codex-computer-use-mcp 0.1.0

package/dist/lock.js

@@ -0,0 +1,108 @@
+import crypto from "node:crypto";
+import { spawn } from "node:child_process";
+import { mkdir, open, readFile, rename, rm } from "node:fs/promises";
+import path from "node:path";
+export class AppBusyError extends Error {
+    owner;
+    constructor(app, owner) {
+        super(`${app} is already leased by another native-app task; concurrent same-app access is blocked`);
+        this.name = "AppBusyError";
+        this.owner = owner;
+    }
+}
+function lockKey(value) {
+    return crypto.createHash("sha256").update(value).digest("hex");
+}
+async function readOwner(ownerPath) {
+    try {
+        return JSON.parse(await readFile(ownerPath, "utf8"));
+    }
+    catch {
+        return undefined;
+    }
+}
+async function publishOwner(ownerPath, owner) {
+    const temporary = `${ownerPath}.${process.pid}.${owner.runId}.tmp`;
+    const handle = await open(temporary, "wx", 0o600);
+    try {
+        await handle.writeFile(`${JSON.stringify(owner)}\n`, "utf8");
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+    try {
+        await rename(temporary, ownerPath);
+    }
+    finally {
+        await rm(temporary, { force: true });
+    }
+}
+export async function acquireAppLock(stateDir, app, runId, _staleAfterMs = 10 * 60_000) {
+    const locksDir = path.join(stateDir, "locks");
+    await mkdir(locksDir, { recursive: true, mode: 0o700 });
+    const key = lockKey(app);
+    const lockPath = path.join(locksDir, `${key}.lock`);
+    const ownerPath = path.join(locksDir, `${key}.owner.json`);
+    const owner = {
+        runId,
+        pid: process.pid,
+        app: `selector-sha256:${key.slice(0, 16)}`,
+        startedAt: new Date().toISOString(),
+    };
+    // lockf is a kernel advisory lock: acquisition is atomic and a crashed owner releases it automatically.
+    // The static shell command emits readiness only after lockf owns the file, then blocks on stdin.
+    const proc = spawn("/usr/bin/lockf", ["-t", "0", lockPath, "/bin/sh", "-c", 'printf "LOCKED\\n"; /bin/cat >/dev/null'], { stdio: ["pipe", "pipe", "ignore"], shell: false });
+    const acquired = await new Promise((resolve, reject) => {
+        let output = "";
+        let settled = false;
+        const finish = (value) => {
+            if (settled)
+                return;
+            settled = true;
+            resolve(value);
+        };
+        proc.once("error", (error) => {
+            if (settled)
+                return;
+            settled = true;
+            reject(error);
+        });
+        proc.once("close", () => finish(false));
+        proc.stdout.setEncoding("utf8");
+        proc.stdout.on("data", (chunk) => {
+            output += chunk;
+            if (output.includes("LOCKED\n"))
+                finish(true);
+        });
+    });
+    if (!acquired) {
+        proc.stdin.destroy();
+        throw new AppBusyError(app, await readOwner(ownerPath));
+    }
+    try {
+        await publishOwner(ownerPath, owner);
+    }
+    catch (error) {
+        proc.stdin.end();
+        await new Promise((resolve) => proc.once("close", () => resolve()));
+        throw error;
+    }
+    let released = false;
+    return {
+        path: lockPath,
+        owner,
+        async release() {
+            if (released)
+                return;
+            released = true;
+            proc.stdin.end();
+            if (proc.exitCode === null)
+                await new Promise((resolve) => proc.once("close", () => resolve()));
+            const current = await readOwner(ownerPath);
+            if (current?.runId === runId)
+                await rm(ownerPath, { force: true });
+        },
+    };
+}
+//# sourceMappingURL=lock.js.map

package/dist/lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../src/lock.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,IAAI,MAAM,WAAW,CAAC;AAS7B,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC7B,KAAK,CAAsB;IACpC,YAAY,GAAW,EAAE,KAA0B;QAClD,KAAK,CAAC,GAAG,GAAG,sFAAsF,CAAC,CAAC;QACpG,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACpB,CAAC;CACD;AAQD,SAAS,OAAO,CAAC,KAAa;IAC7B,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,SAAiB;IACzC,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,SAAiB,EAAE,KAAgB;IAC9D,MAAM,SAAS,GAAG,GAAG,SAAS,IAAI,OAAO,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,MAAM,CAAC;IACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC;QACJ,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC;YAAS,CAAC;QACV,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC;YAAS,CAAC;QACV,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,QAAgB,EAChB,GAAW,EACX,KAAa,EACb,aAAa,GAAG,EAAE,GAAG,MAAM;IAE3B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,GAAG,aAAa,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAc;QACxB,KAAK;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,mBAAmB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QAC1C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC;IAEF,wGAAwG;IACxG,iGAAiG;IACjG,MAAM,IAAI,GAAG,KAAK,CACjB,gBAAgB,EAChB,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,yCAAyC,CAAC,EACjF,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CACnD,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC/D,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE;YACjC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC;YAChB,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACjB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC1E,MAAM,KAAK,CAAC;IACb,CAAC;IACD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO;QACN,IAAI,EAAE,QAAQ;QACd,KAAK;QACL,KAAK,CAAC,OAAO;YACZ,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACjB,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;gBAAE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACtG,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;YAC3C,IAAI,OAAO,EAAE,KAAK,KAAK,KAAK;gBAAE,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/mcp-server.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/mcp-server.js

@@ -0,0 +1,134 @@
+#!/usr/bin/env node
+import crypto from "node:crypto";
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+import { appendAudit } from "./audit.js";
+import { loadConfig, saveConfig } from "./config.js";
+import { COMPUTER_USE_TOOLS, MODEL } from "./policy.js";
+import { defaultStateRoot, executeOperation, getStatus } from "./service.js";
+const version = "0.1.0";
+async function handleCli() {
+    const args = process.argv.slice(2);
+    if (args.length === 0)
+        return false;
+    if (args.length === 1 && args[0] === "--status") {
+        console.log(JSON.stringify(await getStatus(), null, 2));
+        return true;
+    }
+    if (args[0] !== "--configure" || (args[1] !== "safe" && args[1] !== "full-permissions")) {
+        throw new Error("Usage: codex-computer-use-mcp [--status | --configure safe | --configure full-permissions --acknowledge-full-permissions]");
+    }
+    const requested = args[1];
+    if (requested === "full-permissions" && !args.includes("--acknowledge-full-permissions")) {
+        throw new Error("Refusing to enable full-permissions without --acknowledge-full-permissions. This broadly enables targeted operations that safe mode refuses; official OpenAI approvals and technical controls remain.");
+    }
+    const stateRoot = defaultStateRoot();
+    const previous = await loadConfig(stateRoot);
+    if (previous.permissionMode === requested) {
+        console.log(`Permission mode is already ${requested}.`);
+        return true;
+    }
+    await saveConfig(stateRoot, { version: 1, permissionMode: requested });
+    const audit = {
+        timestamp: new Date().toISOString(),
+        runId: crypto.randomUUID(),
+        operation: "configure",
+        permissionMode: requested,
+        app: null,
+        mutating: true,
+        cleanupRequested: false,
+        userConfirmed: requested === "full-permissions",
+        authorization: requested === "full-permissions" ? "full_permissions_config" : "none",
+        inputBytes: 0,
+        outcome: "ok",
+        durationMs: 0,
+        model: MODEL,
+        usage: { input: 0, cachedInput: 0, output: 0 },
+        computerUseCalls: 0,
+        computerUseMethods: [],
+        backgroundPreserved: null,
+        cleanupVerified: null,
+    };
+    try {
+        await appendAudit(stateRoot, audit);
+    }
+    catch {
+        await saveConfig(stateRoot, previous);
+        throw new Error("Permission mode change was rolled back because secure audit logging failed");
+    }
+    console.log(`Permission mode set to ${requested}.`);
+    return true;
+}
+try {
+    if (await handleCli())
+        process.exit(0);
+}
+catch (error) {
+    console.error(error instanceof Error ? error.message : "Invalid command");
+    process.exit(1);
+}
+const server = new McpServer({ name: "codex-computer-use-mcp", version }, { capabilities: { logging: {} } });
+const operationSchema = {
+    mode: z.enum(["list", "inspect", "act", "dictionary_lookup"]).describe("safe mode permits only list; inspect, act, and dictionary_lookup require explicitly acknowledged broad full-permissions mode"),
+    app: z.string().max(500).optional().describe("App name, bundle identifier, or app-bundle path"),
+    task: z.string().max(4000).optional().describe("Concrete target-app task for act mode"),
+    query: z.string().max(200).optional().describe("Local word or phrase for dictionary_lookup; never include secrets or private/customer content"),
+    cleanup: z.boolean().optional().describe("Restore transient state and verify cleanup"),
+    cleanup_instructions: z.string().max(2000).optional().describe("Optional cleanup postcondition"),
+    required_capabilities: z.array(z.enum(COMPUTER_USE_TOOLS)).max(8).optional().describe("Computer Use methods that must genuinely be exercised"),
+};
+server.registerTool("background_computer_use", {
+    title: "Background Computer Use",
+    description: "Use the official signed Codex Computer Use broker for native macOS apps. Safe mode is deliberately list-only because target checks are observable only after signed-client dispatch. Explicit full-permissions enables inspect/act/dictionary operations with broad wrapper authorization; it never bypasses first-party OpenAI app approvals, sensitive-action prompts, macOS privacy controls, signing checks, focus telemetry, locks, timeouts, cleanup verification, or sanitized audit logging. Calls consume separate Codex usage.",
+    inputSchema: operationSchema,
+    annotations: {
+        readOnlyHint: false,
+        destructiveHint: true,
+        idempotentHint: false,
+        openWorldHint: false,
+    },
+}, async (args, extra) => {
+    try {
+        const response = await executeOperation(args, { signal: extra.signal });
+        return {
+            content: [{ type: "text", text: response.text }],
+            structuredContent: response.details,
+            isError: response.isError,
+        };
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : "Computer Use failed";
+        return {
+            content: [{ type: "text", text: message }],
+            isError: true,
+        };
+    }
+});
+server.registerTool("background_computer_use_status", {
+    title: "Background Computer Use Status",
+    description: "Show the server permission mode, state/audit paths, signed model, approval boundary, and supported official Computer Use methods.",
+    annotations: {
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false,
+    },
+}, async () => {
+    try {
+        const status = await getStatus();
+        return {
+            content: [{ type: "text", text: JSON.stringify(status, null, 2) }],
+            structuredContent: status,
+        };
+    }
+    catch (error) {
+        return {
+            content: [{ type: "text", text: error instanceof Error ? error.message : "Could not read status" }],
+            isError: true,
+        };
+    }
+});
+const transport = new StdioServerTransport();
+await server.connect(transport);
+//# sourceMappingURL=mcp-server.js.map

package/dist/mcp-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server.js","sourceRoot":"","sources":["../src/mcp-server.ts"],"names":[],"mappings":";AACA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAoB,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAuB,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE7E,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,KAAK,UAAU,SAAS;IACtB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,aAAa,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,kBAAkB,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,2HAA2H,CAAC,CAAC;IAC/I,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAmB,CAAC;IAC5C,IAAI,SAAS,KAAK,kBAAkB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,uMAAuM,CAAC,CAAC;IAC3N,CAAC;IACD,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,8BAA8B,SAAS,GAAG,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,UAAU,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC;IACvE,MAAM,KAAK,GAAgB;QACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE;QAC1B,SAAS,EAAE,WAAW;QACtB,cAAc,EAAE,SAAS;QACzB,GAAG,EAAE,IAAI;QACT,QAAQ,EAAE,IAAI;QACd,gBAAgB,EAAE,KAAK;QACvB,aAAa,EAAE,SAAS,KAAK,kBAAkB;QAC/C,aAAa,EAAE,SAAS,KAAK,kBAAkB,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,MAAM;QACpF,UAAU,EAAE,CAAC;QACb,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,CAAC;QACb,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;QAC9C,gBAAgB,EAAE,CAAC;QACnB,kBAAkB,EAAE,EAAE;QACtB,mBAAmB,EAAE,IAAI;QACzB,eAAe,EAAE,IAAI;KACtB,CAAC;IACF,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,0BAA0B,SAAS,GAAG,CAAC,CAAC;IACpD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,IAAI,CAAC;IACH,IAAI,MAAM,SAAS,EAAE;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,EAC3C,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAClC,CAAC;AAEF,MAAM,eAAe,GAAG;IACtB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CACpE,8HAA8H,CAC/H;IACD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IAC/F,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACvF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+FAA+F,CAAC;IAC/I,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IACtF,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IAChG,qBAAqB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACnF,uDAAuD,CACxD;CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,yBAAyB,EACzB;IACE,KAAK,EAAE,yBAAyB;IAChC,WAAW,EACT,0gBAA0gB;IAC5gB,WAAW,EAAE,eAAe;IAC5B,WAAW,EAAE;QACX,YAAY,EAAE,KAAK;QACnB,eAAe,EAAE,IAAI;QACrB,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,KAAK;KACrB;CACF,EACD,KAAK,EAAE,IAAI,EAAE,KAAK,EAA2B,EAAE;IAC7C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACxE,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;YAChD,iBAAiB,EAAE,QAAQ,CAAC,OAAO;YACnC,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC;QAC/E,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC1C,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,gCAAgC,EAChC;IACE,KAAK,EAAE,gCAAgC;IACvC,WAAW,EAAE,mIAAmI;IAChJ,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACrB;CACF,EACD,KAAK,IAA6B,EAAE;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YAClE,iBAAiB,EAAE,MAAM;SAC1B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,EAAE,CAAC;YACnG,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}

package/dist/policy.d.ts

@@ -0,0 +1,42 @@
+export declare const MODEL = "gpt-5.6-sol";
+export declare const MODEL_REASONING = "xhigh";
+export type ReasoningEffort = "low" | "high" | "xhigh";
+export declare const COMPUTER_USE_TOOLS: readonly ["list_apps", "get_app_state", "click", "perform_secondary_action", "set_value", "select_text", "scroll", "drag", "press_key", "type_text"];
+export type ComputerUseTool = (typeof COMPUTER_USE_TOOLS)[number];
+export type Mode = "list" | "inspect" | "act" | "dictionary_lookup";
+export type PermissionMode = "safe" | "full-permissions";
+export declare const DICTIONARY_BUNDLE_ID = "com.apple.Dictionary";
+export declare const DICTIONARY_NEUTRAL_QUERY = "dictionary";
+export interface NativeAppInput {
+    mode: Mode;
+    app?: string;
+    task?: string;
+    query?: string;
+    cleanup?: boolean;
+    cleanup_instructions?: string;
+    required_capabilities?: ComputerUseTool[];
+}
+export interface ValidatedRequest {
+    mode: Mode;
+    permissionMode: PermissionMode;
+    app?: string;
+    task?: string;
+    query?: string;
+    cleanup: boolean;
+    cleanupInstructions?: string;
+    requiredCapabilities: ComputerUseTool[];
+    mutating: boolean;
+    maxComputerUseCalls: number;
+    reasoningEffort: ReasoningEffort;
+}
+export declare class PolicyError extends Error {
+    constructor(message: string);
+}
+export declare function validateRequest(input: NativeAppInput, permissionMode?: PermissionMode): ValidatedRequest;
+export declare function allowedToolsForRequest(request: ValidatedRequest): ComputerUseTool[];
+export declare function isDictionaryAlwaysAllowed(request: ValidatedRequest, resolvedBundleId: string | undefined, verifiedSystemDictionary: boolean): boolean;
+export declare function requiresPiConfirmation(request: ValidatedRequest, resolvedBundleId: string | undefined, verifiedSystemDictionary: boolean): boolean;
+export declare function validateResolvedAppIdentity(request: ValidatedRequest, resolvedBundleId: string | undefined, verifiedSystemDictionary: boolean): void;
+export type ComputerUseArgumentValidator = (tool: string, args: Record<string, unknown>) => string | undefined;
+export declare function createDictionaryArgumentValidator(query: string): ComputerUseArgumentValidator;
+export declare function validateObservedMethods(request: ValidatedRequest, methods: string[]): void;