (override) return override;
+  return join(platform === "linux" ? "/usr/local/bin" : join(env.HOME,".local/bin"),kind === "computer"?"open-computer-use":"obu");
+}
+// A macOS worker's OCU is its own CLI (\`reason __computer-use mcp|doctor\`), which
+// runs OCU as Reason and answers doctor from Reason's grants without prompting.
+export function computerArgs(args, env = process.env) {
+  return env.REASON_AUTOMATION_OCU_SUBCOMMAND ? [env.REASON_AUTOMATION_OCU_SUBCOMMAND, ...args] : args;
+}
+export async function runCloudAutomation(request) {
+  if (!record(request) || request.version !== 1 || !["computer","browser"].includes(request.kind)) fail("cloud_automation_request_invalid");
+  const home = process.env.HOME; if (!home?.startsWith("/")) fail("cloud_automation_home_unavailable");
+  const computer = request.kind === "computer";
+  if (!computer && (typeof request.scope !== "string" || !/^reason-cloud-[a-f0-9]{64}$/.test(request.scope))) fail("cloud_automation_scope_invalid");
+  const command = automationCommand(computer ? "computer" : "browser");
+  if (computer && request.operation === "permission_status") {
+    if (process.platform !== "darwin") fail("cloud_computer_permission_status_unavailable");
+    let output;
+    try {
+      output = execFileSync(command, computerArgs(["doctor"]), { encoding: "utf8", timeout: 10000, maxBuffer: 4096 });
+    } catch {
+      fail("cloud_computer_permission_status_unavailable");
+    }
+    const permissions = parseMacPermissionStatus(output);
+    if (!permissions) fail("cloud_computer_permission_status_unavailable");
+    return { ok: true, permissions };
+  }
+  // Recording is the machine's own ffmpeg, not a browser provider call.
+  if (!computer && request.operation === "record_start") return await startBrowserRecording(request.seconds);
+  if (!computer && request.operation === "record_stop") return await stopBrowserRecording();
+  if (!computer && request.operation !== "discover") validateBrowserTab(request);
+  // A headless macOS Device pins the OBU instance of its private browser profile,
+  // which OBU's fixed Chrome profile roots never include (cli/local-automation.ts).
+  const instance = process.env.REASON_AUTOMATION_OBU_INSTANCE;
+  const transport = provider(command,computer?computerArgs(["mcp"]):["mcp","--session-id",request.scope,...(instance?["--profile",instance]:["--browser","chrome","--profile","Default"])]);
+  try {
+    await transport.rpc("initialize",{protocolVersion:"2025-03-26",capabilities:{},clientInfo:{name:"reason-cloud",version:"1"}});
+    transport.notify("notifications/initialized");
+    const call = (name,args) => callComputerTool((tool, arguments_) => transport.rpc("tools/call", { name: tool, arguments: arguments_ }), name, args);
+    if (!computer) {
+      if (request.operation === "discover") return { ok: true, result: await transport.rpc("tools/list", {}) };
+      const called = await callDiscoveredBrowserTool((method, params) => transport.rpc(method, params), request);
+      const screenshotPath = request.saveScreenshot === true ? saveBrowserScreenshot(called.result) : undefined;
+      return { ok: true, ...called, ...(screenshotPath ? { screenshotPath } : {}) };
+    }
+    if (request.operation === "launch_simulator") return await launchInstalledSimulator(call);
+    if (request.operation === "launch_calculator") {
+      if (process.platform === "linux") { const child=spawn("/usr/bin/galculator",[],{stdio:"ignore",detached:true,env:process.env}); await new Promise((resolve,reject)=>{child.once("spawn",resolve);child.once("error",reject);});child.unref(); }
+      else execFileSync("/usr/bin/open",["-b","com.apple.calculator"],{timeout:5000,stdio:"ignore"});
+      return {ok:true,launched:"Calculator"};
+    }
+    if (request.operation === "list") return {ok:true,apps:parseRunningApps(await call("list_apps",{}))};
+    if (typeof request.app !== "string" || request.app.length>256 || /[\\x00-\\x1f/]/.test(request.app)) fail("cloud_computer_window_invalid");
+    // Only already-running apps can be selected; never turn a caller string into
+    // OCU's implicit application launch behavior.
+    const apps=parseRunningApps(await call("list_apps",{})); if (!apps.some(app=>app.app===request.app)) fail("cloud_computer_window_unavailable");
+    const installedSimulator = process.platform === "darwin" && request.app === SIMULATOR_APP ? installedMacSimulator() : null;
+    const snapshot=await call("get_app_state",computerSnapshotOptions(request));
+    const accessibility=accessibilityState(snapshot, process.platform);
+    const target=targetFor(snapshot,request.app);
+    if (installedSimulator) assertInstalledSimulatorTarget(target, installedSimulator);
+    if(request.operation === "snapshot") {
+      const screenshotPath = request.saveScreenshot === true ? saveComputerScreenshot(snapshot.content) : undefined;
+      return {ok:true,target,content:snapshot.content,...(screenshotPath ? {screenshotPath} : {})};
+    }
+    if(request.operation !== "act" || !sameComputerTarget(target,request.expected)) fail("cloud_computer_window_changed");
+    if (request.action?.kind === "click_element") assertAccessibilityTreeMatches(request.expected, target);
+    assertSafeComputerTarget(target,request.action);
+    const [tool,args]=actionTool(request.action,request.app,target,accessibility.elements); const result=await call(tool,args);
+    return process.platform === "darwin"
+      ? {ok:true,...macComputerActionObservation(result,target)}
+      : {ok:true,target,result};
+  } finally { transport.close(); }
+}
+
+// Blaxel's process API answers a command from its log file, and while commands
+// run it punches out the head of any log file over a share of a guest-wide
+// budget (floor 256 KiB). A single-line screenshot result above that share comes
+// back headless and unparseable. Results above the inline limit are therefore
+// spooled to a private file that the controller reads back in chunks below that
+// floor (CLOUD_AUTOMATION_INLINE_RESULT_MAX in cloud-automation.ts must match).
+export const CLOUD_AUTOMATION_INLINE_RESULT_MAX = 192 * 1024;
+const SPOOL_PREFIX = "reason-automation-";
+const SPOOL_STALE_MS = 5 * 60_000;
+export function cloudAutomationOutputLine(result, { directory = tmpdir(), now = Date.now() } = {}) {
+  // ASCII-only JSON, so the controller's byte-range chunks never split a character.
+  const line = JSON.stringify(result).replace(/[\\u007f-\\uffff]/g, char => "\\\\u" + char.charCodeAt(0).toString(16).padStart(4, "0"));
+  // A Device worker (REASON_AUTOMATION_INLINE_RESULT=1) chunks stdout itself and has no spool reader.
+  if (line.length <= CLOUD_AUTOMATION_INLINE_RESULT_MAX || process.env.REASON_AUTOMATION_INLINE_RESULT === "1") return line;
+  // A controller that never finished reading leaves its spool behind; nothing
+  // else removes it, so each run clears this user's stale ones first.
+  try {
+    for (const entry of readdirSync(directory)) {
+      if (!entry.startsWith(SPOOL_PREFIX)) continue;
+      const path = join(directory, entry);
+      try { const info = lstatSync(path); if (info.isDirectory() && info.uid === process.getuid?.() && now - info.mtimeMs > SPOOL_STALE_MS) rmSync(path, { recursive: true, force: true }); } catch {}
+    }
+  } catch {}
+  const spoolDirectory = mkdtempSync(join(directory, SPOOL_PREFIX));
+  const path = join(spoolDirectory, "result.json");
+  writeFileSync(path, line, { mode: 0o600, flag: "wx" });
+  return JSON.stringify({ ok: true, spool: { path, bytes: line.length, sha256: createHash("sha256").update(line).digest("hex") },
+    ...(result?.actionCompleted === true ? { actionCompleted: true } : {}) });
+}
+
+if(process.env.REASON_CLOUD_GATEWAY_EXEC === "1") {
+  try {
+    let source="";for await(const part of process.stdin){source+=part;if(source.length>65536)fail("cloud_automation_request_invalid");}
+    const result=await runCloudAutomation(JSON.parse(source));process.stdout.write(cloudAutomationOutputLine(result)+"\\n");
+  } catch(error) {
+    process.stdout.write(JSON.stringify(cloudAutomationFailure(error))+"\\n");process.exitCode=1;
+  }
+}
+`;import{spawn as Le}from"child_process";import{basename as Je}from"path";var ze="__desktop-call",je="/usr/bin/setpriv",De=27262976,Me=8192,Pe=2000;function V(t){return Boolean(t)&&typeof t==="object"&&!Array.isArray(t)}function Ze(t){try{return JSON.parse(t)}catch{return null}}function ke(){return[process.execPath,...Je(process.execPath).startsWith("bun")&&process.argv[1]?[process.argv[1]]:[],ze]}function Qe(t,e,r,o={}){r.throwIfAborted();let s=o.command??ke();return new Promise((a,c)=>{let i=(o.spawnProcess??Le)(je,[`--reuid=${t.uid}`,`--regid=${t.gid}`,"--clear-groups","--no-new-privs","--",...s],{cwd:t.home,detached:!0,stdio:["pipe","pipe","pipe"],env:{HOME:t.home,USER:t.username,LOGNAME:t.username,PATH:"/usr/local/bin:/usr/bin:/bin"}}),n=[],f=0,d="",l=null,m=!1,u,S=(x)=>{try{process.kill(-i.pid,x)}catch{i.kill(x)}},C=(x)=>{l??=x,S("SIGTERM"),u??=setTimeout(()=>S("SIGKILL"),Pe)},O=()=>C(new _("cancelled","Reason cancelled the desktop operation."));r.addEventListener("abort",O,{once:!0});let w=(x)=>{if(m)return;m=!0,clearTimeout(u),r.removeEventListener("abort",O),x()};if(i.stdout.on("data",(x)=>{if(f+=x.byteLength,f>De)C(new _("desktop_delegate_failed","Reason's desktop reply is too large."));else n.push(x)}),i.stderr.setEncoding("utf8").on("data",(x)=>{d=(d+x).slice(-Me)}),i.stdin.on("error",()=>{}),i.once("error",()=>w(()=>c(l??new _("desktop_delegate_unavailable","Reason could not start its desktop as the desktop account.")))),i.once("close",(x,Ue)=>w(()=>{if(l)return c(l);let y=Ze(Buffer.concat(n).toString("utf8"));if(V(y)&&y.ok===!0&&V(y.result))return a(y.result);let F=V(y)&&y.ok===!1&&typeof y.code==="string"&&typeof y.message==="string"?new _(y.code.slice(0,120),y.message.slice(0,2000)):null,St=`exited ${x??Ue}${F?"":" with no reply"}`,pt=d.trim().split(`
+`).at(-1)?.slice(-300)??"";if(!F||F.code==="desktop_delegate_failed")process.stderr.write(`Reason worker: desktop call ${St}${d?`: ${d.trim().slice(-500)}`:""}
+`);if(F)return c(F);c(new _("desktop_delegate_failed",`Reason's desktop operation failed (${St}${pt?`: ${pt}`:""}).`))})),r.aborted)O();i.stdin.end(JSON.stringify(e))})}async function At(t,e,r,o={}){let s=await Qe(t,{op:"automation",call:e},r,o);if(!Number.isSafeInteger(s.code)||typeof s.stdout!=="string"||typeof s.stderr!=="string")throw new _("desktop_delegate_failed","Reason's desktop reply is malformed.");return{code:s.code,stdout:Buffer.from(s.stdout,"base64"),stderr:s.stderr}}import{execFile as Jr,spawn as zr}from"child_process";import{closeSync as jr,mkdirSync as Dr,openSync as Mr}from"fs";import{dirname as k,join as Pr}from"path";import{promisify as Zr}from"util";import{spawnSync as j}from"child_process";import{createHash as br,randomUUID as wr}from"crypto";import{chmodSync as xr,existsSync as st,mkdirSync as Sr,readdirSync as es,readFileSync as M,renameSync as pr,rmSync as g,statSync as yr,writeFileSync as Ar}from"fs";import{dirname as gr,isAbsolute as Jt,join as G}from"path";import{chmodSync as Do,existsSync as Ye,mkdirSync as Mo,readlinkSync as Xe,readFileSync as We,renameSync as Po,unlinkSync as Zo,writeFileSync as ko}from"fs";import{homedir as Nt}from"os";import{basename as He,dirname as Ot,isAbsolute as Tt,join as R,normalize as Ke,relative as Ve,resolve as Ee}from"path";var tt=3,ve=1,tr=2,er=1,rr=1,or="Reason may read and write files and run commands in this signed-in OS account, subject to saved restrictions and operating system permissions.",sr="Reason may later execute on this computer inside a Reason sandbox, limited to folders explicitly attached by the user.",ar=[sr,"Ara may later execute on this computer inside an Ara sandbox, limited to folders explicitly attached by the user."];function ir(t){return typeof t==="string"&&ar.includes(t)}var cr=["future_device","updates_only","cli_only"];function qt(t){return typeof t==="string"&&cr.some((e)=>e===t)}function nr(t=process.env,e=Nt()){return t.XDG_CONFIG_HOME?.trim()||R(e,".config")}function et(t=process.env,e=Nt()){let r=z({env:t}),o=nr(t,e);return R(o,gt(o).state==="kept"?"ara":"reason",...r==="staging"?["staging"]:[],"installation.json")}function p(t){return typeof t==="string"&&t.trim().length>0}var dr=/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;function fr(t){return typeof t==="string"&&dr.test(t)}function J(t){return p(t)&&Tt(t)&&Ke(t)===t}function Ct(t){if(!t||typeof t!=="object"||Array.isArray(t))return!1;let e=t;return J(e.path)&&(e.role==="launcher"&&(e.kind==="file"||e.kind==="symlink")||e.role==="worker_root"&&e.kind==="directory"||e.role==="alias"&&e.kind==="symlink"&&J(e.target))}function Bt(t){return t.owned_paths?.every((e)=>e.role!=="alias"||t.installer==="shell"&&e.path===R(t.install_dir,t.channel==="staging"?"reason-staging":"reason")&&e.target===R(t.install_dir,t.channel==="staging"?"ara-staging":"ara")&&t.owned_paths?.some((r)=>r.role==="launcher"&&r.path===e.target))??!1}function lr(t,e){try{return Ee(Ot(t),Xe(t))===e}catch{return!1}}function rt(t){let e=He(t),r=e==="ara"?"reason":e==="ara-staging"?"reason-staging":null;if(!r)return t;let o=R(Ot(t),r);return lr(o,t)?o:t}function It(t,e){let r=Ve(t,e);return r.length>0&&!r.startsWith("..")&&!Tt(r)}function $t(t){if(t===null)return!0;if(!t||typeof t!=="object"||Array.isArray(t))return!1;let e=t;return e.kind==="shell_profile"&&p(e.location)&&p(e.value)&&(typeof e.added_by_installer==="boolean"||typeof e.added_by_ara==="boolean")&&(e.added_by_installer===void 0||typeof e.added_by_installer==="boolean")&&(e.added_by_ara===void 0||typeof e.added_by_ara==="boolean")}function Ft(t,e){if(e===null)return t==="cli_only";if(!e||typeof e!=="object"||Array.isArray(e))return!1;let r=e;if(r.version!==er||!p(r.recorded_at))return!1;if(t==="future_device")return r.decision==="authorized"&&ir(r.scope);return r.scope===null&&r.decision===(t==="updates_only"?"ask":"disabled")}function _r(t){if(!t||typeof t!=="object"||Array.isArray(t))return null;let e=t;if(e.schema_version!==ve||!v.includes(e.channel)||e.install_method!=="curl"||e.installer!=="shell"||!p(e.installed_at)||!p(e.version)||!p(e.target)||!J(e.install_dir)||!Array.isArray(e.owned_paths)||!e.owned_paths.every(Ct)||!e.owned_paths.every((r)=>It(e.install_dir,r.path))||!Bt(e)||!$t(e.path_entry))return null;return{...e,schema_version:tt,installation_id:null,background_mode:"cli_only",device_consent:null}}function ur(t){if(!t||typeof t!=="object"||Array.isArray(t))return null;let e=t;if(e.schema_version!==tr||!Rt(e)||!qt(e.background_mode)||!Ft(e.background_mode,e.device_consent))return null;return{...e,schema_version:tt,installation_id:null}}function Rt(t){return v.includes(t.channel)&&(t.install_method==="curl"&&t.installer==="shell"||t.install_method==="desktop"&&t.installer==="desktop"&&Array.isArray(t.owned_paths)&&t.owned_paths.length===0&&t.path_entry===null)&&p(t.installed_at)&&p(t.version)&&p(t.target)&&J(t.install_dir)&&Array.isArray(t.owned_paths)&&t.owned_paths.every(Ct)&&t.owned_paths.every((e)=>It(t.install_dir,e.path))&&Bt(t)&&$t(t.path_entry)}function mr(t){let e=_r(t);if(e)return e;let r=ur(t);if(r)return r;if(!t||typeof t!=="object"||Array.isArray(t))return null;let o=t;if(o.schema_version!==tt||!fr(o.installation_id)||!Rt(o)||!qt(o.background_mode)||!Ft(o.background_mode,o.device_consent)||o.desktop_account_access!==void 0&&(o.desktop_account_access===null||typeof o.desktop_account_access!=="object"||Array.isArray(o.desktop_account_access)||o.desktop_account_access.version!==rr||o.desktop_account_access.scope!==or||!p(o.desktop_account_access.recorded_at)||!Number.isFinite(Date.parse(o.desktop_account_access.recorded_at))))return null;return o}function Gt(t=et()){if(!Ye(t))return null;try{return mr(JSON.parse(We(t,"utf8")))}catch{return null}}var at="REASON_WORKER_SERVICE",Nr="worker_identity_unavailable";function zt(t){return{platform:process.platform,home:t,uid:process.getuid?.(),command:(e,r)=>j(e,[...r],{stdio:"ignore"}).status??1,read:(e,r)=>{let o=j(e,[...r],{stdio:["ignore","pipe","ignore"],encoding:"utf8",timeout:1e4});return o.status===0?o.stdout:null},sleep:(e)=>Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e),workerIdentity:(e)=>Lt(t,e),insideService:(e)=>Or(e,process.platform,process.getuid?.())}}function Or(t,e,r){if(process.env[at]===t||process.env.XPC_SERVICE_NAME===t)return!0;if(e==="linux")try{return M("/proc/self/cgroup","utf8").includes(`/${t}.service`)}catch{return!0}if(e!=="darwin")return!1;if(typeof r!=="number")return!0;let o=j("/bin/launchctl",["print",`gui/${r}/${t}`],{encoding:"utf8",timeout:5000});if(o.status===Tr)return!1;if(o.error||o.status!==0)return!0;let s=Number(/^\s*pid = (\d+)$/m.exec(o.stdout??"")?.[1]??0);if(!s)return!1;let a=process.pid;for(let c=0;c<64&&a>1;c+=1){if(a===s)return!0;let i=j("/bin/ps",["-o","ppid=","-p",String(a)],{encoding:"utf8",timeout:5000}),n=Number(i.stdout?.trim());if(i.error||i.status!==0||!Number.isSafeInteger(n)||n<=0)return!0;if(n===a)return!1;a=n}return a>1}var Tr=113;class A extends Error{code;constructor(t,e){super(t);this.code=e}}function jt(t,e){if(t.platform!=="darwin"&&t.platform!=="linux")throw new A("A background service needs macOS (launchd) or Linux (systemd --user).");if(t.platform==="darwin")U(t);let o=[Gt(et(e,t.home))?.owned_paths.find((s)=>s.role==="launcher")?.path,E(e,"REASON_CLI_LAUNCHER_PATH")?.trim(),G(t.home,".local","bin",z({env:e})==="staging"?"ara-staging":"ara")];for(let s of o)try{if(s&&Jt(s)&&yr(s).isFile())return rt(s)}catch{}throw new A("A background service runs the installed Reason launcher, which was not found. Install Reason with: curl -fsSL https://reasonmachines.com/install | sh","worker_launcher_missing")}var Dt=/(<key>ProgramArguments<\/key>\s*<array>\n)((?:\s*<string>[^<]*<\/string>\n)*)(\s*<\/array>)/,ot=new RegExp(`(\\n\\s*<key>${D}</key>\\s*<string>)[^<]*(</string>)`),qr=/(<key>EnvironmentVariables<\/key>\s*<dict>[\s\S]*?)(\n\s*<\/dict>)/;function Cr(t){return t.replaceAll("&lt;","<").replaceAll("&gt;",">").replaceAll("&quot;",'"').replaceAll("&apos;","'").replaceAll("&amp;","&")}function Br(t){let e=[...(Dt.exec(t)?.[2]??"").matchAll(/<string>([^<]*)<\/string>/g)].map((o)=>Cr(o[1])),r=e[1]==="--run-worker"?e.slice(2):e;return r[0]?{launcher:r[0],args:r.slice(1)}:null}function Mt(t,e,r){let o=r.workerIdentity?.(t)??null;return{program:o?[o.executable,"--run-worker",t,...e]:[t,...e],identity:o}}function Pt(t){return t.map((e)=>`    <string>${N(e)}</string>`).join(`
+`)}function Zt(t,e){let r;try{r=M(t,"utf8")}catch{return null}let o=Br(r);if(!o)return null;let s=Jt(o.launcher)?rt(o.launcher):o.launcher,{program:a,identity:c}=Mt(s,o.args,e),i=r.replace(Dt,(n,f,d,l)=>`${f}${Pt(a)}
+${l}`);if(!c)i=i.replace(ot,"");else if(ot.test(i))i=i.replace(ot,(n,f,d)=>`${f}${N(c.app)}${d}`);else i=i.replace(qr,(n,f,d)=>`${f}
+    <key>${D}</key>
+    <string>${N(c.app)}</string>${d}`);return i===r?null:i}function Ir(t,e){let r=Zt(t,e);if(r!==null)Z(t,r)}function cs(t,e,r){if(e.platform!=="darwin")return!1;let o=ct(t,e,r);return o!==null&&Zt(o.definition,e)!==null}var P="com.reasonmachines.worker.",it="so.reason.worker.",kt=[P,it];function Qt(t,e=P){return`${e}connect${t==="production"?"":`.${t}`}`}function ns(t,e){return kt.some((r)=>t===Qt(e,r))}function $r(t,e,r){if(e==="connect")return Qt(t.channel,r);let o=br("sha256").update(t.workspaceRoot).digest("hex").slice(0,8);return`${r}${t.name.toLowerCase()}.${o}`}function Fr(t,e){if(e==="darwin")return{directory:G(t,"Library","LaunchAgents"),suffix:".plist"};if(e==="linux")return{directory:G(t,".config","systemd","user"),suffix:".service"};return null}function B(t,e,r,o=P){let s=$r(t,r,o),a=Fr(e.home,e.platform);if(!a)return null;return{label:s,definition:G(a.directory,`${s}${a.suffix}`),logs:e.platform==="darwin"?G(t.stateDirectory,"service.log"):`journalctl --user -u ${s}.service`}}function ct(t,e,r="serve"){return Yt(t,e,r)[0]??null}function Yt(t,e,r){return kt.map((o)=>B(t,e,r,o)).filter((o)=>o!==null&&st(o.definition))}function Xt(t,e,r){let o=B(t,e,r,it);return o&&st(o.definition)?o:null}function Rr(t,e,r){let o=B(t,e,r),s=Xt(t,e,r);if(!o||!s||!st(o.definition)||e.insideService?.(s.label))return null;if(!Gr(o,e))return"current_not_running";if(e.platform==="darwin"){if(typeof e.uid==="number"&&e.uid>0)e.command("/bin/launchctl",["bootout",`gui/${e.uid}/${s.label}`]);return g(s.definition,{force:!0}),"retired"}return e.command("systemctl",["--user","disable","--now",`${s.label}.service`]),g(s.definition,{force:!0}),e.command("systemctl",["--user","daemon-reload"]),"retired"}function Gr(t,e){if(e.platform==="darwin")return typeof e.uid==="number"&&e.uid>0&&e.command("/bin/launchctl",["print",`gui/${e.uid}/${t.label}`])===0;let r=`${t.label}.service`;return e.command("systemctl",["--user","is-enabled","--quiet",r])===0&&Ur.has(e.read("systemctl",["--user","show","--property=ActiveState","--value",r])?.trim()??"")}var Ur=new Set(["active","activating","reloading"]);function Wt(t,e){if(e==="connect")return{args:["connect"],environment:{REASON_CLI_CHANNEL:t.channel},description:"Reason connection of this computer"};return{args:["serve",t.name,"--dir",t.workspaceRoot,...t.executionMode==="confined"?["--sandbox"]:[]],environment:{},description:`Reason machine ${t.name} worker`}}function N(t){return t.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;").replaceAll("'","&apos;")}function Ut(t,e=!1){if(/[\0-\x1f\x7f]/.test(t))throw new A("A background service cannot use a path with control characters.");let r=t.replaceAll("\\","\\\\").replaceAll('"',"\\\"").replaceAll("%","%%");return`"${e?r.replaceAll("$","$$$$"):r}"`}function hr(t,e,r,o,s,a){let c=Wt(t,e),i=Mt(o,c.args,s),n={HOME:s.home,PATH:a,[at]:r.label,...c.environment,...i.identity?{[D]:i.identity.app}:{}};return{identity:i.identity,plist:`<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${N(r.label)}</string>
+  <key>AssociatedBundleIdentifiers</key>
+  <array>
+    <string>${ht}</string>
+  </array>
+  <key>ProgramArguments</key>
+  <array>
+${Pt(i.program)}
+  </array>
+  <key>EnvironmentVariables</key>
+  <dict>
+${Object.entries(n).map(([f,d])=>`    <key>${f}</key>
+    <string>${N(d)}</string>`).join(`
+`)}
+  </dict>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>KeepAlive</key>
+  <dict>
+    <key>SuccessfulExit</key>
+    <false/>
+  </dict>
+  <key>ThrottleInterval</key>
+  <integer>10</integer>
+  <key>ExitTimeOut</key>
+  <integer>${Math.ceil(t.shutdownGraceMs/1000)+10}</integer>
+  <key>ProcessType</key>
+  <string>Standard</string>
+  <key>Umask</key>
+  <integer>63</integer>
+  <key>StandardOutPath</key>
+  <string>${N(r.logs)}</string>
+  <key>StandardErrorPath</key>
+  <string>${N(r.logs)}</string>
+</dict>
+</plist>
+`}}function Lr(t,e,r,o,s,a){let c=Wt(t,e);return`[Unit]
+Description=${c.description}
+
+[Service]
+ExecStart=${[o,...c.args].map((i)=>Ut(i,!0)).join(" ")}
+Environment=${[`HOME=${s}`,`PATH=${a}`,`${at}=${r.label}`,...Object.entries(c.environment).map(([i,n])=>`${i}=${n}`)].map((i)=>Ut(i)).join(" ")}
+Restart=on-failure
+RestartSec=10
+TimeoutStopSec=${Math.ceil(t.shutdownGraceMs/1000)+10}
+UMask=0077
+
+[Install]
+WantedBy=default.target
+`}function Z(t,e){Sr(gr(t),{recursive:!0,mode:448});let r=`${t}.${wr()}.tmp`;try{Ar(r,e,{mode:384,flag:"wx"}),xr(r,384),pr(r,t)}finally{g(r,{force:!0})}}function U(t){if(typeof t.uid!=="number"||!Number.isSafeInteger(t.uid)||t.uid<=0)throw new A("Set up a background service as your own user, not with sudo.");return`gui/${t.uid}`}function ds(t){let{config:e,launcher:r,host:o}=t,s=t.kind??"serve",a=Xt(e,o,s),c=a!==null&&o.insideService?.(a.label)===!0,i=B(e,o,s,c?it:P);if(!i)throw new A("A background service needs macOS (launchd) or Linux (systemd --user).");if(o.platform==="darwin")U(o);if(o.platform==="linux"&&o.command("systemctl",["--user","show-environment"])!==0)throw new A("No background service here: this computer has no systemd user session.","worker_service_manager_missing");let n=o.platform==="darwin"?hr(e,s,i,r,o,t.path):null;if(Z(i.definition,n?n.plist:Lr(e,s,i,r,o.home,t.path)),Ht(e,o,i,c?null:a),n)return n.identity?i:{...i,identityProblem:Nr};return{...i,lingering:o.command("loginctl",["enable-linger"])===0}}function Ht(t,e,r,o){if(e.platform==="darwin"){let c=U(e);if(o)e.command("/bin/launchctl",["bootout",`${c}/${o.label}`]);if(Kt(t,r,e)){if(o)g(o.definition,{force:!0});return}if(g(r.definition,{force:!0}),o)e.command("/bin/launchctl",["bootstrap",c,o.definition]);throw new A("Could not start the background service (launchctl bootstrap failed).")}let s=`${r.label}.service`,a=o?`${o.label}.service`:null;if(e.command("systemctl",["--user","daemon-reload"])!==0||a!==null&&e.command("systemctl",["--user","disable","--now",a])!==0||e.command("systemctl",["--user","enable",s])!==0||e.command("systemctl",["--user","restart",s])!==0){if(e.command("systemctl",["--user","disable",s]),g(r.definition,{force:!0}),e.command("systemctl",["--user","daemon-reload"]),a)e.command("systemctl",["--user","enable","--now",a]);throw new A("Could not start the background service (systemctl --user failed).")}if(o)g(o.definition,{force:!0}),e.command("systemctl",["--user","daemon-reload"])}function Kt(t,e,r){let o=U(r);r.command("/bin/launchctl",["bootout",`${o}/${e.label}`]);let s=(Math.ceil(t.shutdownGraceMs/1000)+10)*1000;for(let a=0,c=100;;c=Math.min(c*2,2000)){if(r.command("/bin/launchctl",["bootstrap",o,e.definition])===0)return!0;if(a>=s)return!1;r.sleep(c),a+=c}}function fs(t,e,r){let o=ct(t,e,r);if(!o)return null;let s=e.insideService?.(o.label)===!0;if(e.platform==="darwin"&&!s)Ir(o.definition,e);let a=B(t,e,r);if(a&&o.label!==a.label&&!s)return Z(a.definition,M(o.definition,"utf8").replaceAll(o.label,a.label)),Ht(t,e,a,o),a;let c=e.platform==="darwin"&&s,i;if(c)i=e.command("/bin/launchctl",["kickstart","-k",`${U(e)}/${o.label}`])===0;else if(e.platform==="darwin")i=Kt(t,o,e);else e.command("systemctl",["--user","enable",`${o.label}.service`]),i=e.command("systemctl",["--user","restart",`${o.label}.service`])===0;if(!i)throw new A(`Could not restart the background service ${o.label}.`);if(a&&o.label===a.label)Rr(t,e,r);return o}function ls(t,e,r,o){let s=ct(t,r,o),a=B(e,r,o);if(r.platform!=="darwin"||!s||!a)return;let c=`<string>${N(s.logs)}</string>`,i=M(s.definition,"utf8");if(i.includes(c))Z(s.definition,i.replaceAll(c,`<string>${N(a.logs)}</string>`))}function _s(t,e,r="serve"){let o=Yt(t,e,r);for(let s of o){if(e.platform==="darwin"){if(typeof e.uid==="number"&&e.uid>0)e.command("/bin/launchctl",["bootout",`gui/${e.uid}/${s.label}`]);g(s.definition,{force:!0});continue}e.command("systemctl",["--user","disable","--now",`${s.label}.service`]),g(s.definition,{force:!0}),e.command("systemctl",["--user","daemon-reload"])}return o[0]??null}var kr=Zr(Jr),Vt="x-apple.systempreferences:com.apple.preference.security",Qr={accessibility:`${Vt}?Privacy_Accessibility`,screen:`${Vt}?Privacy_ScreenCapture`},Yr=64,h=new Map;function Q(t,e){let r=h.get(t);if(r?.has(e))return!1;if(!r){if(h.size>=Yr)h.delete(h.keys().next().value);r=new Set,h.set(t,r)}return r.add(e),!0}function Xr(){let t=T(),e=jt(zt(t),process.env),r=Pr(t,".local","share","reason","desktop-install.log");Dr(k(r),{recursive:!0,mode:448});let o=Mr(r,"a",384);try{let s=zr(e,["desktop","install"],{detached:!0,stdio:["ignore",o,o],env:{...process.env,REASON_DESKTOP_BACKGROUND:"1"}});s.on("error",()=>{return}),s.unref()}finally{jr(o)}}var Y={open:async(t,e)=>{await kr("/usr/bin/open",t,{signal:e,timeout:1e4,maxBuffer:8192})},request:(t,e)=>re(t,e),tile:oe,installDesktop:Xr},Et=!1;async function vt(t,e,r){try{await e.open(["-a","Google Chrome",t],r)}catch{r.throwIfAborted(),await e.open([t],r)}}async function se(t,e,r,o){if(await r.open([Qr[e]],o).catch(()=>{}),t[0]&&!o.aborted)r.tile(k(k(k(t[0]))),e)}async function Wr(t,e,r,o,s){for(let a of r){if(!Q(t,`grant:${a}`))continue;s.throwIfAborted(),await o.request(e,a).catch(()=>null),await se(e,a,o,s)}}var Hr={name:"open_tab",description:"Open a web page in the user's own Chrome on this Mac. Reason cannot read, screenshot or click in that tab, and no tab_id is returned: browser control needs Reason's Chrome extension, whose Chrome Web Store page Reason opened for the user.",inputSchema:{type:"object",properties:{url:{type:"string",description:"An http or https URL."}},required:["url"],additionalProperties:!1}};function te(t){return{code:0,stderr:"",stdout:Buffer.from(JSON.stringify({ok:!0,...t}))}}function Kr(t){if(typeof t!=="string")return null;try{let e=new URL(t);return e.protocol==="https:"||e.protocol==="http:"?e.href:null}catch{return null}}async function nt(t,e=Y){let{call:r,runId:o,signal:s}=t;if(t.desktopMissing&&!Et){Et=!0;try{e.installDesktop()}catch{}}if(r.kind==="computer"){if(t.identity.length>0&&Q(o,"grant:probe")){let i=await e.request(t.identity).catch(()=>null),n=i?[...i.accessibility?[]:["accessibility"],...i.screen?[]:["screen"]]:[];for(let f of n)Q(o,`grant:${f}`);for(let f of n)await se(t.identity,f,e,s)}throw new _("automation_computer_setup_required","Computer use is not set up on this Mac yet; Reason asked macOS for any missing permission.")}if(Q(o,"page:chrome-extension"))await vt(ee,e,s).catch(()=>{});if(r.operation==="discover")return te({result:{tools:[Hr]}});let a=r.arguments,c=r.operation==="call"&&r.tool==="open_tab"&&a&&typeof a==="object"&&!Array.isArray(a)?Kr(a.url):null;if(!c)throw new _("automation_browser_setup_required","Browser control is not set up on this Mac yet; Reason opened its Chrome Web Store page. open_tab still opens pages.");return await vt(c,e,s),te({result:{content:[{type:"text",text:JSON.stringify({opened:c,browser:"the user's Chrome",controllable:!1,note:"Opened for the user to see. Reason cannot read or act in this tab until Reason's Chrome extension is added (its Chrome Web Store page is open)."})}]}})}async function ae(t,e=Y){if(t.call.kind!=="computer"||t.call.operation!=="permission_status"||t.output.code!==0||t.identity.length===0)return t.output;let r;try{r=JSON.parse(t.output.stdout.toString("utf8"))}catch{return t.output}if(!r||typeof r!=="object"||Array.isArray(r))return t.output;let o=r.permissions;if(!o||typeof o!=="object")return t.output;let s=o,a=[...s.accessibility==="missing"?["accessibility"]:[],...s.screenRecording==="missing"?["screen"]:[]];if(a.length===0)return t.output;return await Wr(t.runId,t.identity,a,e,t.signal),{...t.output,stdout:Buffer.from(JSON.stringify({...r,requested:a}))}}var mt=172032,ao=18874368,io=8192,co=65536,no=55000,fo=60000,lo=4,_o=40000,uo=/^[0-9a-f-]{36}$/,de=yt,mo=ye();function W(t){return Boolean(t)&&typeof t==="object"&&!Array.isArray(t)}function H(){throw new _("invalid_automation_request","Reason automation request is malformed.")}function Ne(t){let e=Object.keys(t).sort().join(",");if(e==="call"||e==="browser,call"){let r=t.call,o=e==="browser,call";if(!W(r)||r.version!==1||r.kind!=="computer"&&r.kind!=="browser"||o&&(t.browser!==me||r.kind!=="browser")||JSON.stringify(r).length>co)H();return{call:r,userChrome:o}}if(e==="offset,output_id"){if(typeof t.output_id!=="string"||!uo.test(t.output_id)||!Number.isSafeInteger(t.offset)||t.offset<0)H();return{output_id:t.output_id,offset:t.offset}}return H()}function Ys(t=process.platform,e=$){if(t==="darwin")return!0;return t==="linux"&&e()?.features.computer===!0}var bo="__computer-use";function wo(t){let e=(r)=>r?"granted":"missing";return`Permissions: accessibility=${e(t.accessibility)}, screenRecording=${e(t.screen)}
+`}function xo(t,e,r,o={stdin:process.stdin,stdout:process.stdout}){return new Promise((s)=>{let a=I(t,e,{env:r,stdio:["pipe","pipe","inherit"]}),c=(d)=>{a.kill(d)},i=["SIGTERM","SIGINT","SIGHUP"];for(let d of i)process.on(d,c);o.stdin.pipe(a.stdin),a.stdin.on("error",()=>{return}),a.stdout.pipe(o.stdout,{end:!1});let n=!1,f=(d)=>{if(n)return;n=!0;for(let l of i)process.off(l,c);o.stdin.unpipe(a.stdin),o.stdout.write("",()=>s(d))};a.once("error",()=>f(127)),a.once("close",(d)=>f(d??1))})}async function Xs(t,e={}){let r=e.stderr??process.stderr,o=(e.identity??wt)(),s=(e.components??$)();if(o.length===0||s?.platform!=="darwin-arm64")return r.write(`Reason computer use: Reason's background identity cannot run Open Computer Use here (computer_use_identity_unavailable)
+`),1;if(t.length===1&&t[0]==="doctor"){let i=await(e.grants??Se)(o);if(!i)return r.write(`Reason computer use: Reason's permissions could not be read (computer_use_permission_status_unavailable)
+`),1;return(e.stdout??process.stdout).write(wo(i)),0}if(t.length!==1||t[0]!=="mcp")return r.write(`Usage: reason __computer-use mcp|doctor
+`),2;let[a,...c]=o;return(e.run??xo)(a,[...c,s.ocu,"mcp"],{...process.env,OPEN_COMPUTER_USE_DISABLE_APP_AGENT_PROXY:"1"})}function Ws(t=$){return t()?.userChrome??{code:"user_chrome_browser_use_missing"}}function Oe(t,e,r,o){return new Promise((s)=>{let a=I(t,e,{env:r,stdio:"ignore"}),c=setTimeout(()=>{a.kill("SIGKILL"),s(-1)},o);a.once("error",()=>{clearTimeout(c),s(-1)}),a.once("exit",(i)=>{clearTimeout(c),s(i??-1)})})}function So(t,e,r,o){return new Promise((s)=>{let a=I(t,e,{env:r,stdio:["ignore","pipe","ignore"]}),c="";a.stdout.setEncoding("utf8").on("data",(n)=>{c+=n});let i=setTimeout(()=>{a.kill("SIGKILL"),s(null)},o);a.once("error",()=>{clearTimeout(i),s(null)}),a.once("close",(n)=>{clearTimeout(i),s(n===0?c:null)})})}var po="/tmp/open-browser-use",yo=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/,Ao=33554432;function go(t,e){let r;try{r=t===null?null:JSON.parse(t)}catch{return null}let o=W(r)&&W(r.result)?r.result.metadata:null;if(!W(o)||o.extensionId!==e)return null;return typeof o.extensionInstanceId==="string"&&yo.test(o.extensionInstanceId)?o.extensionInstanceId:null}async function Te(t,e,r){let o=r.storages.map((i)=>{try{return K(i).filter((n)=>n.endsWith(".log")||n.endsWith(".ldb")).map((n)=>b(i,n))}catch{return[]}}),s;try{s=o.some((i)=>i.length>0)?K(r.socketDir).filter((i)=>i.endsWith(".sock")):[]}catch{return[]}let a=[];for(let i of s){let n=b(r.socketDir,i),f=go(await So(t,["info","--socket",n,"--timeout","2s"],e,5000),r.extensionId);if(f)a.push({instance:f,socket:n})}let c=[];for(let[i,n]of(a.length>0?o:[]).entries())for(let f of n)try{if(oo(f).size>Ao)continue;let d=Ae(f),l=a.find((m)=>d.includes(m.instance));if(l){c.push({storage:r.storages[i],...l});break}}catch{}return c}async function No(t,e,r){return(await Te(t,e,r))[0]?.instance??null}function qe(t,e,r){return No(t,e,{socketDir:po,extensionId:lt,storages:[b(r,"browser-profile","Default","Local Extension Settings",lt)]})}var fe=/^(Default|Profile ([0-9]+))$/;async function Oo(t,e,r=T(),o=xt){let s=b(r,"Library","Application Support","Google","Chrome"),a=[];try{a=K(s)}catch(d){if(d.code==="EPERM")throw new _("browser_use_chrome_access_denied","macOS blocked Reason from reading Chrome's profiles. Allow Full Disk Access for Reason on this Mac and try again.")}let c=(d)=>Number(fe.exec(d)?.[2]??-1),i=a.filter((d)=>fe.test(d)&&_t(b(s,d,"Extensions",X))).sort((d,l)=>c(d)-c(l)),n=(d)=>b(s,d,"Local Extension Settings",X);return(await Te(t,e,{socketDir:o,extensionId:X,storages:i.map(n)})).map(({storage:d,instance:l,socket:m})=>({profile:i.find((u)=>n(u)===d),instance:l,socket:m}))}async function To(t,e,r=T(),o=xt){let s=(await Oo(t,e,r,o))[0]?.instance;if(!s)throw new _("automation_user_chrome_not_connected","No Chrome profile on this Mac is connected to Reason. Open Chrome with the Reason extension, then try again.");return s}function le(t){return new Promise((e)=>{let r=so({path:t}),o=(s)=>{r.destroy(),e(s)};r.setTimeout(1000,()=>o(!1)),r.once("error",()=>o(!1)),r.once("connect",()=>o(!0))})}async function Ce(t,e){let r=Date.now()+e;while(Date.now()<r){if(await t())return!0;await new Promise((o)=>setTimeout(o,200))}return!1}var dt=new Map;function ft(t,e){let r=dt.get(t);if(!r)r=e().finally(()=>dt.delete(t)),dt.set(t,r);return r}async function qo(t,e){if(await le(t))return;if(ro(t,{force:!0}),await Oe("dbus-daemon",["--session",`--address=unix:path=${t}`,"--fork"],e,1e4)!==0||!await Ce(()=>le(t),5000))throw new _("automation_unavailable","Reason could not start the desktop session bus.")}async function _e(t,e,r){let o=t.platform==="darwin-arm64"?async()=>await qe(t.nativeHost,e,r)!==null:async()=>await Oe(t.nativeHost,["info"],e,5000)===0;if(await o())return;let s=["--profile-directory=Default",`--load-extension=${t.extensionDir}`,"--no-first-run","--no-default-browser-check","--window-size=1280,800","about:blank"],a,c=null,i=0;if(t.platform==="darwin-arm64"){let d=b(r,"browser-profile");L(d);let l=b(d,"NativeMessagingHosts");ce(l,{recursive:!0,mode:448});let m=bt(t.platform).nativeHostManifests[0];ie(m,b(l,ne(m)));let u=t.browser.slice(0,t.browser.indexOf(".app/")+4),S=s.filter((C)=>C!=="about:blank").concat("--no-startup-window","--use-mock-keychain");a=I("/usr/bin/open",["-g","-n","-a",u,"--args",`--user-data-dir=${d}`,...S],{env:e,stdio:"ignore"})}else{let d=b(e.HOME,".config","google-chrome"),l=b(d,"NativeMessagingHosts");ce(l,{recursive:!0,mode:448});let m=bt(t.platform).nativeHostManifests[0];ie(m,b(l,ne(m)));let u=process.geteuid?.()===0?["--no-sandbox"]:[];c=b(r,"browser.log");let S=vr(c,"a",384);i=Er(S).size,a=I(t.browser,[`--user-data-dir=${d}`,...s,...u,"--force-renderer-accessibility"],{detached:!0,stdio:["ignore",S,S],env:{...e,ACCESSIBILITY_ENABLED:"1"}}),Vr(S)}let n=!1;a.once("error",()=>{n=!0}),a.once("exit",(d)=>{n||=d!==0}),a.unref();let f=!1;if(await Ce(async()=>n||(f=await o()),_o),!f){if(c&&Ae(c).subarray(i).toString("utf8").includes("No usable sandbox"))throw new _("automation_browser_sandbox_unavailable","Chromium found no usable sandbox on this machine. Run the worker as a non-root user with unprivileged user namespaces enabled, or in a container with seccomp unconfined.");throw new _("automation_browser_unavailable","Reason could not connect the desktop browser.")}}async function Hs(t){await $e(t,!0)}function Ks(t){return Be(t,Ie(t))}function Be(t,e){return t.platform==="darwin-arm64"?b(e,"browser-profile"):b(e,"home",".config","google-chrome")}function Ie(t){let e=b(t.root,"automation");if(!_t(e)||!Co(t.automation))return t.automation;if(!Bo(Be(t,e)))try{eo(e,t.automation)}catch{}return _t(e)?e:t.automation}function Co(t){try{return K(t).length===0}catch(e){return e.code==="ENOENT"}}function Bo(t){let e;try{e=to(b(t,"SingletonLock"))}catch{return!1}let r=Number(e.slice(e.lastIndexOf("-")+1));if(!Number.isSafeInteger(r)||r<=0)return!0;try{return process.kill(r,0),!0}catch(o){return o.code==="EPERM"}}async function $e(t,e){we({root:t.root,automation:t.automation,extensionDir:t.extensionDir});let r=Ie(t);L(r);let o=ge().username,s={USER:o,LOGNAME:o,REASON_AUTOMATION_OCU:t.ocu,REASON_AUTOMATION_OBU:t.nativeHost};if(t.platform==="darwin-arm64"){let d={...s,HOME:T(),PATH:`${ut(t.node)}:/usr/bin:/bin:/usr/sbin:/sbin`,REASON_AUTOMATION_OCU:process.execPath,REASON_AUTOMATION_OCU_SUBCOMMAND:bo};if(!e)return d;await ft("browser",()=>_e(t,d,r));let l=await qe(t.nativeHost,d,r);if(!l)throw new _("automation_browser_unavailable","Reason could not connect the desktop browser.");return{...d,REASON_AUTOMATION_OBU_INSTANCE:l,REASON_AUTOMATION_BACKGROUND_TABS:"1"}}let a=await Ge(),c=b(r,"home"),i=b(r,"runtime");L(c),L(i);let n=b(r,"bus"),f={...s,HOME:c,PATH:`${ut(t.node)}:/usr/bin:/bin`,DISPLAY:a.display,XAUTHORITY:a.xauthority,XDG_RUNTIME_DIR:i,DBUS_SESSION_BUS_ADDRESS:`unix:path=${n}`,...a.sound?{PULSE_SERVER:pe(a.sound)}:{}};if(await ft("bus",()=>qo(n,f)),e)await ft("browser",()=>_e(t,f,r));return f}async function Io(t,e,r){let o=ge().username,s={USER:o,LOGNAME:o,HOME:T(),PATH:`${ut(t.node)}:/usr/bin:/bin:/usr/sbin:/sbin`,REASON_AUTOMATION_OBU:e,REASON_AUTOMATION_BACKGROUND_TABS:"1"},a=await To(e,s);return r.throwIfAborted(),{...s,REASON_AUTOMATION_OBU_INSTANCE:a}}function Fe(t,e,r,o){if(typeof de!=="string")return Promise.reject(new _("automation_unavailable","This Reason build has no automation runtime."));let s=de;return new Promise((a,c)=>{let i=I(t,["--input-type=module","--eval",s],{env:{...e,REASON_CLOUD_GATEWAY_EXEC:"1",REASON_AUTOMATION_INLINE_RESULT:"1"},stdio:["pipe","pipe","pipe"],detached:!0}),n=[],f=0,d="",l=null,m=!1,u=(w)=>{l??=w;try{process.kill(-i.pid,"SIGKILL")}catch{i.kill("SIGKILL")}},S=(w)=>{if(m)return;m=!0,clearTimeout(C),o.removeEventListener("abort",O),w()},C=setTimeout(()=>u(new _("automation_timed_out","Reason automation did not finish in time.")),no),O=()=>u(new _("cancelled","Reason cancelled the automation call."));if(o.addEventListener("abort",O,{once:!0}),i.stdout.on("data",(w)=>{if(f+=w.byteLength,f>ao)u(new _("automation_output_too_large","Reason automation output is too large."));else n.push(w)}),i.stderr.setEncoding("utf8").on("data",(w)=>{d=(d+w).slice(-io)}),i.stdin.on("error",()=>{}),i.once("error",()=>S(()=>c(l??new _("automation_unavailable","Reason could not start the automation runtime.")))),i.once("close",(w)=>S(()=>{if(l)c(l);else a({code:w??1,stdout:Buffer.concat(n),stderr:d})})),o.aborted)O();i.stdin.end(r)})}var q=new Map;function $o(t,e,r){for(let[s,a]of q)if(a.expiresAt<=r)q.delete(s);while(q.size>=lo)q.delete(q.keys().next().value);let o=ye();return q.set(o,{runId:t,bytes:e,expiresAt:r+fo}),o}async function Re(t,e,r,o={}){let s=await(o.environment??$e)(t,e.kind==="browser");return r.throwIfAborted(),await(o.runtime??Fe)(t.node,s,JSON.stringify(e),r)}async function Vs(t,e){let r=Ne({call:t});if(!("call"in r))H();let o=$();if(!o?.features.computer||r.call.kind==="browser"&&!o.features.browser)throw new _("automation_unavailable","Run `reason desktop install` on this machine to enable computer and browser use.");return await Re(o,r.call,e)}function ue(t,e,r){let o=t.stdout.byteLength>mt?$o(e,t.stdout,r):void 0;return{code:t.code,stderr:t.stderr,instance_id:mo,output_bytes:t.stdout.byteLength,chunk:t.stdout.subarray(0,mt).toString("base64"),...o?{output_id:o}:{}}}async function Es(t,e={}){let r=Ne(t.payload),o=(e.now??Date.now)();if("output_id"in r){let u=q.get(r.output_id);if(!u||u.runId!==t.runId||u.expiresAt<=o||r.offset>u.bytes.byteLength)throw new _("automation_output_unavailable","Reason automation output expired.");return{chunk:u.bytes.subarray(r.offset,r.offset+mt).toString("base64")}}let s=(e.components??$)(),a=(e.platform??process.platform)==="darwin",c=a?(e.macIdentity??wt)():[],i=e.macSetup??Y,n=!s?.features.computer||r.call.kind==="browser"&&!r.userChrome&&!s.features.browser;if(a&&(n||c.length===0||r.call.kind==="browser"&&r.userChrome&&!t.userChrome))return ue(await nt({runId:t.runId,call:r.call,identity:c,desktopMissing:n,signal:t.signal},i),t.runId,o);if(!s?.features.computer)throw new _("automation_unavailable","Run `reason desktop install` on this machine to enable computer and browser use.");let f=r.userChrome?t.userChrome:void 0;if(r.userChrome&&!f)throw new _("automation_user_chrome_unavailable","Your own Chrome is not enabled on this computer: run `reason desktop install` on this Mac (and `reason connect --user-chrome on` if you turned it off).");if(r.call.kind==="browser"&&!f&&!s.features.browser)throw new _("automation_browser_not_installed",s.platform==="darwin-arm64"?"Browser use is unavailable on this machine: re-run `reason desktop install`.":"Browser use is unavailable on this machine: install a non-snap Chromium at /usr/bin/chromium, then re-run `reason desktop install`.");t.signal.throwIfAborted();let d=await xe(t.runId,t.signal,e.now),l="account"in e?e.account??null:be(),m;try{if(f){let u=await(e.userChromeEnvironment??Io)(s,f,t.signal);t.signal.throwIfAborted(),m=await(e.runtime??Fe)(s.node,u,JSON.stringify(r.call),t.signal)}else if(l)m=await(e.delegate??At)(l,r.call,t.signal);else m=await Re(s,r.call,t.signal,e)}catch(u){if(!a||!(u instanceof _)||u.code!=="automation_user_chrome_not_connected")throw u;m=await nt({runId:t.runId,call:r.call,identity:c,desktopMissing:!1,signal:t.signal},i)}finally{d()}if(a)m=await ae({runId:t.runId,call:r.call,identity:c,output:m,signal:t.signal},i);return ue(m,t.runId,o)}
+export{Gt as lc,at as mc,zt as nc,A as oc,jt as pc,cs as qc,Qt as rc,ns as sc,ct as tc,Rr as uc,ds as vc,fs as wc,ls as xc,_s as yc,Qe as zc,mt as Ac,Ne as Bc,Ys as Cc,xo as Dc,Xs as Ec,Ws as Fc,Oo as Gc,To as Hc,Hs as Ic,Ks as Jc,Vs as Kc,Es as Lc};