codex-computer-use-mcp 0.1.0 → 0.2.0

package/dist/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,2DAA2D,CAAC,CAAC;AACpH,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,oDAAoD,CAAC,CAAC;AACtH,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,mBAAmB,GAAG;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IAChC,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACzC,KAAK,EAAE,CAAC;SACN,MAAM,CAAC;QACP,GAAG;QACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QACvD,aAAa,EAAE,YAAY,CAAC,QAAQ,EAAE;QACtC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC5D,CAAC,EAAE,UAAU,CAAC,QAAQ,EAAE;QACxB,CAAC,EAAE,UAAU,CAAC,QAAQ,EAAE;KACxB,CAAC;SACD,MAAM,EAAE;IACV,wBAAwB,EAAE,CAAC;SACzB,MAAM,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;SACvF,MAAM,EAAE;IACV,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IACjG,WAAW,EAAE,CAAC;SACZ,MAAM,CAAC;QACP,GAAG;QACH,aAAa,EAAE,YAAY;QAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACnC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;QACxC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE;QACvE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;KACxC,CAAC;SACD,MAAM,EAAE;IACV,MAAM,EAAE,CAAC;SACP,MAAM,CAAC;QACP,GAAG;QACH,aAAa,EAAE,YAAY;QAC3B,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAClD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KACzD,CAAC;SACD,MAAM,EAAE;IACV,IAAI,EAAE,CAAC;SACL,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;SAC3F,MAAM,EAAE;IACV,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,yFAAyF,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IACjL,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;CAC1D,CAAC;AAKX,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAmB,CAAC,CAAC;AAClG,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAe,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;AACvF,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAe,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAE3H,MAAM,UAAU,cAAc,CAAC,KAAa;IAC3C,OAAO,gBAAgB,CAAC,QAAQ,CAAC,KAAqB,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,WAAW,GAAqC;IACrD,GAAG,EAAE,QAAQ;IACb,OAAO,EAAE,QAAQ;IACjB,IAAI,EAAE,QAAQ;IACd,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,WAAW;IACpB,KAAK,EAAE,SAAS;IAChB,GAAG,EAAE,OAAO;IACZ,MAAM,EAAE,OAAO;IACf,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,QAAQ;IACb,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,SAAS;IACjB,QAAQ,EAAE,WAAW;IACrB,OAAO,EAAE,IAAI;IACb,SAAS,EAAE,MAAM;IACjB,SAAS,EAAE,MAAM;IACjB,UAAU,EAAE,OAAO;CACnB,CAAC;AAEF,MAAM,UAAU,sBAAsB,CAAC,KAAa;IACnD,OAAO,KAAK;SACV,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACb,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QACjD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IAClE,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CAAC;AACb,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAoB,EAAE,KAAc;IAC3E,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAwB,CAAC;IAC/E,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,sBAAsB,CAAC,MAAM,CAAC,GAAa,CAAC,EAAE,CAAC;IACpG,OAAO,MAAM,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAoB,EAAE,IAAyB;IAC3E,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,IAAI,CAAC,GAA0B,CAAC;AAC9E,CAAC;AAED,sGAAsG;AACtG,MAAM,CAAC,MAAM,+BAA+B,GAA4C;IACvF,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE;IAC1E,aAAa,EAAE;QACd,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,2DAA2D,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QACjH,QAAQ,EAAE,CAAC,KAAK,CAAC;QACjB,oBAAoB,EAAE,KAAK;KAC3B;IACD,KAAK,EAAE;QACN,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACX,GAAG,EAAE,EAAE,WAAW,EAAE,2DAA2D,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjG,WAAW,EAAE,EAAE,WAAW,EAAE,iCAAiC,EAAE,IAAI,EAAE,SAAS,EAAE;YAChF,aAAa,EAAE,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxE,YAAY,EAAE,EAAE,WAAW,EAAE,0CAA0C,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC5H,CAAC,EAAE,EAAE,WAAW,EAAE,8CAA8C,EAAE,IAAI,EAAE,QAAQ,EAAE;YAClF,CAAC,EAAE,EAAE,WAAW,EAAE,8CAA8C,EAAE,IAAI,EAAE,QAAQ,EAAE;SAClF;QACD,QAAQ,EAAE,CAAC,KAAK,CAAC;QACjB,oBAAoB,EAAE,KAAK;KAC3B;IACD,wBAAwB,EAAE;QACzB,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACX,MAAM,EAAE,EAAE,WAAW,EAAE,qCAAqC,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC9E,GAAG,EAAE,EAAE,WAAW,EAAE,2DAA2D,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjG,aAAa,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE,IAAI,EAAE,QAAQ,EAAE;SACpE;QACD,QAAQ,EAAE,CAAC,KAAK,EAAE,eAAe,EAAE,QAAQ,CAAC;QAC5C,oBAAoB,EAAE,KAAK;KAC3B;IACD,SAAS,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACX,GAAG,EAAE,EAAE,WAAW,EAAE,2DAA2D,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjG,aAAa,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE,IAAI,EAAE,QAAQ,EAAE;YACpE,KAAK,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE;SACzD;QACD,QAAQ,EAAE,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC;QAC3C,oBAAoB,EAAE,KAAK;KAC3B;IACD,WAAW,EAAE;QACZ,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACX,GAAG,EAAE,EAAE,WAAW,EAAE,+BAA+B,EAAE,IAAI,EAAE,QAAQ,EAAE;YACrE,aAAa,EAAE,EAAE,WAAW,EAAE,yBAAyB,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzE,MAAM,EAAE,EAAE,WAAW,EAAE,oFAAoF,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC7H,SAAS,EAAE,EAAE,WAAW,EAAE,sFAAsF,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,eAAe,EAAE,cAAc,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE;YACnL,MAAM,EAAE,EAAE,WAAW,EAAE,mFAAmF,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC5H,IAAI,EAAE,EAAE,WAAW,EAAE,gDAAgD,EAAE,IAAI,EAAE,QAAQ,EAAE;SACvF;QACD,QAAQ,EAAE,CAAC,KAAK,EAAE,eAAe,EAAE,MAAM,CAAC;QAC1C,oBAAoB,EAAE,KAAK;KAC3B;IACD,MAAM,EAAE;QACP,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACX,GAAG,EAAE,EAAE,WAAW,EAAE,2DAA2D,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjG,SAAS,EAAE,EAAE,WAAW,EAAE,4CAA4C,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxF,aAAa,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE,IAAI,EAAE,QAAQ,EAAE;YACpE,KAAK,EAAE,EAAE,WAAW,EAAE,2EAA2E,EAAE,IAAI,EAAE,QAAQ,EAAE;SACnH;QACD,QAAQ,EAAE,CAAC,KAAK,EAAE,eAAe,EAAE,WAAW,CAAC;QAC/C,oBAAoB,EAAE,KAAK;KAC3B;IACD,IAAI,EAAE;QACL,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACX,GAAG,EAAE,EAAE,WAAW,EAAE,2DAA2D,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjG,MAAM,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC7D,MAAM,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC7D,IAAI,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzD,IAAI,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE;SACzD;QACD,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACrD,oBAAoB,EAAE,KAAK;KAC3B;IACD,SAAS,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACX,GAAG,EAAE,EAAE,WAAW,EAAE,2DAA2D,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjG,GAAG,EAAE,EAAE,WAAW,EAAE,iCAAiC,EAAE,IAAI,EAAE,QAAQ,EAAE;SACvE;QACD,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;QACxB,oBAAoB,EAAE,KAAK;KAC3B;IACD,SAAS,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACX,GAAG,EAAE,EAAE,WAAW,EAAE,2DAA2D,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjG,IAAI,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC7D;QACD,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;QACzB,oBAAoB,EAAE,KAAK;KAC3B;CACD,CAAC"}

package/integrations/pi/README.md

@@ -1,50 +1,64 @@
-# Pi adapters
+# Pi integration
 
-Choose **one** integration path. Do not load both under the same tool name.
+The native Pi adapter is the primary 0.2 path. It registers ten namespaced typed tools so Pi itself chooses each official Computer Use method and argument.
 
-## Native Pi package adapter
+## Source checkout acceptance
 
 ```bash
-pi install npm:codex-computer-use-mcp@0.1.0
+npm ci
+npm run build
+CODEX_COMPUTER_USE_HOME="$(mktemp -d)" \
+  pi -ne -e /absolute/path/to/codex-computer-use-mcp/integrations/pi/index.ts
 ```
 
-The package manifest loads `integrations/pi/index.ts` and registers:
+`-ne` prevents an installed 0.1 adapter from loading at the same time. This source workflow does not install or switch live Pi configuration.
 
-- `background_computer_use`
-- `/background-computer-use-status`
-- `/background-computer-use-mode`
-
-The adapter imports the same compiled service used by the MCP server; it does not fork the security-critical runner or policy. Pi signals tool failures by thrown error, so cancellation text carries observed methods and non-retry guidance while the complete structured method list remains in the private audit.
-
-For a local checkout:
+For normal installation, use the exact version 0.2.0 npm package:
 
 ```bash
-npm ci && npm run build
-pi -ne -e /absolute/path/to/codex-computer-use-mcp/integrations/pi/index.ts
+pi install npm:codex-computer-use-mcp@0.2.0
 ```
 
-`-ne` avoids a duplicate-tool conflict if another copy is already installed.
+Use the source workflow only when you need to test an exact reviewed commit. Follow the rollback procedure in `MIGRATION.md` when replacing version 0.1.
+
+## Registered surface
+
+- `computer_use_list_apps`
+- `computer_use_get_app_state`
+- `computer_use_click`
+- `computer_use_perform_secondary_action`
+- `computer_use_set_value`
+- `computer_use_select_text`
+- `computer_use_scroll`
+- `computer_use_drag`
+- `computer_use_press_key`
+- `computer_use_type_text`
+- `/computer-use-status`
 
-## Pi MCP gateway
+No-permissions is the only policy: all ten tools are available with no wrapper approval prompts, mode selector, or app/intent/action gate. Pi does not advertise or render elicitation UI. Unexpected downstream elicitations are silently declined and never accepted.
 
-Merge [`mcp.json.example`](mcp.json.example) into `~/.pi/agent/mcp.json`, then reload Pi.
+## Generic MCP gateway
 
-`directTools: false` is intentional. It keeps this powerful capability behind Pi's MCP gateway instead of injecting it into every agent turn as an always-on direct tool.
+Merge `mcp.json.example` only for the exact 0.2.0 package or after building an exact reviewed source commit. `directTools: false` is intentional; it keeps this powerful generic MCP surface behind Pi's gateway.
 
-For a local checkout, replace the command and arguments with:
+For a source checkout:
 
 ```json
 {
-  "command": "node",
-  "args": ["/absolute/path/to/codex-computer-use-mcp/dist/mcp-server.js"],
-  "lifecycle": "lazy",
-  "requestTimeoutMs": 360000,
-  "directTools": false
+  "mcpServers": {
+    "computer-use-direct-source": {
+      "command": "node",
+      "args": ["/absolute/path/to/codex-computer-use-mcp/dist/mcp-server.js"],
+      "lifecycle": "lazy",
+      "requestTimeoutMs": 180000,
+      "directTools": false
+    }
+  }
 }
 ```
 
-## Permission warning
+Do not load the native adapter and generic MCP adapter into the same acceptance process unless tool names are intentionally isolated.
 
-Standalone safe mode is list-only. `inspect`, `act`, and `dictionary_lookup` require explicitly acknowledged full-permissions mode. Full mode broadly authorizes wrapper use of official Computer Use because target checks cannot be placed before signed-client dispatch without breaking official sender authentication. Read the root README before enabling it.
+The generic MCP path uses the same durable no-permissions policy: all ten methods, no wrapper approval UI, and silent decline of unexpected downstream elicitations. Configure persistent app access only through official ChatGPT Computer Use settings.
 
-Do not register the app-bundled Codex broker itself as a direct tool. This wrapper provides signing checks, post-dispatch validation, focus monitoring, locking, cleanup criteria, and private audits.
+See the root `MIGRATION.md` before replacing an installed 0.1 adapter.

package/integrations/pi/index.ts

@@ -1,135 +1,122 @@
-import crypto from "node:crypto";
 import path from "node:path";
 import { StringEnum } from "@earendil-works/pi-ai";
-import { getAgentDir, type ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import { getAgentDir, truncateHead, type ExtensionAPI } from "@earendil-works/pi-coding-agent";
 import { Text } from "@earendil-works/pi-tui";
-import { Type } from "typebox";
-import { appendAudit, type AuditRecord } from "../../dist/audit.js";
-import { ConfigError, loadConfig, saveConfig } from "../../dist/config.js";
-import { COMPUTER_USE_TOOLS, MODEL } from "../../dist/policy.js";
-import { executeOperation, getStatus } from "../../dist/service.js";
+import { Type, type TSchema } from "typebox";
+import { executeDirectTool, getDirectStatus } from "../../dist/direct-service.js";
+import type { DirectMethod } from "../../dist/tools.js";
 
-const Params = Type.Object({
-  mode: StringEnum(["list", "inspect", "act", "dictionary_lookup"] as const, {
-    description: "safe mode permits only list; targeted modes require explicitly acknowledged broad full-permissions",
-  }),
-  app: Type.Optional(Type.String({ maxLength: 500, description: "App name, bundle identifier, or app-bundle path" })),
-  task: Type.Optional(Type.String({ maxLength: 4000, description: "Concrete target-app task for act mode" })),
-  query: Type.Optional(Type.String({ maxLength: 200, description: "Local word or phrase for dictionary_lookup" })),
-  cleanup: Type.Optional(Type.Boolean({ description: "Restore transient state and verify cleanup" })),
-  cleanup_instructions: Type.Optional(Type.String({ maxLength: 2000, description: "Optional cleanup postcondition" })),
-  required_capabilities: Type.Optional(
-    Type.Array(StringEnum(COMPUTER_USE_TOOLS), {
-      maxItems: 8,
-      description: "Official Computer Use methods that must genuinely be exercised",
-    }),
-  ),
-});
+const App = Type.String({ minLength: 1, maxLength: 500, description: "App name, full app path, or unambiguous bundle identifier" });
+const Element = Type.String({ minLength: 1, maxLength: 200, description: "Element identifier from computer_use_get_app_state" });
+const Coordinate = Type.Number({ minimum: 0, maximum: 1_000_000 });
 
-export default function codexComputerUse(pi: ExtensionAPI) {
-  const stateRoot = process.env.CODEX_COMPUTER_USE_HOME || path.join(getAgentDir(), "background-computer-use");
+const ToolParameters: Record<DirectMethod, TSchema> = {
+  list_apps: Type.Object({}, { additionalProperties: false }),
+  get_app_state: Type.Object({ app: App }, { additionalProperties: false }),
+  click: Type.Object({
+    app: App,
+    click_count: Type.Optional(Type.Integer({ minimum: 1, maximum: 10 })),
+    element_index: Type.Optional(Element),
+    mouse_button: Type.Optional(StringEnum(["left", "right", "middle"] as const)),
+    x: Type.Optional(Coordinate),
+    y: Type.Optional(Coordinate),
+  }, { additionalProperties: false }),
+  perform_secondary_action: Type.Object({ app: App, element_index: Element, action: Type.String({ minLength: 1, maxLength: 200 }) }, { additionalProperties: false }),
+  set_value: Type.Object({ app: App, element_index: Element, value: Type.String({ maxLength: 20_000 }) }, { additionalProperties: false }),
+  select_text: Type.Object({
+    app: App,
+    element_index: Element,
+    text: Type.String({ minLength: 1, maxLength: 20_000 }),
+    prefix: Type.Optional(Type.String({ maxLength: 2_000 })),
+    selection: Type.Optional(StringEnum(["text", "cursor_before", "cursor_after"] as const)),
+    suffix: Type.Optional(Type.String({ maxLength: 2_000 })),
+  }, { additionalProperties: false }),
+  scroll: Type.Object({
+    app: App,
+    element_index: Element,
+    direction: StringEnum(["up", "down", "left", "right"] as const),
+    pages: Type.Optional(Type.Number({ exclusiveMinimum: 0, maximum: 100 })),
+  }, { additionalProperties: false }),
+  drag: Type.Object({ app: App, from_x: Coordinate, from_y: Coordinate, to_x: Coordinate, to_y: Coordinate }, { additionalProperties: false }),
+  press_key: Type.Object({ app: App, key: Type.String({ minLength: 1, maxLength: 100, description: "Key or combination; common aliases such as CMD+A are normalized to the official xdotool-style Meta_L+a form" }) }, { additionalProperties: false }),
+  type_text: Type.Object({ app: App, text: Type.String({ maxLength: 20_000 }) }, { additionalProperties: false }),
+};
 
-  pi.registerCommand("background-computer-use-status", {
-    description: "Show permission mode, signed Computer Use surface, audit path, and approval boundary",
+function toolDescription(method: DirectMethod): string {
+  return `Call the official signed Computer Use ${method} capability directly through the unrestricted no-permissions interface. Pi supplies the typed arguments itself; there is no wrapper approval prompt, mode gate, nested model, planner, prompt, or separate model-token usage.`;
+}
+
+function titleFor(method: DirectMethod): string {
+  return method.split("_").map((part) => `${part.slice(0, 1).toUpperCase()}${part.slice(1)}`).join(" ");
+}
+
+function toPiContent(content: Array<Record<string, unknown>>): Array<{ type: "text"; text: string } | { type: "image"; data: string; mimeType: string }> {
+  const result: Array<{ type: "text"; text: string } | { type: "image"; data: string; mimeType: string }> = [];
+  for (const block of content) {
+    if (block.type === "image") {
+      result.push({ type: "image", data: String(block.data), mimeType: String(block.mimeType) });
+      continue;
+    }
+    const original = String(block.text ?? "");
+    const truncated = truncateHead(original, { maxLines: 2_000, maxBytes: 50 * 1024 });
+    const suffix = truncated.truncated
+      ? `\n\n[Official Computer Use text truncated in-memory: ${truncated.outputLines}/${truncated.totalLines} lines, ${truncated.outputBytes}/${truncated.totalBytes} bytes. No full-output file was written.]`
+      : "";
+    result.push({ type: "text", text: `${truncated.content}${suffix}` });
+  }
+  return result;
+}
+
+function errorText(content: Array<Record<string, unknown>>): string {
+  return content
+    .filter((block) => block.type === "text")
+    .map((block) => String(block.text ?? ""))
+    .join("\n")
+    .slice(0, 2_000) || "Official Computer Use returned an error";
+}
+
+export default function directComputerUse(pi: ExtensionAPI) {
+  const stateRoot = process.env.CODEX_COMPUTER_USE_HOME || path.join(getAgentDir(), "direct-computer-use");
+
+  pi.registerCommand("computer-use-status", {
+    description: "Show the direct-call architecture, durable no-permissions policy, signed broker, and private audit path",
     handler: async (_args, ctx) => {
-      const status = await getStatus(stateRoot);
-      ctx.ui.notify(JSON.stringify(status, null, 2), status.permissionMode === "full-permissions" ? "warning" : "info");
+      const status = await getDirectStatus(stateRoot);
+      ctx.ui.notify(JSON.stringify(status, null, 2), "info");
     },
   });
 
-  pi.registerCommand("background-computer-use-mode", {
-    description: "Show or explicitly change safe/default vs full-permissions mode",
-    handler: async (args, ctx) => {
-      const requested = args.trim();
-      const current = await loadConfig(stateRoot);
-      if (!requested) {
-        ctx.ui.notify(`Current Computer Use permission mode: ${current.permissionMode}`, "info");
-        return;
-      }
-      if (requested !== "safe" && requested !== "full-permissions") {
-        throw new ConfigError("Usage: /background-computer-use-mode safe|full-permissions");
-      }
-      if (requested === current.permissionMode) {
-        ctx.ui.notify(`Computer Use permission mode is already ${requested}.`, "info");
-        return;
-      }
-      if (requested === "full-permissions") {
-        if (!ctx.hasUI) throw new ConfigError("Enabling full-permissions requires an interactive Pi UI");
-        const confirmed = await ctx.ui.confirm(
-          "Enable FULL Computer Use permissions?",
-          "This broadly enables targeted operations that safe mode refuses. Official OpenAI/macOS approvals and signing, post-dispatch validation, lock, focus, timeout, cleanup, and audit controls remain.",
-          { timeout: 60_000 },
+  const methods = Object.keys(ToolParameters) as DirectMethod[];
+  for (const method of methods) {
+    const piName = `computer_use_${method}`;
+    pi.registerTool({
+      name: piName,
+      label: titleFor(method),
+      description: toolDescription(method),
+      promptSnippet: `${titleFor(method)} through the official signed macOS Computer Use service`,
+      promptGuidelines: [
+        `${piName} is a direct typed tool: choose its arguments yourself; it does not invoke a nested planner or model.`,
+        `${piName} must use current element identifiers from computer_use_get_app_state; inspect again after UI state changes.`,
+        `${piName} must not be used for credentials, authentication, payments, external messages, or destructive actions without the user's explicit request; this wrapper will not open a permission prompt.`,
+      ],
+      parameters: ToolParameters[method] as any,
+      async execute(_toolCallId, params, signal, onUpdate) {
+        const response = await executeDirectTool(
+          { method, arguments: params as Record<string, unknown> },
+          {
+            stateRoot,
+            signal,
+            onProgress: (message) => onUpdate?.({ content: [{ type: "text", text: message }], details: { status: "running" } }),
+          },
         );
-        if (!confirmed) {
-          ctx.ui.notify("Full-permissions mode was not enabled.", "info");
-          return;
-        }
-      }
-      await saveConfig(stateRoot, { version: 1, permissionMode: requested });
-      const record: AuditRecord = {
-        timestamp: new Date().toISOString(),
-        runId: crypto.randomUUID(),
-        operation: "configure",
-        permissionMode: requested,
-        app: null,
-        mutating: true,
-        cleanupRequested: false,
-        userConfirmed: requested === "full-permissions",
-        authorization: requested === "full-permissions" ? "full_permissions_config" : "none",
-        inputBytes: 0,
-        outcome: "ok",
-        durationMs: 0,
-        model: MODEL,
-        usage: { input: 0, cachedInput: 0, output: 0 },
-        computerUseCalls: 0,
-        computerUseMethods: [],
-        backgroundPreserved: null,
-        cleanupVerified: null,
-      };
-      try {
-        await appendAudit(stateRoot, record);
-      } catch {
-        await saveConfig(stateRoot, current);
-        throw new ConfigError("Permission mode change was rolled back because secure audit logging failed");
-      }
-      ctx.ui.notify(`Computer Use permission mode set to ${requested}.`, requested === "full-permissions" ? "warning" : "info");
-    },
-  });
-
-  pi.registerTool({
-    name: "background_computer_use",
-    label: "Background Computer Use",
-    description:
-      "Use the official signed Codex Computer Use broker for native macOS apps. Safe mode is list-only; explicit full-permissions broadly authorizes targeted operations but never bypasses first-party approvals or technical controls. Calls consume separate Codex usage.",
-    promptSnippet: "Inspect or operate a native macOS app in the background through signed Codex Computer Use",
-    promptGuidelines: [
-      "Use background_computer_use when the user asks to inspect or operate a native macOS app in the background.",
-      "Set background_computer_use required_capabilities when the user explicitly needs click, secondary action, set value, select text, scroll, drag, keypress, or typing exercised.",
-      "If background_computer_use reports a first-party approval or active app lease, do not retry automatically.",
-      "Disclose that background_computer_use starts a nested Codex model call and consumes separate Codex usage.",
-    ],
-    parameters: Params,
-    async execute(_toolCallId, params, signal, onUpdate, _ctx) {
-      const response = await executeOperation(params, {
-        stateRoot,
-        signal,
-        onProgress: (message) =>
-          onUpdate?.({ content: [{ type: "text", text: message }], details: { status: "running" } }),
-      });
-      if (response.isError) throw new Error(response.text);
-      return {
-        content: [{ type: "text", text: response.text }],
-        details: response.details,
-      };
-    },
-    renderCall(args, theme) {
-      return new Text(
-        theme.fg("toolTitle", theme.bold("background_computer_use ")) +
-          theme.fg("accent", String(args.app ?? "apps")) +
-          theme.fg("muted", ` ${String(args.mode ?? "")}`),
-        0,
-        0,
-      );
-    },
-  });
+        if (response.isError) throw new Error(errorText(response.content));
+        return { content: toPiContent(response.content), details: response.details };
+      },
+      renderCall(args, theme) {
+        const renderedArgs = args as Record<string, unknown>;
+        const app = typeof renderedArgs.app === "string" ? ` ${renderedArgs.app}` : "";
+        return new Text(theme.fg("toolTitle", theme.bold(`${piName} `)) + theme.fg("accent", app.trim()), 0, 0);
+      },
+    });
+  }
 }

package/integrations/pi/mcp.json.example

@@ -1,13 +1,13 @@
 {
   "mcpServers": {
-    "codex-computer-use": {
+    "computer-use-direct": {
       "command": "npx",
       "args": [
         "-y",
-        "codex-computer-use-mcp@0.1.0"
+        "codex-computer-use-mcp@0.2.0"
       ],
       "lifecycle": "lazy",
-      "requestTimeoutMs": 360000,
+      "requestTimeoutMs": 180000,
       "directTools": false,
       "debug": false
     }