@reason-machines/cli-linux-arm64-musl 0.2.381 → 0.2.382

package/bin/vm-hands/vm-hands-entry-lite-2e18tm6w.js

@@ -0,0 +1,245 @@
+// @bun
+var e=String.raw`(function(loadFfi, existsSync) {
+  const STARTF_USESTDHANDLES = 0x100;
+  const CREATE_SUSPENDED = 0x4;
+  const CREATE_UNICODE_ENVIRONMENT = 0x400;
+  const EXTENDED_STARTUPINFO_PRESENT = 0x80000;
+  const PROC_THREAD_ATTRIBUTE_PSEUDOCONSOLE = 0x20016;
+  const JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE = 0x2000;
+  const JOB_OBJECT_BASIC_ACCOUNTING_INFORMATION = 1;
+  const JOB_OBJECT_EXTENDED_LIMIT_INFORMATION = 9;
+  const POLL_MS = 10;
+  // Output the console renders after the shell exits still reaches the viewer.
+  const EXIT_LINGER_MS = 100;
+  const READ_CHUNK_BYTES = 65536;
+  const READ_TICK_BYTES = 1048576;
+  const PIPE_NOWAIT = 1;
+  let api = null, loadError = null;
+  function kernel32() {
+    if (api) return api;
+    const ffi = loadFfi();
+    const { symbols } = ffi.dlopen("kernel32.dll", {
+      CreatePipe: { args: ["ptr", "ptr", "ptr", "u32"], returns: "i32" },
+      CreatePseudoConsole: { args: ["u32", "u64", "u64", "u32", "ptr"], returns: "i32" },
+      ResizePseudoConsole: { args: ["u64", "u32"], returns: "i32" },
+      ClosePseudoConsole: { args: ["u64"], returns: "void" },
+      InitializeProcThreadAttributeList: { args: ["ptr", "u32", "u32", "ptr"], returns: "i32" },
+      UpdateProcThreadAttribute: { args: ["ptr", "u32", "u64", "u64", "u64", "ptr", "ptr"], returns: "i32" },
+      DeleteProcThreadAttributeList: { args: ["ptr"], returns: "void" },
+      CreateProcessW: { args: ["ptr", "ptr", "ptr", "ptr", "i32", "u32", "ptr", "ptr", "ptr", "ptr"], returns: "i32" },
+      CreateJobObjectW: { args: ["ptr", "ptr"], returns: "u64" },
+      SetInformationJobObject: { args: ["u64", "u32", "ptr", "u32"], returns: "i32" },
+      QueryInformationJobObject: { args: ["u64", "u32", "ptr", "u32", "ptr"], returns: "i32" },
+      AssignProcessToJobObject: { args: ["u64", "u64"], returns: "i32" },
+      TerminateJobObject: { args: ["u64", "u32"], returns: "i32" },
+      ResumeThread: { args: ["u64"], returns: "u32" },
+      TerminateProcess: { args: ["u64", "u32"], returns: "i32" },
+      PeekNamedPipe: { args: ["u64", "ptr", "u32", "ptr", "ptr", "ptr"], returns: "i32" },
+      ReadFile: { args: ["u64", "ptr", "u32", "ptr", "ptr"], returns: "i32" },
+      WriteFile: { args: ["u64", "ptr", "u32", "ptr", "ptr"], returns: "i32" },
+      SetNamedPipeHandleState: { args: ["u64", "ptr", "ptr", "ptr"], returns: "i32" },
+      WaitForSingleObject: { args: ["u64", "u32"], returns: "u32" },
+      GetExitCodeProcess: { args: ["u64", "ptr"], returns: "i32" },
+      CloseHandle: { args: ["u64"], returns: "i32" },
+      GetLastError: { args: [], returns: "u32" },
+    });
+    api = Object.assign({}, symbols, { ptr: ffi.ptr });
+    return api;
+  }
+  function available() {
+    try { kernel32(); return true; } catch (error) { loadError = String(error && error.message || error); return false; }
+  }
+  /** Why available() is false, for diagnostics only. */
+  function unavailableReason() { return loadError;
+  }
+  function variable(env, name) {
+    const key = Object.keys(env).find((candidate) => candidate.toUpperCase() === name);
+    return key === undefined ? undefined : env[key];
+  }
+  /** PowerShell 7 when it is on PATH, else Windows PowerShell, else cmd.exe. */
+  function defaultShell(env) {
+    for (const directory of String(variable(env, "PATH") || "").split(";")) {
+      if (!/^[A-Za-z]:\\/.test(directory)) continue;
+      const candidate = directory.replace(/\\+$/, "") + "\\pwsh.exe";
+      if (existsSync(candidate)) return candidate;
+    }
+    const systemRoot = variable(env, "SYSTEMROOT") || "C:\\Windows";
+    const powershell = systemRoot + "\\System32\\WindowsPowerShell\\v1.0\\powershell.exe";
+    if (existsSync(powershell)) return powershell;
+    return variable(env, "COMSPEC") || systemRoot + "\\System32\\cmd.exe";
+  }
+  function shellArgs(shell) {
+    return /(^|[\\/])(pwsh|powershell)(\.exe)?$/i.test(shell) ? ["-NoLogo"] : [];
+  }
+  /** One CreateProcessW argument, quoted as CommandLineToArgvW reads it. */
+  function quoteArg(value) {
+    if (value && !/[\s"]/.test(value)) return value;
+    let quoted = '"', backslashes = 0;
+    for (const character of value) {
+      if (character === "\\") { backslashes += 1; continue; }
+      quoted += "\\".repeat(character === '"' ? backslashes * 2 + 1 : backslashes) + character;
+      backslashes = 0;
+    }
+    return quoted + "\\".repeat(backslashes * 2) + '"';
+  }
+  /** A CREATE_UNICODE_ENVIRONMENT block: sorted name=value NUL entries, then NUL. */
+  function environmentBlock(env) {
+    const entries = Object.entries(env)
+      .filter(([name, value]) => typeof value === "string" && name !== "" && !name.includes("="))
+      .sort(([left], [right]) => left.toUpperCase() < right.toUpperCase() ? -1 : left.toUpperCase() > right.toUpperCase() ? 1 : 0);
+    return Buffer.from(entries.map(([name, value]) => name + "=" + value + "\0").join("") + "\0" + (entries.length ? "" : "\0"), "utf16le");
+  }
+  // Diagnostics name the failed call; codes only, never terminal content.
+  const win32Error = (name) => new Error(name + " (GetLastError " + kernel32().GetLastError() + ")");
+  const hresultError = (name, hr) => new Error(name + " (HRESULT 0x" + (hr >>> 0).toString(16).padStart(8, "0") + ")");
+  const wide = (value) => Buffer.from(value + "\0", "utf16le");
+  const coord = (cols, rows) => ((rows & 0xffff) << 16 | (cols & 0xffff)) >>> 0;
+  /** input: { file, args, cwd, cols, rows, env, onData(bytes) } */
+  function spawn(input) {
+    const k = kernel32();
+    const opened = [];
+    const own = (handle) => { opened.push(handle); return handle; };
+    const closeHandle = (handle) => {
+      const index = opened.indexOf(handle);
+      if (index < 0) return;
+      opened.splice(index, 1);
+      k.CloseHandle(handle);
+    };
+    const pipe = () => {
+      const read = new BigUint64Array(1), write = new BigUint64Array(1);
+      if (!k.CreatePipe(read, write, null, 0)) throw win32Error("conpty_pipe_failed");
+      return [own(read[0]), own(write[0])];
+    };
+    let hpc = null, attributes = null, job, processHandle, inputWrite, outputRead, pid;
+    try {
+      job = k.CreateJobObjectW(null, null);
+      if (!job) throw win32Error("conpty_job_failed");
+      own(job);
+      // JOBOBJECT_EXTENDED_LIMIT_INFORMATION (x64): LimitFlags at 16, 144 bytes.
+      const limits = new Uint8Array(144);
+      new DataView(limits.buffer).setUint32(16, JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE, true);
+      if (!k.SetInformationJobObject(job, JOB_OBJECT_EXTENDED_LIMIT_INFORMATION, limits, limits.length)) throw win32Error("conpty_job_failed");
+      const [inputRead, inputWriteEnd] = pipe();
+      const [outputReadEnd, outputWrite] = pipe();
+      inputWrite = inputWriteEnd; outputRead = outputReadEnd;
+      if (!k.SetNamedPipeHandleState(inputWrite, new Uint32Array([PIPE_NOWAIT]), null, null)) throw win32Error("conpty_pipe_failed");
+      const created = new BigUint64Array(1);
+      const createdResult = k.CreatePseudoConsole(coord(input.cols, input.rows), inputRead, outputWrite, 0, created);
+      if (createdResult !== 0) throw hresultError("conpty_create_failed", createdResult);
+      hpc = created[0];
+      // The console host holds its own duplicates of the far ends.
+      closeHandle(inputRead); closeHandle(outputWrite);
+      const size = new BigUint64Array(1);
+      k.InitializeProcThreadAttributeList(null, 1, 0, size);
+      const list = new Uint8Array(Number(size[0]));
+      if (!k.InitializeProcThreadAttributeList(list, 1, 0, size)) throw win32Error("conpty_attributes_failed");
+      attributes = list;
+      if (!k.UpdateProcThreadAttribute(attributes, 0, PROC_THREAD_ATTRIBUTE_PSEUDOCONSOLE, hpc, 8, null, null)) throw win32Error("conpty_attributes_failed");
+      // STARTUPINFOEXW (x64): dwFlags at 60, lpAttributeList at 104, 112 bytes.
+      // Null standard handles: otherwise an owner whose own stdio is
+      // redirected hands those pipes to the shell instead of the console.
+      const startup = new Uint8Array(112);
+      const startupView = new DataView(startup.buffer);
+      startupView.setUint32(0, startup.length, true);
+      startupView.setUint32(60, STARTF_USESTDHANDLES, true);
+      startupView.setBigUint64(104, BigInt(k.ptr(attributes)), true);
+      // PROCESS_INFORMATION (x64): hProcess 0, hThread 8, dwProcessId 16.
+      const information = new Uint8Array(24);
+      const commandLine = wide([input.file].concat(input.args).map(quoteArg).join(" "));
+      if (!k.CreateProcessW(null, commandLine, null, null, 0, EXTENDED_STARTUPINFO_PRESENT | CREATE_UNICODE_ENVIRONMENT | CREATE_SUSPENDED,
+        environmentBlock(input.env), wide(input.cwd), startup, information)) throw win32Error("conpty_spawn_failed");
+      const view = new DataView(information.buffer);
+      processHandle = own(view.getBigUint64(0, true));
+      const thread = own(view.getBigUint64(8, true));
+      pid = view.getUint32(16, true);
+      if (!k.AssignProcessToJobObject(job, processHandle)) {
+        k.TerminateProcess(processHandle, 1);
+        throw win32Error("conpty_job_failed");
+      }
+      if (k.ResumeThread(thread) === 0xffffffff) throw win32Error("conpty_spawn_failed");
+      closeHandle(thread);
+    } catch (error) {
+      if (attributes) k.DeleteProcThreadAttributeList(attributes);
+      if (outputRead !== undefined) closeHandle(outputRead);
+      if (hpc !== null) k.ClosePseudoConsole(hpc);
+      if (job) k.TerminateJobObject(job, 1);
+      for (const handle of opened.slice()) closeHandle(handle);
+      throw error;
+    }
+    k.DeleteProcThreadAttributeList(attributes);
+
+    const waiting = new Uint32Array(1), transferred = new Uint32Array(1), exitCode = new Uint32Array(1);
+    const accounting = new Uint8Array(48);
+    const chunk = new Uint8Array(READ_CHUNK_BYTES);
+    let closed = false, exitedAt = null, code = null, resolveExit, pending = [];
+    const exited = new Promise((resolve) => { resolveExit = resolve; });
+    const drain = () => {
+      for (let read = 0; read < READ_TICK_BYTES;) {
+        if (!k.PeekNamedPipe(outputRead, null, 0, null, waiting, null) || waiting[0] === 0) return;
+        if (!k.ReadFile(outputRead, chunk, Math.min(waiting[0], READ_CHUNK_BYTES), transferred, null)) return;
+        if (transferred[0] > 0) input.onData(chunk.slice(0, transferred[0]));
+        read += transferred[0];
+      }
+    };
+    // Nonblocking: a full input pipe accepts fewer bytes (possibly none).
+    const flush = () => {
+      while (pending.length > 0) {
+        if (!k.WriteFile(inputWrite, pending[0], pending[0].byteLength, transferred, null)) throw win32Error("conpty_write_failed");
+        if (transferred[0] === 0) return;
+        pending[0] = pending[0].subarray(transferred[0]);
+        if (pending[0].byteLength === 0) pending.shift();
+      }
+    };
+    function close() {
+      if (closed) return;
+      closed = true;
+      clearInterval(timer);
+      closeHandle(outputRead);
+      k.ClosePseudoConsole(hpc);
+      k.TerminateJobObject(job, 1);
+      for (const handle of opened.slice()) closeHandle(handle);
+      resolveExit(code);
+    }
+    const timer = setInterval(() => {
+      try {
+        if (exitedAt === null && k.WaitForSingleObject(processHandle, 0) === 0) {
+          exitedAt = Date.now();
+          if (k.GetExitCodeProcess(processHandle, exitCode)) code = exitCode[0];
+        }
+        drain();
+        flush();
+        if (exitedAt !== null && Date.now() - exitedAt >= EXIT_LINGER_MS) resolveExit(code);
+      } catch { close(); }
+    }, POLL_MS);
+    return {
+      pid,
+      exited,
+      write(data) {
+        if (closed) throw new Error("conpty_closed");
+        // A copy: the caller may reuse its buffer before the queue flushes.
+        const bytes = typeof data === "string" ? Buffer.from(data, "utf8") : Buffer.from(data);
+        if (bytes.byteLength > 0) pending.push(bytes);
+        flush();
+      },
+      resize(cols, rows) {
+        if (closed) throw new Error("conpty_closed");
+        const resized = k.ResizePseudoConsole(hpc, coord(cols, rows));
+        if (resized !== 0) throw hresultError("conpty_resize_failed", resized);
+      },
+      /** Ends the shell and everything it started; the console stays open. */
+      terminate() {
+        if (closed || !k.TerminateJobObject(job, 1)) throw win32Error("conpty_terminate_failed");
+      },
+      /** Live processes in the shell's job (JOBOBJECT_BASIC_ACCOUNTING_INFORMATION.ActiveProcesses). */
+      activeProcesses() {
+        if (closed || !k.QueryInformationJobObject(job, JOB_OBJECT_BASIC_ACCOUNTING_INFORMATION, accounting, accounting.length, null)) {
+          throw win32Error("conpty_job_unreadable");
+        }
+        return new DataView(accounting.buffer).getUint32(40, true);
+      },
+      close,
+    };
+  }
+  return { available, unavailableReason, defaultShell, shellArgs, quoteArg, environmentBlock, spawn };
+})`;
+export{e as Tg};

package/bin/vm-hands/{vm-hands-entry-lite-g036gtem.js → vm-hands-entry-lite-2t0vcvd8.js}

@@ -1,3 +1,3 @@
 // @bun
 var n=Object.create;var{getPrototypeOf:o,defineProperty:e,getOwnPropertyNames:k,getOwnPropertyDescriptor:p}=Object,l=Object.prototype.hasOwnProperty;function m(a){return this[a]}var q,r,u=(a,b,c)=>{var d=a!=null&&typeof a==="object";if(d){var h=b?q??=new WeakMap:r??=new WeakMap,i=h.get(a);if(i)return i}c=a!=null?n(o(a)):{};let f=b||!a||!a.__esModule?e(c,"default",{value:a,enumerable:!0}):c;for(let g of k(a))if(!l.call(f,g))e(f,g,{get:m.bind(a,g),enumerable:!0});if(d)h.set(a,f);return f},v=(a)=>{var b=(j??=new WeakMap).get(a),c;if(b)return b;if(b=e({},"__esModule",{value:!0}),a&&typeof a==="object"||typeof a==="function"){for(var d of k(a))if(!l.call(b,d))e(b,d,{get:m.bind(a,d),enumerable:!(c=p(a,d))||c.enumerable})}return j.set(a,b),b},j,w=(a,b)=>()=>(b||a((b={exports:{}}).exports,b),b.exports);var s=(a)=>a;function t(a,b){this[a]=s.bind(null,b)}var x=(a,b)=>{for(var c in b)e(a,c,{get:b[c],enumerable:!0,configurable:!0,set:t.bind(b,c)})};var y=(a,b)=>()=>(a&&(b=a(a=0)),b);var z=import.meta.require;
-export{u as ck,v as dk,w as ek,x as fk,y as gk,z as hk};
+export{u as Fk,v as Gk,w as Hk,x as Ik,y as Jk,z as Kk};

package/bin/vm-hands/{vm-hands-entry-lite-0asdf4pm.js → vm-hands-entry-lite-2tcjqgfp.js}

@@ -1,5 +1,5 @@
 // @bun
-import{Gi as F}from"./vm-hands-entry-lite-4m40gwkf.js";import{Ji as T,Mi as d,Oi as p,Si as n,Ti as a}from"./vm-hands-entry-lite-4q8tsaqv.js";import{Yi as j,_i as v}from"./vm-hands-entry-lite-c01eyep6.js";import{wj as l}from"./vm-hands-entry-lite-k7wwza46.js";import{Pj as m,Qj as h}from"./vm-hands-entry-lite-7shpbsw8.js";import{hk as y}from"./vm-hands-entry-lite-g036gtem.js";import{spawnSync as Eq}from"child_process";import{dirname as I}from"path";import{spawn as r}from"child_process";import{accessSync as e,constants as qq}from"fs";import{basename as zq,join as Jq}from"path";var V=null;function O(q){if(V===q)V=null;if(q.exitCode===null&&q.signalCode===null)q.kill("SIGTERM")}var _=(q,z)=>{if(V)O(V);let Q=Jq(q,T);try{e(Q,qq.X_OK)}catch{return()=>{}}let J;try{J=r(Q,["--app",q,"--name",zq(q,".app"),"--permission",z==="screen"?"screen_recording":"accessibility"],{detached:!0,stdio:"ignore"})}catch{return()=>{}}return J.on("error",()=>{if(V===J)V=null}),J.once("exit",()=>{if(V===J)V=null}),J.unref(),V=J,()=>O(J)};import{chmodSync as Qq,existsSync as x,mkdirSync as Xq,readFileSync as Zq,realpathSync as k,renameSync as $q,statSync as G,writeFileSync as Kq}from"fs";import{dirname as P,isAbsolute as Rq,join as Vq,resolve as S,sep as W}from"path";function U(q=j()){return Vq(v(q),"reason","protected-path-grants.json")}var B=null;function Yq(q){let z=JSON.parse(q);if(!Array.isArray(z?.grants))return[];return z.grants.flatMap((Q)=>{let J=Q;return J&&typeof J.path==="string"&&Rq(J.path)&&(J.kind==="file"||J.kind==="folder")&&typeof J.grantedAt==="number"?[{path:J.path,kind:J.kind,grantedAt:J.grantedAt}]:[]})}function D(q=U()){try{let{mtimeMs:z}=G(q);if(B&&B.file===q&&B.mtimeMs===z)return B.grants;let Q=Yq(Zq(q,"utf8"));return B={file:q,mtimeMs:z,grants:Q},Q}catch{return[]}}function Bq(q,z){return q.kind==="file"?z===q.path:z===q.path||z.startsWith(`${q.path}${W}`)}function Dq(q,z){let Q=S(q);return D(z).some((J)=>Bq(J,Q))}function Sq(q,z){return F(q)&&!Dq(q,z)}function w(q,z){Xq(P(z),{recursive:!0,mode:448});let Q=`${z}.${process.pid}.tmp`;Kq(Q,`${JSON.stringify({version:1,grants:q},null,2)}
+import{Vi as F}from"./vm-hands-entry-lite-sex82vb1.js";import{$i as d,Yi as T,bj as p,fj as n,gj as a}from"./vm-hands-entry-lite-8zawqa9q.js";import{lj as j,nj as v}from"./vm-hands-entry-lite-fyvgav60.js";import{Lj as l}from"./vm-hands-entry-lite-aj1ccphg.js";import{ck as m,dk as h}from"./vm-hands-entry-lite-1gxktkpe.js";import{Kk as y}from"./vm-hands-entry-lite-2t0vcvd8.js";import{spawnSync as Eq}from"child_process";import{dirname as I}from"path";import{spawn as r}from"child_process";import{accessSync as e,constants as qq}from"fs";import{basename as zq,join as Jq}from"path";var V=null;function O(q){if(V===q)V=null;if(q.exitCode===null&&q.signalCode===null)q.kill("SIGTERM")}var _=(q,z)=>{if(V)O(V);let Q=Jq(q,T);try{e(Q,qq.X_OK)}catch{return()=>{}}let J;try{J=r(Q,["--app",q,"--name",zq(q,".app"),"--permission",z==="screen"?"screen_recording":"accessibility"],{detached:!0,stdio:"ignore"})}catch{return()=>{}}return J.on("error",()=>{if(V===J)V=null}),J.once("exit",()=>{if(V===J)V=null}),J.unref(),V=J,()=>O(J)};import{chmodSync as Qq,existsSync as x,mkdirSync as Xq,readFileSync as Zq,realpathSync as k,renameSync as $q,statSync as G,writeFileSync as Kq}from"fs";import{dirname as P,isAbsolute as Rq,join as Vq,resolve as S,sep as W}from"path";function U(q=j()){return Vq(v(q),"reason","protected-path-grants.json")}var B=null;function Yq(q){let z=JSON.parse(q);if(!Array.isArray(z?.grants))return[];return z.grants.flatMap((Q)=>{let J=Q;return J&&typeof J.path==="string"&&Rq(J.path)&&(J.kind==="file"||J.kind==="folder")&&typeof J.grantedAt==="number"?[{path:J.path,kind:J.kind,grantedAt:J.grantedAt}]:[]})}function D(q=U()){try{let{mtimeMs:z}=G(q);if(B&&B.file===q&&B.mtimeMs===z)return B.grants;let Q=Yq(Zq(q,"utf8"));return B={file:q,mtimeMs:z,grants:Q},Q}catch{return[]}}function Bq(q,z){return q.kind==="file"?z===q.path:z===q.path||z.startsWith(`${q.path}${W}`)}function Dq(q,z){let Q=S(q);return D(z).some((J)=>Bq(J,Q))}function Sq(q,z){return F(q)&&!Dq(q,z)}function w(q,z){Xq(P(z),{recursive:!0,mode:448});let Q=`${z}.${process.pid}.tmp`;Kq(Q,`${JSON.stringify({version:1,grants:q},null,2)}
 `,{mode:384}),Qq(Q,384),$q(Q,z),B=null}function b(q,z=U(),Q=Date.now()){if(!x(q))throw Error(`No file or folder at ${q}.`);let J=k(q),X=P(z);if(X===J||X.startsWith(`${J}${W}`)||J.startsWith(`${X}${W}`))throw Error("Reason's own configuration folder cannot be allowed.");let Z={path:J,kind:G(J).isDirectory()?"folder":"file",grantedAt:Q},$=D(z).filter((R)=>R.path!==J);return w([...$,Z],z),Z}function u(q,z=U()){let Q=x(q)?k(q):S(q),J=D(z),X=J.filter((Z)=>Z.path!==Q);if(X.length===J.length)return!1;return w(X,z),!0}function wq(q,z,Q){let J=z?"file-read* file-write*":"file-read*";return D(Q).filter((X)=>X.path===q||X.path.startsWith(`${q}${W}`)).map((X)=>`(allow ${J} (${X.kind==="file"?"literal":"subpath"} ${JSON.stringify(X.path)}))`)}var f=`Reason permissions
 
 Usage:
@@ -20,7 +20,7 @@ this Mac may open. Only you can change this list; Sessions cannot.
 allow asks for each missing one, or the one named. macOS cannot ask for Full
 Disk Access: allow disk opens its pane, shows the file to add in Finder and
 waits until the worker has it.
-`,M="x-apple.systempreferences:com.apple.preference.security",Nq="curl -fsSL https://reasonmachines.com/install.sh | bash",Hq=180000,Wq=2000,A=["screen","accessibility","disk"],L={screen:{label:"Screen & System Audio Recording",purpose:"desktop video, computer-use screenshots",level:"required",pane:`${M}?Privacy_ScreenCapture`},accessibility:{label:"Accessibility",purpose:"computer-use clicks and typing, desktop input",level:"required",pane:`${M}?Privacy_Accessibility`},disk:{label:"Full Disk Access",purpose:"Sessions in Desktop, Documents, Downloads, iCloud Drive and Mail",level:"recommended",pane:`${M}?Privacy_AllFiles`}};function s(q){return q.executable}function jq(q,z){if(q==="computer_use_identity_missing")return`Reason's background identity is not installed (${q}); reinstall Reason: ${Nq}`;if(q==="computer_use_identity_outdated")return`Reason's background identity is outdated (${p(z)??"unknown"}; this CLI is ${l}) (${q}); \`reason update\` installs this release's`;return`Reason's background identity cannot run computer use for this CLI (${q}); run the installed \`reason\``}function Cq(q=j()){let z=n(q);if(z.length>0)return{state:"ready",path:I(I(I(z[0]))),prefix:z};let Q=a(z,q)??"computer_use_identity_unavailable";return{state:Q,path:d(q),detail:jq(Q,q)}}function o(){return{identity:()=>Cq(),grants:(q)=>m(q),request:(q,z)=>h(q,z),worker:async()=>(await import("./status-s8ny6men.js")).connectionMacState(),open:(q)=>{Eq("/usr/bin/open",q,{stdio:"ignore",timeout:1e4})},tile:_,restartConnection:async()=>(await import("./connect-cli-j478km3s.js")).restartConnection(),sleep:(q)=>new Promise((z)=>setTimeout(z,q)),now:()=>Date.now()}}function c(q,z,Q){if(q.state!=="ready"||!z)return"unknown";return z[Q]?"granted":"missing"}async function i(q){let z=q.identity(),Q=z.state==="ready"?await q.grants(z.prefix):null,J=await q.worker(),X=J?s(J):null,Z=!X||J?.full_disk_access==="unknown"?"unknown":J?.full_disk_access==="granted"?"granted":"missing",$=(R,Y,K)=>{let{label:E,purpose:H,level:N}=L[R];return{id:R,label:E,purpose:H,level:N,state:Y,holder:K}};return{identity:{state:z.state,path:z.path,detail:z.state==="ready"?null:z.detail},worker_detail:X?null:"Full Disk Access is read from this computer's running worker; `reason connect` starts it.",permissions:[$("screen",c(z,Q,"screen"),z.path),$("accessibility",c(z,Q,"accessibility"),z.path),$("disk",Z,X)]}}function dq(q){let z=q.identity.state==="ready"?null:q.identity.state,Q=q.permissions.filter((Z)=>Z.state==="granted").length,J=[...z?[z]:[],...q.permissions.filter((Z)=>Z.state!=="granted"&&!(z&&Z.id!=="disk")).map((Z)=>`${Z.label} ${Z.state}`)],X=!z&&q.permissions.some((Z)=>Z.state==="missing");return`Permissions: ${Q} of ${q.permissions.length}${J.length>0?` (${J.join(", ")})`:""}`+(X?" \u2014 reason permissions allow":J.length>0?" \u2014 reason permissions":"")}function Uq(q){let z=[];if(q.identity.detail)z.push(q.identity.detail);z.push(`Reason: ${q.identity.path}`);let Q=q.permissions.find((J)=>J.id==="disk");z.push(Q?.holder?`Worker: ${Q.holder}`:`Worker: ${q.worker_detail}`),z.push("");for(let J of q.permissions){let X=`${J.label}${J.level==="recommended"?" (recommended)":""}`;z.push(`  ${J.id.padEnd(13)}  ${J.state.padEnd(7)}  ${X}: ${J.purpose}`)}if(q.permissions.some((J)=>J.state==="missing"))z.push("","Allow the missing ones: reason permissions allow");return`${z.join(`
+`,M="x-apple.systempreferences:com.apple.preference.security",Nq="curl -fsSL https://reasonmachines.com/install.sh | bash",Hq=180000,Wq=2000,A=["screen","accessibility","disk"],L={screen:{label:"Screen & System Audio Recording",purpose:"desktop video, computer-use screenshots",level:"required",pane:`${M}?Privacy_ScreenCapture`},accessibility:{label:"Accessibility",purpose:"computer-use clicks and typing, desktop input",level:"required",pane:`${M}?Privacy_Accessibility`},disk:{label:"Full Disk Access",purpose:"Sessions in Desktop, Documents, Downloads, iCloud Drive and Mail",level:"recommended",pane:`${M}?Privacy_AllFiles`}};function s(q){return q.executable}function jq(q,z){if(q==="computer_use_identity_missing")return`Reason's background identity is not installed (${q}); reinstall Reason: ${Nq}`;if(q==="computer_use_identity_outdated")return`Reason's background identity is outdated (${p(z)??"unknown"}; this CLI is ${l}) (${q}); \`reason update\` installs this release's`;return`Reason's background identity cannot run computer use for this CLI (${q}); run the installed \`reason\``}function Cq(q=j()){let z=n(q);if(z.length>0)return{state:"ready",path:I(I(I(z[0]))),prefix:z};let Q=a(z,q)??"computer_use_identity_unavailable";return{state:Q,path:d(q),detail:jq(Q,q)}}function o(){return{identity:()=>Cq(),grants:(q)=>m(q),request:(q,z)=>h(q,z),worker:async()=>(await import("./status-2m75kz1h.js")).connectionMacState(),open:(q)=>{Eq("/usr/bin/open",q,{stdio:"ignore",timeout:1e4})},tile:_,restartConnection:async()=>(await import("./connect-cli-ehxeg8m5.js")).restartConnection(),sleep:(q)=>new Promise((z)=>setTimeout(z,q)),now:()=>Date.now()}}function c(q,z,Q){if(q.state!=="ready"||!z)return"unknown";return z[Q]?"granted":"missing"}async function i(q){let z=q.identity(),Q=z.state==="ready"?await q.grants(z.prefix):null,J=await q.worker(),X=J?s(J):null,Z=!X||J?.full_disk_access==="unknown"?"unknown":J?.full_disk_access==="granted"?"granted":"missing",$=(R,Y,K)=>{let{label:E,purpose:H,level:N}=L[R];return{id:R,label:E,purpose:H,level:N,state:Y,holder:K}};return{identity:{state:z.state,path:z.path,detail:z.state==="ready"?null:z.detail},worker_detail:X?null:"Full Disk Access is read from this computer's running worker; `reason connect` starts it.",permissions:[$("screen",c(z,Q,"screen"),z.path),$("accessibility",c(z,Q,"accessibility"),z.path),$("disk",Z,X)]}}function dq(q){let z=q.identity.state==="ready"?null:q.identity.state,Q=q.permissions.filter((Z)=>Z.state==="granted").length,J=[...z?[z]:[],...q.permissions.filter((Z)=>Z.state!=="granted"&&!(z&&Z.id!=="disk")).map((Z)=>`${Z.label} ${Z.state}`)],X=!z&&q.permissions.some((Z)=>Z.state==="missing");return`Permissions: ${Q} of ${q.permissions.length}${J.length>0?` (${J.join(", ")})`:""}`+(X?" \u2014 reason permissions allow":J.length>0?" \u2014 reason permissions":"")}function Uq(q){let z=[];if(q.identity.detail)z.push(q.identity.detail);z.push(`Reason: ${q.identity.path}`);let Q=q.permissions.find((J)=>J.id==="disk");z.push(Q?.holder?`Worker: ${Q.holder}`:`Worker: ${q.worker_detail}`),z.push("");for(let J of q.permissions){let X=`${J.label}${J.level==="recommended"?" (recommended)":""}`;z.push(`  ${J.id.padEnd(13)}  ${J.state.padEnd(7)}  ${X}: ${J.purpose}`)}if(q.permissions.some((J)=>J.state==="missing"))z.push("","Allow the missing ones: reason permissions allow");return`${z.join(`
 `)}
 `}async function g(q,z){let Q=z.now()+Hq;for(;;){if(await q())return!0;if(z.now()>=Q)return!1;await z.sleep(Wq)}}async function Iq(q,z){let Q=z.host??o(),{io:J}=z,X=await i(Q),Z=X.permissions.filter((K)=>q.includes(K.id)&&K.state!=="granted");if(Z.length===0)return J.stdout.write(`Reason permissions: ${q.map((K)=>L[K].label).join(", ")} already allowed.
 `),0;let $=!1,R=!1,Y=Q.identity();for(let K of Z){let{label:E,pane:H}=L[K.id];if(K.id!=="disk"){if(Y.state!=="ready"){if(!$)J.stderr.write(`Reason permissions: ${Y.detail}
@@ -49,4 +49,4 @@ ${f}`),1;if(J.command==="help")return Q.stdout.write(f),0;if(J.command==="protec
 `).join(""):`No protected paths are allowed on this computer.
 `),0}catch(Q){return z.stderr.write(`${Q instanceof Error?Q.message:String(Q)}
 `),1}}
-export{Sq as pi,wq as qi,_ as ri,f as si,A as ti,s as ui,Cq as vi,i as wi,dq as xi,Uq as yi,Iq as zi,Mq as Ai,pq as Bi};
+export{Sq as Ei,wq as Fi,_ as Gi,f as Hi,A as Ii,s as Ji,Cq as Ki,i as Li,dq as Mi,Uq as Ni,Iq as Oi,Mq as Pi,pq as Qi};