@skylandnpm/octopus-proxy 0.1.55 → 0.1.58

package/dist/{chunk-NJNANA6A.js → chunk-AOBRAQCJ.js}

@@ -12,7 +12,7 @@ import {
   probeRemote,
   remoteSessionBudget,
   z
-} from "./chunk-XIJKEY4L.js";
+} from "./chunk-GS3Q6EU5.js";
 
 // ../../node_modules/.pnpm/ajv@8.17.1/node_modules/ajv/dist/compile/codegen/code.js
 var require_code = __commonJS({
@@ -8830,6 +8830,33 @@ var SecureChat = class {
 import { randomUUID as randomUUID8 } from "node:crypto";
 import { execFile as execFile3 } from "node:child_process";
 import { promisify as promisify3 } from "node:util";
+
+// src/reasoning.ts
+function reasoningLevels(value) {
+  if (!Array.isArray(value)) return [];
+  return [...new Set(value.flatMap((entry) => {
+    const level = typeof entry === "string" ? entry : entry && typeof entry === "object" ? entry.value ?? entry.reasoningEffort ?? entry.id : void 0;
+    return typeof level === "string" && level.trim() ? [level.trim()] : [];
+  }))];
+}
+function defaultReasoningLevel(levels) {
+  if (levels.includes("medium")) return "medium";
+  const order = ["none", "off", "nothink", "minimal", "low", "medium", "high", "xhigh", "max", "ultra"];
+  const active = levels.filter((level) => !["none", "off", "nothink"].includes(level));
+  const choices = (active.length ? active : levels).slice().sort((a, b) => {
+    const left = order.indexOf(a), right = order.indexOf(b);
+    return left < 0 || right < 0 ? 0 : left - right;
+  });
+  return choices[Math.floor((choices.length - 1) / 2)];
+}
+function selectedReasoningLevel(payload, parameter) {
+  if (typeof payload.reasoningLevel !== "string" || !payload.reasoningLevel) return void 0;
+  if (payload.reasoningParameter !== void 0 && payload.reasoningParameter !== parameter)
+    throw new Error(`Reasoning parameter must be ${parameter} for this tool; refresh the model configuration`);
+  return payload.reasoningLevel;
+}
+
+// src/proxy-snapshot.ts
 var execute2 = promisify3(execFile3);
 function record(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
@@ -8844,7 +8871,8 @@ function publicModels(value) {
     for (const modelValue of Object.values(record(provider.models))) {
       const model = record(modelValue);
       if (typeof model.id !== "string") continue;
-      result.push({ id: `${provider.id}/${model.id}`, name: typeof model.name === "string" ? model.name : model.id, isDefault: model.isDefault === true });
+      const levels = reasoningLevels(model.reasoningLevels);
+      result.push({ id: `${provider.id}/${model.id}`, name: typeof model.name === "string" ? model.name : model.id, isDefault: model.isDefault === true, ...Array.isArray(model.reasoningLevels) ? { reasoningLevels: levels } : {}, ...typeof model.reasoningParameter === "string" ? { reasoningParameter: model.reasoningParameter } : {} });
       if (result.length >= 500) return result;
     }
   }
@@ -10764,6 +10792,8 @@ var OpenCodeAdapter = class {
       const input = payload.model;
       model = { providerID: input.providerID, id: input.modelID ?? input.id, ...input.variant ? { variant: input.variant } : {} };
     } else throw new Error("Invalid model identifier");
+    const level = selectedReasoningLevel(payload, "model.variant");
+    if (level) model.variant = level;
     await this.data(project, "POST", `${base}/model`, { model });
   }
   async models(project) {
@@ -10777,7 +10807,7 @@ var OpenCodeAdapter = class {
       const modelId = model.id ?? model.modelID;
       if (typeof model.providerID !== "string" || typeof modelId !== "string") continue;
       const provider = providers.get(model.providerID) ?? { id: model.providerID, models: {} };
-      provider.models[modelId] = { ...model, id: modelId, isDefault: configured ? configured === `${model.providerID}/${modelId}` : model.isDefault === true };
+      provider.models[modelId] = { ...model, id: modelId, reasoningParameter: "model.variant", reasoningLevels: reasoningLevels(model.variants), isDefault: configured ? configured === `${model.providerID}/${modelId}` : model.isDefault === true };
       providers.set(model.providerID, provider);
     }
     return redact({ providers: [...providers.values()] });
@@ -12103,7 +12133,7 @@ var CodexAdapter = class {
       const config = await rpc.request("config/read", { cwd: await this.workspace.root(project), includeLayers: false }).catch(() => void 0);
       const configured = typeof config?.config?.model === "string" ? config.config.model.trim() : void 0;
       if (configured && !models.some((entry) => (entry.model ?? entry.id) === configured)) models.push({ id: configured, model: configured, displayName: configured });
-      return { providers: [{ id: "codex", models: Object.fromEntries(models.map((entry) => [entry.model ?? entry.id, { id: entry.model ?? entry.id, name: entry.displayName ?? entry.id, isDefault: configured ? (entry.model ?? entry.id) === configured : entry.isDefault === true }])) }] };
+      return { providers: [{ id: "codex", models: Object.fromEntries(models.map((entry) => [entry.model ?? entry.id, { id: entry.model ?? entry.id, name: entry.displayName ?? entry.id, ...entry.supportedReasoningEfforts ? { reasoningParameter: "effort", reasoningLevels: reasoningLevels(entry.supportedReasoningEfforts) } : {}, isDefault: configured ? (entry.model ?? entry.id) === configured : entry.isDefault === true }])) }] };
     }
     if (op === "sessions.list") {
       const index = await this.index(project);
@@ -12164,7 +12194,8 @@ var CodexAdapter = class {
       if (!input.length) throw new Error("Message or attachments required");
       const selectedModel = p.model;
       const model = selectedModel?.providerID === "codex" && typeof selectedModel.modelID === "string" ? selectedModel.modelID : void 0;
-      const result = await rpc.request("turn/start", { threadId: id, input, ...model ? { model } : {} });
+      const effort = selectedReasoningLevel(p, "effort");
+      const result = await rpc.request("turn/start", { threadId: id, input, ...model ? { model } : {}, ...effort ? { effort } : {} });
       this.activeTurns.set(id, result.turn.id);
       return result;
     }
@@ -12411,7 +12442,7 @@ var ZcodeAdapter = class {
         const providers = /* @__PURE__ */ new Map();
         for (const entry of model.available) {
           const provider = providers.get(entry.ref.providerId) ?? { id: entry.ref.providerId, name: entry.providerLabel, models: /* @__PURE__ */ Object.create(null) };
-          provider.models[entry.ref.modelId] = { id: entry.ref.modelId, name: entry.label, isDefault: entry.ref.providerId === model.current?.providerId && entry.ref.modelId === model.current?.modelId };
+          provider.models[entry.ref.modelId] = { id: entry.ref.modelId, name: entry.label, reasoningParameter: "model.options.reasoningLevel", reasoningLevels: reasoningLevels(entry.reasoning?.levels), isDefault: entry.ref.providerId === model.current?.providerId && entry.ref.modelId === model.current?.modelId };
           providers.set(provider.id, provider);
         }
         return { providers: [...providers.values()] };
@@ -12487,7 +12518,18 @@ var ZcodeAdapter = class {
       }
       if (!lines.length) throw new Error("Message or attachments required");
       const selected = p.model;
-      if (selected?.providerID && selected.modelID) await rpc.request("session/setModel", { sessionId: id, model: { providerId: selected.providerID, modelId: selected.modelID } });
+      if (selected?.providerID && selected.modelID) {
+        let level = selectedReasoningLevel(p, "model.options.reasoningLevel");
+        if (!level) {
+          const snapshot = await rpc.request("session/read", { sessionId: id });
+          const entry = snapshot.settings?.model.available.find((entry2) => entry2.ref.providerId === selected.providerID && entry2.ref.modelId === selected.modelID);
+          level = defaultReasoningLevel(reasoningLevels(entry?.reasoning?.levels));
+        }
+        await rpc.request("session/setModel", { sessionId: id, model: { providerId: selected.providerID, modelId: selected.modelID, ...level ? { options: { reasoningLevel: level } } : {} } });
+      } else if (typeof p.reasoningLevel === "string" && p.reasoningLevel) {
+        const level = selectedReasoningLevel(p, "thoughtLevel");
+        await rpc.request("session/setThoughtLevel", { sessionId: id, thoughtLevel: level });
+      }
       return await rpc.request("session/send", { sessionId: id, content: lines.join("\n") });
     }
     if (op === "sessions.abort") {
@@ -12749,7 +12791,8 @@ var PiAdapter = class {
       const providers = /* @__PURE__ */ new Map();
       for (const model of models) {
         const provider = providers.get(model.provider) ?? { id: model.provider, models: /* @__PURE__ */ Object.create(null) };
-        provider.models[model.id] = { id: model.id, name: model.name ?? model.id, isDefault: state?.model?.provider === model.provider && state.model.id === model.id };
+        const levels = model.reasoning ? ["off", "minimal", "low", "medium", "high", ...["xhigh", "max"].filter((level) => model.thinkingLevelMap?.[level] != null)].filter((level) => model.thinkingLevelMap?.[level] !== null) : [];
+        provider.models[model.id] = { id: model.id, name: model.name ?? model.id, reasoningParameter: "level", reasoningLevels: reasoningLevels(levels), isDefault: state?.model?.provider === model.provider && state.model.id === model.id };
         providers.set(model.provider, provider);
       }
       return { providers: [...providers.values()] };
@@ -12850,7 +12893,9 @@ var PiAdapter = class {
       }
       if (!lines.length && !images.length) throw new Error("Message or attachments required");
       const model = p.model;
+      const level = selectedReasoningLevel(p, "level");
       if (model && typeof model.providerID === "string" && typeof model.modelID === "string") await rpc.request("set_model", { provider: model.providerID, modelId: model.modelID });
+      if (level) await rpc.request("set_thinking_level", { level });
       const result = await rpc.request("prompt", { message: lines.join("\n"), ...images.length ? { images } : {} });
       session.time.updated = Date.now();
       if (session.title === "\u65B0\u4EFB\u52A1" && typeof p.text === "string" && p.text.trim()) session.title = p.text.trim().slice(0, 100);

package/dist/{chunk-XIJKEY4L.js → chunk-GS3Q6EU5.js}

@@ -4257,7 +4257,7 @@ var PlatformDesktop = class {
       await mkdir(this.stateDirectory, { recursive: true, mode: 448 });
       const target = join(this.stateDirectory, "octopus-desktop-capture");
       const source = fileURLToPath(new URL("../native/desktop-macos.m", import.meta.url));
-      const flags = ["-O2", "-fobjc-arc", "-mmacosx-version-min=12.3", "-framework", "Foundation", "-framework", "AppKit", "-framework", "ScreenCaptureKit", "-framework", "CoreMedia", "-framework", "CoreVideo", "-framework", "VideoToolbox", "-framework", "ImageIO"];
+      const flags = ["-O2", "-fobjc-arc", "-mmacosx-version-min=12.3", "-framework", "Foundation", "-framework", "AppKit", "-framework", "ScreenCaptureKit", "-framework", "CoreMedia", "-framework", "CoreVideo", "-framework", "VideoToolbox", "-framework", "ImageIO", "-framework", "IOKit"];
       const fingerprint = createHash("sha256").update(await readFile(source)).update(JSON.stringify([process.arch, flags])).digest("hex");
       const stamp = `${target}.sha256`, existing = await stat(target).catch(() => null);
       if (existing?.isFile() && (existing.mode & 63) === 0 && await readFile(stamp, "utf8").catch(() => "") === fingerprint) return target;
@@ -4465,7 +4465,7 @@ async function ensureRemoteHelper(stateDirectory) {
   const source = fileURLToPath2(new URL(mac ? "../native/remote-macos.m" : "../native/remote-x11.c", import.meta.url));
   const target = join2(stateDirectory, "octopus-remote-desktop");
   const stamp = `${target}.sha256`;
-  const flags = mac ? ["-O2", "-fobjc-arc", "-mmacosx-version-min=12.3", "-framework", "Foundation", "-framework", "AppKit", "-framework", "ScreenCaptureKit", "-framework", "CoreMedia", "-framework", "CoreVideo", "-framework", "ApplicationServices", "-framework", "Carbon", "-framework", "IOKit"] : ["-O2", "-lX11", "-lXtst"];
+  const flags = mac ? ["-O2", "-fobjc-arc", "-mmacosx-version-min=12.3", "-framework", "Foundation", "-framework", "AppKit", "-framework", "ScreenCaptureKit", "-framework", "CoreMedia", "-framework", "CoreVideo", "-framework", "ApplicationServices", "-framework", "Carbon", "-framework", "IOKit", "-framework", "VideoToolbox"] : ["-O2", "-lX11", "-lXtst"];
   const fingerprint = createHash2("sha256").update(await readFile2(source)).update(JSON.stringify([process.platform, process.arch, flags])).digest("hex");
   const existing = await stat2(target).catch(() => void 0);
   if (existing?.isFile() && (existing.mode & 63) === 0 && await readFile2(stamp, "utf8").catch(() => "") === fingerprint) return target;

package/dist/cli.js

@@ -34,13 +34,13 @@ import {
   supportedPlatform,
   systemdUnitPath,
   toolSearchDirs
-} from "./chunk-NJNANA6A.js";
+} from "./chunk-AOBRAQCJ.js";
 import {
   DESKTOP_PERMISSION_GUIDANCE,
   PlatformDesktop,
   checkDesktop,
   requestDesktopPermission
-} from "./chunk-XIJKEY4L.js";
+} from "./chunk-GS3Q6EU5.js";
 
 // src/cli.ts
 import { spawn as spawn2 } from "node:child_process";

package/dist/main.js

@@ -2,8 +2,8 @@
 import {
   ConfigError,
   runDaemon
-} from "./chunk-NJNANA6A.js";
-import "./chunk-XIJKEY4L.js";
+} from "./chunk-AOBRAQCJ.js";
+import "./chunk-GS3Q6EU5.js";
 
 // src/main.ts
 runDaemon(process.env.OCTOPUS_PROXY_CONFIG ?? "proxy.json").catch((error) => {

package/dist/remote-worker.js

@@ -14,7 +14,7 @@ import {
   remoteResolutionTiers,
   remoteSessionBudget,
   terminateNative
-} from "./chunk-XIJKEY4L.js";
+} from "./chunk-GS3Q6EU5.js";
 
 // src/remote-worker.ts
 import rtc from "@roamhq/wrtc";

package/native/desktop-macos.m

@@ -2,6 +2,9 @@
 #import <ScreenCaptureKit/ScreenCaptureKit.h>
 #import <ImageIO/ImageIO.h>
 #import <VideoToolbox/VideoToolbox.h>
+#import <IOKit/pwr_mgt/IOPMLib.h>
+#include <dlfcn.h>
+#include <unistd.h>
 
 static BOOL finished = NO;
 static int resultCode = 1;
@@ -39,6 +42,41 @@ static BOOL saveImage(CGImageRef image, NSString *path) {
   return saved;
 }
 
+// The public Quartz snapshot API is used only on 12.3–13, where SCStream can
+// stall at the lock screen. Resolve it lazily: newer macOS removed this API.
+static BOOL legacyLockedSession(void) {
+  NSDictionary *s = CFBridgingRelease(CGSessionCopyCurrentDictionary());
+  return [s[@"CGSSessionScreenIsLocked"] boolValue] &&
+    [s[(__bridge NSString *)kCGSessionOnConsoleKey] boolValue] &&
+    [s[(__bridge NSString *)kCGSessionLoginDoneKey] boolValue] &&
+    [s[(__bridge NSString *)kCGSessionUserIDKey] isKindOfClass:NSNumber.class] &&
+    [s[(__bridge NSString *)kCGSessionUserIDKey] unsignedIntValue] == getuid();
+}
+static int saveLegacyLock(CGDirectDisplayID display, NSString *path, CGImageRef (*snapshot)(CGDirectDisplayID)) {
+  if (!snapshot || !legacyLockedSession() || !CGPreflightScreenCaptureAccess() || !CGDisplayIsOnline(display)) return 1;
+  // Sleeping displays return NULL. An explicit screenshot request may wake
+  // the display; the system still owns the lock and validates any password.
+  IOPMAssertionID assertion = kIOPMNullAssertionID;
+  IOPMAssertionDeclareUserActivity(CFSTR("Octopus desktop screenshot"), kIOPMUserActiveLocal, &assertion);
+  NSDate *deadline = [NSDate dateWithTimeIntervalSinceNow:2];
+  CGImageRef image = NULL;
+  while (deadline.timeIntervalSinceNow > 0 && legacyLockedSession() && CGPreflightScreenCaptureAccess()) {
+    image = snapshot(display);
+    if (image) break;
+    [NSRunLoop.currentRunLoop runUntilDate:[NSDate dateWithTimeIntervalSinceNow:.05]];
+  }
+  BOOL saved = image && legacyLockedSession() && CGPreflightScreenCaptureAccess() && saveImage(image, path);
+  if (image) CGImageRelease(image);
+  if (assertion != kIOPMNullAssertionID) IOPMAssertionRelease(assertion);
+  return saved ? 0 : 1;
+}
+static int captureLegacyLock(CGDirectDisplayID display, NSString *path) {
+  if (@available(macOS 14.0, *)) return -1;
+  if (!legacyLockedSession()) return -1;
+  (void)NSScreen.screens;
+  return saveLegacyLock(display, path, dlsym(RTLD_DEFAULT, "CGDisplayCreateImage"));
+}
+
 static void finishImage(BOOL saved) {
   dispatch_async(dispatch_get_main_queue(), ^{
     if (finished) return;
@@ -131,6 +169,11 @@ int main(int argc, const char *argv[]) {
       }
       DesktopFrame *frame = [DesktopFrame new];
       frame.path = [NSString stringWithUTF8String:argv[3]];
+      int legacy = captureLegacyLock((CGDirectDisplayID)requested, frame.path);
+      if (legacy >= 0) {
+        if (legacy) fail(@"无法捕获当前用户的锁屏画面，请检查图形会话和屏幕录制权限。" );
+        return legacy;
+      }
       [SCShareableContent getShareableContentExcludingDesktopWindows:NO onScreenWindowsOnly:YES completionHandler:^(SCShareableContent *content, NSError *error) {
         if (error || !content) { dispatch_async(dispatch_get_main_queue(), ^{ fail(permissionMessage()); }); return; }
         SCDisplay *display = nil;

package/native/remote-macos.m

@@ -4,6 +4,8 @@
 #import <ScreenCaptureKit/ScreenCaptureKit.h>
 #import <Carbon/Carbon.h>
 #import <IOKit/pwr_mgt/IOPMLib.h>
+#import <VideoToolbox/VideoToolbox.h>
+#include <dlfcn.h>
 #include <arpa/inet.h>
 #include <fcntl.h>
 #include <signal.h>
@@ -32,6 +34,11 @@ static BOOL screenLocked(void) {
   return [s[@"CGSSessionScreenIsLocked"] boolValue];
 }
 static BOOL inputOK(void) { return AXIsProcessTrusted() && CGPreflightPostEventAccess() && sessionPresent(); }
+typedef CGImageRef (*LegacySnapshot)(CGDirectDisplayID);
+static LegacySnapshot legacySnapshot(void) {
+  if (@available(macOS 14.0,*)) return NULL;
+  return (LegacySnapshot)dlsym(RTLD_DEFAULT,"CGDisplayCreateImage");
+}
 // Quartz events can fill the password field without marking the console user
 // active. loginwindow then times out its activity check and reports a bad
 // password. Declare activity on connection and real console input, never on
@@ -122,15 +129,26 @@ static BOOL writeAll(int fd,const void *data,size_t length) {
 @property(nonatomic) double snapshotStarted, lastSnapshot;
 - (void)consumeSample:(CMSampleBufferRef)sampleBuffer;
 - (void)captureLockedFrame;
+- (void)captureLegacyLockedFrame;
+- (void)captureLegacyLockedFrameWithSnapshot:(LegacySnapshot)snapshot;
+- (void)releaseLegacyDisplay;
 @property(nonatomic,strong) NSData *pendingFrame;
 @property(nonatomic,strong) dispatch_queue_t writerQueue;
 @property(nonatomic) BOOL writing;
+@property(nonatomic) IOPMAssertionID legacyDisplayAssertion;
 @end
 @implementation RemoteStream
 - (instancetype)init {
   if ((self=[super init])) self.writerQueue=dispatch_queue_create("octopus.remote.writer",DISPATCH_QUEUE_SERIAL);
   return self;
 }
+- (void)dealloc {
+  if(_legacyDisplayAssertion!=kIOPMNullAssertionID) IOPMAssertionRelease(_legacyDisplayAssertion);
+}
+- (void)releaseLegacyDisplay {
+  if(_legacyDisplayAssertion!=kIOPMNullAssertionID) IOPMAssertionRelease(_legacyDisplayAssertion);
+  _legacyDisplayAssertion=kIOPMNullAssertionID;
+}
 - (void)stream:(SCStream *)stream didStopWithError:(NSError *)error {
   dispatch_async(dispatch_get_main_queue(), ^{
     self.streamStopped=YES;
@@ -158,7 +176,60 @@ static BOOL writeAll(int fd,const void *data,size_t length) {
     return;
   }
 #endif
-  stopping=1;
+  [self captureLegacyLockedFrame];
+}
+- (void)captureLegacyLockedFrame {
+  [self captureLegacyLockedFrameWithSnapshot:legacySnapshot()];
+}
+- (void)captureLegacyLockedFrameWithSnapshot:(LegacySnapshot)snapshot {
+  if(!snapshot) { stopping=1; return; }
+  double now=NSDate.date.timeIntervalSince1970;
+  if(!self.configuration || now-self.lastSnapshot<fmax(.2,CMTimeGetSeconds(self.configuration.minimumFrameInterval))) return;
+  self.lastSnapshot=now;
+  if(stopping || !inputOK() || !CGPreflightScreenCaptureAccess() || !screenLocked()) return;
+  // Ventura's loginwindow sleeps the display ~30 s after connection, at which
+  // point Quartz returns NULL. Keep it visible only for this remote session.
+  // This power assertion does not generate input or dismiss the system lock.
+  if(self.legacyDisplayAssertion==kIOPMNullAssertionID &&
+     IOPMAssertionCreateWithName(kIOPMAssertionTypePreventUserIdleDisplaySleep,kIOPMAssertionLevelOn,
+       CFSTR("Octopus locked remote display"),&_legacyDisplayAssertion)!=kIOReturnSuccess) { stopping=1; return; }
+  CGImageRef image=snapshot(displayID);
+  if(!image) {
+    if(!self.snapshotStarted) self.snapshotStarted=now;
+    if(now-self.snapshotStarted>2) stopping=1;
+    return;
+  }
+  self.snapshotStarted=0;
+  size_t w=self.configuration.width,h=self.configuration.height;
+  if(!w || !h || w>3840 || h>2160 || w%2 || h%2) { CGImageRelease(image); stopping=1; return; }
+  CVPixelBufferRef rgb=NULL,yuv=NULL;
+  VTPixelTransferSessionRef transfer=NULL;
+  CGContextRef context=NULL;
+  CGColorSpaceRef color=CGColorSpaceCreateDeviceRGB();
+  BOOL converted=NO;
+  if(CVPixelBufferCreate(NULL,w,h,kCVPixelFormatType_32BGRA,NULL,&rgb)==kCVReturnSuccess &&
+     CVPixelBufferCreate(NULL,w,h,kCVPixelFormatType_420YpCbCr8BiPlanarVideoRange,NULL,&yuv)==kCVReturnSuccess) {
+    CVPixelBufferLockBaseAddress(rgb,0);
+    context=CGBitmapContextCreate(CVPixelBufferGetBaseAddress(rgb),w,h,8,CVPixelBufferGetBytesPerRow(rgb),color,kCGImageAlphaNoneSkipFirst|kCGBitmapByteOrder32Little);
+    if(context) CGContextDrawImage(context,CGRectMake(0,0,w,h),image);
+    CVPixelBufferUnlockBaseAddress(rgb,0);
+    if(context && VTPixelTransferSessionCreate(NULL,&transfer)==noErr)
+      converted=VTPixelTransferSessionTransferImage(transfer,rgb,yuv)==noErr;
+  }
+  if(converted && !stopping && inputOK() && CGPreflightScreenCaptureAccess() && screenLocked()) {
+    CMVideoFormatDescriptionRef format=NULL; CMSampleBufferRef sample=NULL;
+    CMSampleTimingInfo timing={kCMTimeInvalid,kCMTimeZero,kCMTimeInvalid};
+    if(CMVideoFormatDescriptionCreateForImageBuffer(NULL,yuv,&format)==noErr &&
+       CMSampleBufferCreateReadyWithImageBuffer(NULL,yuv,format,&timing,&sample)==noErr) [self consumeSample:sample];
+    else stopping=1;
+    if(sample) CFRelease(sample);
+    if(format) CFRelease(format);
+  } else if(!converted) stopping=1;
+  if(context) CGContextRelease(context);
+  if(transfer) CFRelease(transfer);
+  if(rgb) CFRelease(rgb);
+  if(yuv) CFRelease(yuv);
+  CGColorSpaceRelease(color); CGImageRelease(image);
 }
 - (void)stream:(SCStream *)stream didOutputSampleBuffer:(CMSampleBufferRef)sampleBuffer ofType:(SCStreamOutputType)type {
   if (stopping || type!=SCStreamOutputTypeScreen || !CMSampleBufferIsValid(sampleBuffer)) return;
@@ -264,7 +335,7 @@ int main(int argc,const char *argv[]) {
   @autoreleasepool {
     if (@available(macOS 12.3,*)) {
       if(argc==2 && strcmp(argv[1],"check")==0) {
-        BOOL lockCapture=NO;
+        BOOL lockCapture=legacySnapshot()!=NULL;
 #if __MAC_OS_X_VERSION_MAX_ALLOWED >= 140000
         if(@available(macOS 14.0,*)) lockCapture=YES;
 #endif
@@ -313,7 +384,9 @@ int main(int argc,const char *argv[]) {
       while(!stopping) {
         @autoreleasepool {
           if(getppid()!=parentPID || NSDate.date.timeIntervalSince1970-lastPing>15 || !inputOK() || !CGPreflightScreenCaptureAccess() || !CGDisplayIsOnline(displayID) || !CGRectEqualToRect(bounds,CGDisplayBounds(displayID))) break;
-          if(screenLocked()) [capture captureLockedFrame];
+          BOOL locked=screenLocked();
+          if(!locked && capture.legacyDisplayAssertion!=kIOPMNullAssertionID) [capture releaseLegacyDisplay];
+          if(locked) [capture captureLockedFrame];
           else if(capture.streamStopped && capture.stream) {
             capture.streamStopped=NO;
             [capture.stream startCaptureWithCompletionHandler:^(NSError *e) { if(e) stopping=1; }];
@@ -330,7 +403,7 @@ int main(int argc,const char *argv[]) {
           [NSRunLoop.currentRunLoop runUntilDate:[NSDate dateWithTimeIntervalSinceNow:.005]];
         }
       }
-      stopping=1; releaseAll(); releaseActivity(); [capture.stream stopCaptureWithCompletionHandler:nil]; return 0;
+      stopping=1; releaseAll(); releaseActivity(); [capture releaseLegacyDisplay]; [capture.stream stopCaptureWithCompletionHandler:nil]; return 0;
     }
     return 1;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skylandnpm/octopus-proxy",
-  "version": "0.1.55",
+  "version": "0.1.58",
   "type": "module",
   "description": "Octopus host proxy: OpenCode, Codex, ZCode and Pi adapters with service installer CLI",
   "bin": {