@skylandnpm/octopus-proxy 0.1.39 → 0.1.41

package/dist/{chunk-BYXUILAK.js → chunk-WSL4LYYW.js}

@@ -12359,8 +12359,8 @@ var ScreenLockError = class extends Error {
 var nativeErrors = {
   permission: "\u8BF7\u5728 Proxy \u4E3B\u673A\u201C\u7CFB\u7EDF\u8BBE\u7F6E \u2192 \u9690\u79C1\u4E0E\u5B89\u5168\u6027 \u2192 \u8F85\u52A9\u529F\u80FD\u201D\u4E2D\u6388\u6743\u5B9E\u9645\u8FD0\u884C Proxy \u7684\u7A0B\u5E8F\uFF0C\u5E76\u91CD\u542F Proxy\u3002",
   session: "\u65E0\u6CD5\u8BBF\u95EE Proxy \u7528\u6237\u7684\u6D3B\u52A8\u56FE\u5F62\u4F1A\u8BDD\uFF1B\u4E0D\u652F\u6301\u767B\u5F55\u524D\u3001FileVault \u542F\u52A8\u89E3\u9501\u6216\u5207\u6362\u5230\u5176\u4ED6\u7528\u6237\u7684\u5C4F\u5E55\u3002",
-  focus: "\u5DF2\u5524\u9192\u9501\u5C4F\u754C\u9762\uFF0C\u4F46\u7CFB\u7EDF\u672A\u63D0\u4F9B\u53EF\u8BBF\u95EE\u7684\u5BC6\u7801\u8F93\u5165\u6846\u3002\u8BF7\u786E\u8BA4 Proxy \u670D\u52A1\u7684\u8F85\u52A9\u529F\u80FD\u6388\u6743\u5DF2\u751F\u6548\u5E76\u91CD\u542F\u670D\u52A1\uFF1B\u82E5\u4ECD\u5931\u8D25\uFF0C\u8BF7\u63D0\u4F9B macOS \u7248\u672C\u4EE5\u68C0\u67E5\u9501\u5C4F\u754C\u9762\u517C\u5BB9\u6027\u3002",
-  changed: "\u4E3B\u673A\u9501\u5C4F\u72B6\u6001\u6216\u5BC6\u7801\u8F93\u5165\u7126\u70B9\u5DF2\u53D8\u5316\uFF0C\u5DF2\u505C\u6B62\u8F93\u5165\uFF0C\u8BF7\u91CD\u8BD5\u3002",
+  focus: "\u65E0\u6CD5\u5411\u4E3B\u673A\u9501\u5C4F\u754C\u9762\u53D1\u9001\u5524\u9192\u6309\u952E\uFF0C\u5C1A\u672A\u8F93\u5165\u5BC6\u7801\u3002\u8BF7\u68C0\u67E5\u4E3B\u673A\u6D3B\u52A8\u56FE\u5F62\u4F1A\u8BDD\u540E\u91CD\u8BD5\u3002",
+  changed: "\u4E3B\u673A\u9501\u5C4F\u72B6\u6001\u6216\u6D3B\u52A8\u4F1A\u8BDD\u5DF2\u53D8\u5316\uFF0C\u5DF2\u505C\u6B62\u8F93\u5165\uFF0C\u8BF7\u91CD\u8BD5\u3002",
   timeout: "\u4E3B\u673A\u5C4F\u5E55\u4ECD\u9501\u5B9A\uFF0C\u7CFB\u7EDF\u672A\u63A5\u53D7\u89E3\u9501\u8F93\u5165\uFF1B\u8BF7\u68C0\u67E5\u8F85\u52A9\u529F\u80FD\u6743\u9650\u548C\u9501\u5C4F\u754C\u9762\u540E\u91CD\u8BD5\u3002",
   password: "\u4E3B\u673A\u5BC6\u7801\u683C\u5F0F\u65E0\u6548\u3002"
 };
@@ -12467,12 +12467,12 @@ var PlatformScreenLock = class {
       if (signal.aborted) throw new ScreenLockError("\u8FDE\u63A5\u5DF2\u5173\u95ED\uFF0C\u5C4F\u5E55\u89E3\u9501\u5DF2\u53D6\u6D88\u3002");
     };
     check();
-    if (!password || Buffer.byteLength(password) > 1024 || /[\x00-\x1f\x7f]/.test(password)) throw new ScreenLockError("\u4E3B\u673A\u5BC6\u7801\u683C\u5F0F\u65E0\u6548\u3002");
-    if (Date.now() < this.blockedUntil) throw new ScreenLockError("\u5BC6\u7801\u9A8C\u8BC1\u5931\u8D25\u6B21\u6570\u8FC7\u591A\uFF0C\u8BF7\u7B49\u5F85 30 \u79D2\u540E\u91CD\u8BD5\u3002");
     const status = await this.status();
     check();
     if (!status.locked) return status;
     if (!status.canUnlock) throw new ScreenLockError(status.message ?? "\u4E3B\u673A\u4E0D\u652F\u6301\u5C4F\u5E55\u89E3\u9501\u3002");
+    if (!password || Buffer.byteLength(password) > 1024 || /[\x00-\x1f\x7f]/.test(password)) throw new ScreenLockError("\u4E3B\u673A\u5BC6\u7801\u683C\u5F0F\u65E0\u6548\u3002");
+    if (Date.now() < this.blockedUntil) throw new ScreenLockError("\u5BC6\u7801\u9A8C\u8BC1\u5931\u8D25\u6B21\u6570\u8FC7\u591A\uFF0C\u8BF7\u7B49\u5F85 30 \u79D2\u540E\u91CD\u8BD5\u3002");
     let valid;
     try {
       valid = await this.authenticate(this.stateDirectory, this.account.username, password);
@@ -12489,6 +12489,10 @@ var PlatformScreenLock = class {
     }
     this.failures = 0;
     if (this.system === "darwin") {
+      const current = await this.status();
+      check();
+      if (!current.locked) return current;
+      if (!current.canUnlock) throw new ScreenLockError(current.message ?? "\u4E3B\u673A\u4E0D\u652F\u6301\u5C4F\u5E55\u89E3\u9501\u3002");
       const helper = await this.macHelper();
       check();
       const bytes = Buffer.from(password, "utf8"), input = Buffer.alloc(bytes.length + 2);
@@ -12507,7 +12511,8 @@ var PlatformScreenLock = class {
     }
     const session = await this.linuxSession(signal);
     check();
-    if (session.locked) await this.execute("loginctl", ["--no-ask-password", "unlock-session", session.id], void 0, signal);
+    if (!session.locked) return { ...status, locked: false };
+    await this.execute("loginctl", ["--no-ask-password", "unlock-session", session.id], void 0, signal);
     for (let i = 0; i < 20; i++) {
       check();
       const current = await this.linuxSession(signal);

package/dist/cli.js

@@ -28,7 +28,7 @@ import {
   runDaemon,
   supportedPlatform,
   systemdUnitPath
-} from "./chunk-BYXUILAK.js";
+} from "./chunk-WSL4LYYW.js";
 
 // src/cli.ts
 import { spawn as spawn2 } from "node:child_process";

package/dist/main.js

@@ -2,7 +2,7 @@
 import {
   ConfigError,
   runDaemon
-} from "./chunk-BYXUILAK.js";
+} from "./chunk-WSL4LYYW.js";
 
 // src/main.ts
 runDaemon(process.env.OCTOPUS_PROXY_CONFIG ?? "proxy.json").catch((error) => {

package/native/desktop-macos.m

@@ -29,6 +29,39 @@ static NSDictionary *displayInfo(CGDirectDisplayID displayId) {
            @"width": @(CGDisplayPixelsWide(displayId)), @"height": @(CGDisplayPixelsHigh(displayId))};
 }
 
+static BOOL saveImage(CGImageRef image, NSString *path) {
+  if (!image) return NO;
+  CGImageDestinationRef destination = CGImageDestinationCreateWithURL((__bridge CFURLRef)[NSURL fileURLWithPath:path], CFSTR("public.png"), 1, NULL);
+  if (!destination) return NO;
+  CGImageDestinationAddImage(destination, image, NULL);
+  BOOL saved = CGImageDestinationFinalize(destination);
+  CFRelease(destination);
+  return saved;
+}
+
+static void finishImage(BOOL saved) {
+  dispatch_async(dispatch_get_main_queue(), ^{
+    if (finished) return;
+    if (saved) { resultCode = 0; finished = YES; }
+    else fail(@"无法保存桌面 PNG 截图，请检查 Proxy 状态目录。" );
+  });
+}
+
+#if __MAC_OS_X_VERSION_MAX_ALLOWED >= 140000
+static void captureImage(SCContentFilter *filter, SCStreamConfiguration *configuration, NSString *path) API_AVAILABLE(macos(14.0));
+static void captureImage(SCContentFilter *filter, SCStreamConfiguration *configuration, NSString *path) {
+  // A stream may start successfully without delivering frames while the screen
+  // is locked. The screenshot API completes a single capture without that wait.
+  [SCScreenshotManager captureImageWithFilter:filter configuration:configuration completionHandler:^(CGImageRef image, NSError *error) {
+    if (error || !image) {
+      dispatch_async(dispatch_get_main_queue(), ^{ if (!finished) fail(permissionMessage()); });
+      return;
+    }
+    finishImage(saveImage(image, path));
+  }];
+}
+#endif
+
 @interface DesktopFrame : NSObject <SCStreamOutput, SCStreamDelegate>
 @property(nonatomic, strong) SCStream *stream;
 @property(nonatomic, copy) NSString *path;
@@ -49,23 +82,11 @@ static NSDictionary *displayInfo(CGDirectDisplayID displayId) {
   self.received = YES;
   CGImageRef image = NULL;
   OSStatus conversion = VTCreateCGImageFromCVPixelBuffer(pixel, NULL, &image);
-  BOOL saved = NO;
-  if (conversion == noErr && image) {
-    CGImageDestinationRef destination = CGImageDestinationCreateWithURL((__bridge CFURLRef)[NSURL fileURLWithPath:self.path], CFSTR("public.png"), 1, NULL);
-    if (destination) {
-      CGImageDestinationAddImage(destination, image, NULL);
-      saved = CGImageDestinationFinalize(destination);
-      CFRelease(destination);
-    }
-    CGImageRelease(image);
-  }
-  [stream stopCaptureWithCompletionHandler:^(NSError *error) {
-    dispatch_async(dispatch_get_main_queue(), ^{
-      if (finished) return;
-      if (saved) { resultCode = 0; finished = YES; }
-      else fail(@"无法保存桌面 PNG 截图，请检查 Proxy 状态目录。" );
-    });
-  }];
+  BOOL saved = conversion == noErr && saveImage(image, self.path);
+  if (image) CGImageRelease(image);
+  // Stopping a stream is cleanup; a saved PNG must not depend on its callback.
+  [stream stopCaptureWithCompletionHandler:nil];
+  finishImage(saved);
 }
 @end
 
@@ -121,6 +142,12 @@ int main(int argc, const char *argv[]) {
         configuration.showsCursor = YES;
         configuration.queueDepth = 3;
         configuration.minimumFrameInterval = CMTimeMake(1, 30);
+#if __MAC_OS_X_VERSION_MAX_ALLOWED >= 140000
+        if (@available(macOS 14.0, *)) {
+          captureImage(filter, configuration, frame.path);
+          return;
+        }
+#endif
         frame.stream = [[SCStream alloc] initWithFilter:filter configuration:configuration delegate:frame];
         NSError *outputError = nil;
         if (![frame.stream addStreamOutput:frame type:SCStreamOutputTypeScreen sampleHandlerQueue:dispatch_queue_create("octopus.desktop.frame", DISPATCH_QUEUE_SERIAL) error:&outputError]) {

package/native/screen-unlock-macos.m

@@ -57,182 +57,41 @@ static pid_t loginWindowPID(void) {
   return cached;
 }
 
-static CFTypeRef copyAttribute(AXUIElementRef element, CFStringRef attribute) {
-  CFTypeRef value = NULL;
-  AXUIElementSetMessagingTimeout(element, 0.1);
-  if (AXUIElementCopyAttributeValue(element, attribute, &value) != kAXErrorSuccess) {
-    if (value) CFRelease(value);
-    return NULL;
-  }
-  return value;
-}
-
-static BOOL isSecureField(AXUIElementRef field) {
-  if (!field || CFGetTypeID(field) != AXUIElementGetTypeID()) return NO;
-  pid_t pid = 0;
-  if (AXUIElementGetPid(field, &pid) != kAXErrorSuccess || !isLoginWindow(pid)) return NO;
-  CFTypeRef role = copyAttribute(field, kAXRoleAttribute);
-  CFTypeRef subrole = copyAttribute(field, kAXSubroleAttribute);
-  BOOL secure = (subrole && CFEqual(subrole, kAXSecureTextFieldSubrole)) ||
-      (role && CFEqual(role, kAXSecureTextFieldSubrole));
-  if (role) CFRelease(role);
-  if (subrole) CFRelease(subrole);
-  CFTypeRef enabled = copyAttribute(field, kAXEnabledAttribute);
-  if (enabled && CFEqual(enabled, kCFBooleanFalse)) secure = NO;
-  if (enabled) CFRelease(enabled);
-  CFTypeRef hidden = copyAttribute(field, CFSTR("AXHidden"));
-  if (hidden && CFEqual(hidden, kCFBooleanTrue)) secure = NO;
-  if (hidden) CFRelease(hidden);
-  return secure;
-}
-
-static AXUIElementRef copySecureFocus(AXUIElementRef root) {
-  CFTypeRef focused = copyAttribute(root, kAXFocusedUIElementAttribute);
-  if (focused && isSecureField((AXUIElementRef)focused)) return (AXUIElementRef)focused;
-  if (focused) CFRelease(focused);
-  return NULL;
-}
-
-static void collectSecureFields(AXUIElementRef root, CFMutableArrayRef fields,
-    CFMutableSetRef visited, int depth, CFAbsoluteTime deadline) {
-  if (!root || CFGetTypeID(root) != AXUIElementGetTypeID() || depth > 10 ||
-      CFSetGetCount(visited) >= 128 || CFAbsoluteTimeGetCurrent() >= deadline || CFSetContainsValue(visited, root)) return;
-  CFSetAddValue(visited, root);
-  if (isSecureField(root)) { CFArrayAppendValue(fields, root); return; }
-  // Some loginwindow versions expose windows separately from AXChildren.
-  CFStringRef attributes[] = { kAXChildrenAttribute, kAXWindowsAttribute };
-  for (int i = 0; i < 2; i++) {
-    CFTypeRef children = copyAttribute(root, attributes[i]);
-    if (children && CFGetTypeID(children) == CFArrayGetTypeID()) {
-      for (CFIndex j = 0; j < CFArrayGetCount(children); j++)
-        collectSecureFields((AXUIElementRef)CFArrayGetValueAtIndex(children, j), fields, visited, depth + 1, deadline);
-    }
-    if (children) CFRelease(children);
-  }
-}
-
-static CFArrayRef copySecureFields(AXUIElementRef app) {
-  CFMutableArrayRef fields = CFArrayCreateMutable(NULL, 0, &kCFTypeArrayCallBacks);
-  CFMutableSetRef visited = CFSetCreateMutable(NULL, 0, &kCFTypeSetCallBacks);
-  collectSecureFields(app, fields, visited, 0, CFAbsoluteTimeGetCurrent() + 2);
-  CFRelease(visited);
-  return fields;
-}
-
-static AXUIElementRef passwordFocus(void) {
-  AXUIElementRef system = AXUIElementCreateSystemWide();
-  AXUIElementRef field = copySecureFocus(system);
-  CFRelease(system);
-  if (field) return field;
-  pid_t pid = loginWindowPID();
-  if (!pid) return NULL;
-  AXUIElementRef app = AXUIElementCreateApplication(pid);
-  field = copySecureFocus(app);
-  if (!field) {
-    // A locked console can lack the system-wide focused element while the
-    // password field itself or loginwindow still reports its local focus.
-    CFArrayRef fields = copySecureFields(app);
-    for (CFIndex i = 0; i < CFArrayGetCount(fields); i++) {
-      AXUIElementRef candidate = (AXUIElementRef)CFArrayGetValueAtIndex(fields, i);
-      CFTypeRef focused = copyAttribute(candidate, kAXFocusedAttribute);
-      BOOL active = focused && CFEqual(focused, kCFBooleanTrue);
-      if (focused) CFRelease(focused);
-      if (!active) continue;
-      if (field) { CFRelease(field); field = NULL; break; }
-      field = (AXUIElementRef)CFRetain(candidate);
-    }
-    CFRelease(fields);
-  }
-  CFRelease(app);
-  return field;
-}
-
-static AXUIElementRef focusPasswordField(void) {
-  BOOL locked = NO;
-  if (!lockState(&locked) || !locked) return NULL;
-  AXUIElementRef focused = passwordFocus();
-  if (focused) return focused;
-  pid_t pid = loginWindowPID();
-  if (!pid) return NULL;
-  AXUIElementRef app = AXUIElementCreateApplication(pid);
-  CFArrayRef fields = copySecureFields(app);
-  CFRelease(app);
-  // Never guess between multiple password fields or use a generic text field.
-  if (CFArrayGetCount(fields) != 1) { CFRelease(fields); return NULL; }
-  AXUIElementRef field = (AXUIElementRef)CFArrayGetValueAtIndex(fields, 0);
-  if (!lockState(&locked) || !locked || !isSecureField(field)) { CFRelease(fields); return NULL; }
-  AXError activated = AXUIElementSetAttributeValue(field, kAXFocusedAttribute, kCFBooleanTrue);
-  if (activated != kAXErrorSuccess) AXUIElementPerformAction(field, kAXPressAction);
-  usleep(50000);
-  focused = passwordFocus();
-  if (focused && !CFEqual(field, focused)) { CFRelease(focused); focused = NULL; }
-  CFRelease(fields);
-  return focused;
-}
-
-static BOOL stillFocused(AXUIElementRef field) {
-  BOOL locked = NO;
-  if (!lockState(&locked) || !locked || !isSecureField(field)) return NO;
-  AXUIElementRef system = AXUIElementCreateSystemWide();
-  AXUIElementRef current = copySecureFocus(system);
-  CFRelease(system);
-  if (!current) {
-    pid_t pid = 0;
-    if (AXUIElementGetPid(field, &pid) != kAXErrorSuccess) return NO;
-    AXUIElementRef app = AXUIElementCreateApplication(pid);
-    current = copySecureFocus(app);
-    CFRelease(app);
-  }
-  BOOL same = current && CFEqual(current, field);
-  if (current) { CFRelease(current); return same; }
-  // Avoid traversing the entire AX tree per character on systems that only
-  // expose field-local focus. A false or unavailable focus is never accepted.
-  CFTypeRef focused = copyAttribute(field, kAXFocusedAttribute);
-  same = focused && CFEqual(focused, kCFBooleanTrue);
-  if (focused) CFRelease(focused);
-  return same;
-}
-
 static BOOL key(CGKeyCode code, CGEventFlags flags, const UniChar *text, size_t length) {
   CGEventRef down = CGEventCreateKeyboardEvent(NULL, code, true);
   CGEventRef up = CGEventCreateKeyboardEvent(NULL, code, false);
   if (!down || !up) { if (down) CFRelease(down); if (up) CFRelease(up); return NO; }
   CGEventSetFlags(down, flags); CGEventSetFlags(up, flags);
   if (text) { CGEventKeyboardSetUnicodeString(down, length, text); CGEventKeyboardSetUnicodeString(up, length, text); }
-  CGEventPost(kCGHIDEventTap, down); CGEventPost(kCGHIDEventTap, up);
+  CGEventPost(kCGHIDEventTap, down);
+  usleep(50000);
+  CGEventPost(kCGHIDEventTap, up);
   CFRelease(down); CFRelease(up);
-  usleep(20000);
+  usleep(50000);
   return YES;
 }
 
+// Space reveals and focuses the locked console's password prompt. Allow the
+// transition to finish before typing; no Accessibility discovery is required.
+static BOOL wakePasswordPrompt(void) {
+  BOOL locked = NO;
+  if (!lockState(&locked)) return NO;
+  if (!locked) return YES;
+  if (!key(49, 0, NULL, 0)) return NO;
+  usleep(1000000);
+  return YES;
+}
+
+static BOOL lockedKey(CGKeyCode code, CGEventFlags flags, const UniChar *text, size_t length) {
+  BOOL locked = NO;
+  return lockState(&locked) && locked && key(code, flags, text, length);
+}
+
 static void printDiagnostics(BOOL locked) {
-  // Read-only diagnostics deliberately omit window titles, field values, and
-  // screenshots. Running this command never wakes, focuses, or types anything.
-  pid_t pid = loginWindowPID();
-  AXUIElementRef system = AXUIElementCreateSystemWide();
-  CFTypeRef global = NULL;
-  AXError globalError = AXUIElementCopyAttributeValue(system, kAXFocusedUIElementAttribute, &global);
-  CFRelease(system);
-  BOOL globalSecure = global && isSecureField((AXUIElementRef)global);
-  if (global) CFRelease(global);
-  AXError appError = kAXErrorNoValue;
-  CFIndex count = 0;
-  BOOL appSecure = NO;
-  if (pid && AXIsProcessTrusted()) {
-    AXUIElementRef app = AXUIElementCreateApplication(pid);
-    AXUIElementSetMessagingTimeout(app, 0.1);
-    CFTypeRef local = NULL;
-    appError = AXUIElementCopyAttributeValue(app, kAXFocusedUIElementAttribute, &local);
-    appSecure = local && isSecureField((AXUIElementRef)local);
-    if (local) CFRelease(local);
-    CFArrayRef fields = copySecureFields(app);
-    count = CFArrayGetCount(fields);
-    CFRelease(fields); CFRelease(app);
-  }
-  printf("{\"locked\":%s,\"canUnlock\":%s,\"loginwindowFound\":%s,\"globalFocusError\":%d,\"globalSecureFocus\":%s,\"applicationFocusError\":%d,\"applicationSecureFocus\":%s,\"secureFieldCount\":%ld}",
+  // Read-only; no wake, focus, field contents, screenshots, or input events.
+  printf("{\"locked\":%s,\"canUnlock\":%s,\"loginwindowFound\":%s,\"inputMethod\":\"space-password\"}",
     locked ? "true" : "false", AXIsProcessTrusted() && CGPreflightPostEventAccess() ? "true" : "false",
-    pid ? "true" : "false", globalError, globalSecure ? "true" : "false", appError,
-    appSecure ? "true" : "false", (long)count);
+    loginWindowPID() ? "true" : "false");
 }
 
 int main(int argc, const char *argv[]) {
@@ -252,42 +111,25 @@ int main(int argc, const char *argv[]) {
     NSString *password = [[NSString alloc] initWithBytes:bytes length:count encoding:NSUTF8StringEncoding];
     wipe(bytes, sizeof(bytes));
     if (!password || [password rangeOfCharacterFromSet:NSCharacterSet.controlCharacterSet].location != NSNotFound) return fail("password");
-    // A non-text key wakes the password prompt. Never type a secret into an
-    // arbitrary app, username field, clipboard, or a blind screen coordinate.
-    if (!lockState(&locked) || !locked) return fail("changed");
-    if (!key(56, 0, NULL, 0)) return fail("focus");
-    AXUIElementRef field = NULL;
-    field = focusPasswordField();
-    // Shift wakes the display but can leave the clock/wallpaper layer visible.
-    // Space reveals the sign-in controls without submitting a password.
-    if (!field) {
-      if (!lockState(&locked) || !locked) return fail("changed");
-      if (!key(49, 0, NULL, 0)) return fail("focus");
-      NSDate *deadline = [NSDate dateWithTimeIntervalSinceNow:6];
-      while (!field && deadline.timeIntervalSinceNow > 0) {
-        usleep(100000);
-        field = focusPasswordField();
-      }
-    }
-    if (!field) return fail("focus");
-    if (!stillFocused(field) || !key(0, kCGEventFlagMaskCommand, NULL, 0) ||
-        !stillFocused(field) || !key(51, 0, NULL, 0)) { CFRelease(field); return fail("changed"); }
+    if (!wakePasswordPrompt()) return fail(lockState(&locked) ? "focus" : "session");
+    if (!lockState(&locked)) return fail("session");
+    // Saver dismissal, Touch ID or a manual unlock may finish during wake.
+    if (!locked) { printStatus(NO); return 0; }
     UniChar characters[1024] = {0};
     NSUInteger length = password.length;
-    if (length > 1024) { CFRelease(field); return fail("password"); }
+    if (length > 1024) return fail("password");
     [password getCharacters:characters range:NSMakeRange(0, length)];
     password = nil;
     BOOL sent = YES;
-    // One Unicode scalar per event avoids event-string truncation. Check the
-    // secure loginwindow focus and console lock immediately before each event.
+    // One Unicode scalar per event avoids event-string truncation. Verify the
+    // same user's locked console immediately before every password event.
     for (NSUInteger i = 0; i < length;) {
       NSUInteger units = CFStringIsSurrogateHighCharacter(characters[i]) && i + 1 < length && CFStringIsSurrogateLowCharacter(characters[i + 1]) ? 2 : 1;
-      if (!stillFocused(field) || !key(0, 0, &characters[i], units)) { sent = NO; break; }
+      if (!lockedKey(0, 0, &characters[i], units)) { sent = NO; break; }
       i += units;
     }
     wipe(characters, sizeof(characters));
-    if (!sent || !stillFocused(field) || !key(36, 0, NULL, 0)) { CFRelease(field); return fail("changed"); }
-    CFRelease(field);
+    if (!sent || !lockedKey(36, 0, NULL, 0)) return fail("changed");
     for (int i = 0; i < 50; i++) {
       usleep(100000);
       if (!lockState(&locked)) return fail("session");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skylandnpm/octopus-proxy",
-  "version": "0.1.39",
+  "version": "0.1.41",
   "type": "module",
   "description": "Octopus host proxy: OpenCode, Codex, ZCode and Pi adapters with service installer CLI",
   "bin": {