codex-computer-use-mcp 0.1.0

package/dist/policy.js

@@ -0,0 +1,428 @@
+export const MODEL = "gpt-5.6-sol";
+export const MODEL_REASONING = "xhigh";
+export const COMPUTER_USE_TOOLS = [
+    "list_apps",
+    "get_app_state",
+    "click",
+    "perform_secondary_action",
+    "set_value",
+    "select_text",
+    "scroll",
+    "drag",
+    "press_key",
+    "type_text",
+];
+export const DICTIONARY_BUNDLE_ID = "com.apple.Dictionary";
+export const DICTIONARY_NEUTRAL_QUERY = "dictionary";
+export class PolicyError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "PolicyError";
+    }
+}
+const BLOCKED_APP_PATTERNS = [
+    {
+        pattern: /(?:^|\b)(?:terminal|iterm\w*|ghostty|cmux|warp|wezterm|alacritty|kitty|hyper|tabby)(?:\b|$)/i,
+        category: "terminal/shell",
+    },
+    { pattern: /(?:^|\b)(?:chatgpt|codex)(?:\b|$)/i, category: "agent host" },
+    { pattern: /(?:^|\b)(?:keychain|1password|bitwarden|dashlane|lastpass|password)(?:\b|$)/i, category: "credentials" },
+    { pattern: /(?:^|\b)(?:mail|messages|slack|whatsapp|teams|discord|telegram|signal)(?:\b|$)/i, category: "communications" },
+    {
+        pattern: /(?:^|\b)(?:safari|chrome|firefox|arc|browser|edge|opera|vivaldi|brave|orion)(?:\b|$)/i,
+        category: "browser",
+    },
+    {
+        pattern: /(?:^|\b)(?:vscode|vs code|visual studio code|cursor|windsurf|zed)(?:\b|$)/i,
+        category: "editor/agent host",
+    },
+    { pattern: /(?:^|\b)(?:system settings|system preferences|settings|wallet|app store)(?:\b|$)/i, category: "system/payment settings" },
+];
+const BLOCKED_BUNDLE_ID_PATTERNS = [
+    {
+        pattern: /(?:^|\.)(?:terminal|iterm2?|ghostty|cmuxterm|warp(?:-stable)?|wezterm|alacritty|kitty|hyper|tabby)(?:\.|$)/i,
+        category: "terminal/shell",
+    },
+    { pattern: /(?:^|\.)(?:chatgpt|codex|chat)(?:\.|$)/i, category: "agent host" },
+    {
+        pattern: /(?:^|\.)(?:keychainaccess|1password|bitwarden|dashlane\w*|lastpass\w*|passwords?)(?:\.|$)/i,
+        category: "credentials",
+    },
+    {
+        pattern: /(?:^|\.)(?:mail|mobilesms|slack(?:macgap)?|whatsapp|teams2?|discord|telegram|signal(?:-desktop)?)(?:\.|$)/i,
+        category: "communications",
+    },
+    {
+        pattern: /(?:^|\.)(?:safari|chrome|firefox|browser|edgemac|opera|vivaldi|brave|orion|kagimacos)(?:\.|$)/i,
+        category: "browser",
+    },
+    { pattern: /(?:^|\.)(?:vscode\w*|cursor|windsurf|zed)(?:\.|$)/i, category: "editor/agent host" },
+    { pattern: /(?:^|\.)(?:systempreferences|wallet|appstore)(?:\.|$)/i, category: "system/payment settings" },
+];
+const BLOCKED_OPAQUE_BUNDLE_IDS = new Map([
+    ["com.todesktop.230313mzl4w4u92", "editor/agent host"], // Cursor
+]);
+function blockedSafeAppCategory(value) {
+    for (const blocked of BLOCKED_APP_PATTERNS) {
+        if (blocked.pattern.test(value))
+            return blocked.category;
+    }
+    if (/^[A-Za-z0-9-]+(?:\.[A-Za-z0-9-]+)+$/.test(value)) {
+        const exactCategory = BLOCKED_OPAQUE_BUNDLE_IDS.get(value.toLowerCase());
+        if (exactCategory)
+            return exactCategory;
+        for (const blocked of BLOCKED_BUNDLE_ID_PATTERNS) {
+            if (blocked.pattern.test(value))
+                return blocked.category;
+        }
+    }
+    return undefined;
+}
+const BLOCKED_TASK_PATTERNS = [
+    { pattern: /\b(?:send|post|publish|share|upload|message|email|call)\b/i, category: "external communication" },
+    { pattern: /\b(?:buy|purchase|checkout|pay|payment|subscribe)\b/i, category: "purchase/payment" },
+    { pattern: /\b(?:password|passcode|credential|secret|token|api key|login|log in|sign in|authenticate)\b/i, category: "credentials/authentication" },
+    { pattern: /\b(?:sudo|admin|administrator|privacy prompt|permission prompt|tcc)\b/i, category: "admin/privacy approval" },
+    { pattern: /\b(?:delete|erase|trash|uninstall|wipe)\b/i, category: "destructive deletion" },
+];
+function validateSafeApp(app) {
+    if (typeof app !== "string")
+        throw new PolicyError("inspect/act requires an app name or bundle identifier");
+    const trimmed = app.trim();
+    if (!trimmed || trimmed.length > 120)
+        throw new PolicyError("App must be 1-120 characters");
+    if (/[\u0000-\u001f\u007f\n\r]/.test(trimmed) || trimmed.includes("/") || /:/.test(trimmed)) {
+        throw new PolicyError("App must be a name or bundle identifier, not a path, URL, or control string");
+    }
+    const blockedCategory = blockedSafeAppCategory(trimmed);
+    if (blockedCategory)
+        throw new PolicyError(`App is blocked by the ${blockedCategory} safety policy`);
+    return trimmed;
+}
+function validateFullApp(app) {
+    if (typeof app !== "string")
+        throw new PolicyError("inspect/act requires an app target");
+    const trimmed = app.trim();
+    if (!trimmed || trimmed.length > 500)
+        throw new PolicyError("Full-permissions app target must be 1-500 characters");
+    if (/[\u0000-\u001f\u007f]/.test(trimmed))
+        throw new PolicyError("App target contains unsupported control characters");
+    return trimmed;
+}
+function validateSafeTask(task) {
+    if (typeof task !== "string")
+        throw new PolicyError("act requires a concrete task");
+    const trimmed = task.trim();
+    if (!trimmed || trimmed.length > 1000)
+        throw new PolicyError("Task must be 1-1000 characters");
+    if (/[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/.test(trimmed)) {
+        throw new PolicyError("Task contains unsupported control characters");
+    }
+    for (const blocked of BLOCKED_TASK_PATTERNS) {
+        if (blocked.pattern.test(trimmed))
+            throw new PolicyError(`Task is blocked as ${blocked.category}`);
+    }
+    return trimmed;
+}
+function isDictionarySelector(value) {
+    if (typeof value !== "string")
+        return false;
+    const normalized = value.trim().toLowerCase();
+    return normalized === "dictionary" || normalized === DICTIONARY_BUNDLE_ID.toLowerCase();
+}
+function validateFullTask(task) {
+    if (typeof task !== "string")
+        throw new PolicyError("act requires a concrete task");
+    const trimmed = task.trim();
+    if (!trimmed || trimmed.length > 4000)
+        throw new PolicyError("Full-permissions task must be 1-4000 characters");
+    if (/[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/.test(trimmed)) {
+        throw new PolicyError("Task contains unsupported control characters");
+    }
+    return trimmed;
+}
+function validateDictionaryQuery(value) {
+    if (typeof value !== "string")
+        throw new PolicyError("dictionary_lookup requires a query");
+    const trimmed = value.trim();
+    if (!trimmed || trimmed.length > 200)
+        throw new PolicyError("Dictionary query must be 1-200 characters");
+    if (/[\u0000-\u001f\u007f]/.test(trimmed))
+        throw new PolicyError("Dictionary query contains unsupported control characters");
+    return trimmed;
+}
+function validateCleanupInstructions(value, permissionMode) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== "string")
+        throw new PolicyError("cleanup_instructions must be text");
+    const trimmed = value.trim();
+    const maxLength = permissionMode === "full-permissions" ? 2000 : 500;
+    if (!trimmed || trimmed.length > maxLength)
+        throw new PolicyError(`cleanup_instructions must be 1-${maxLength} characters`);
+    if (/[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/.test(trimmed)) {
+        throw new PolicyError("Cleanup instructions contain unsupported control characters");
+    }
+    if (permissionMode === "safe") {
+        for (const blocked of BLOCKED_TASK_PATTERNS) {
+            if (blocked.pattern.test(trimmed))
+                throw new PolicyError(`Cleanup instructions are blocked as ${blocked.category}`);
+        }
+    }
+    return trimmed;
+}
+function validateRequiredCapabilities(value) {
+    if (value === undefined)
+        return [];
+    if (!Array.isArray(value))
+        throw new PolicyError("required_capabilities must be an array");
+    const available = new Set(COMPUTER_USE_TOOLS);
+    const result = [];
+    for (const item of value) {
+        if (typeof item !== "string" || !available.has(item))
+            throw new PolicyError(`Unknown Computer Use capability: ${String(item)}`);
+        if (item === "list_apps" || item === "get_app_state")
+            continue;
+        if (!result.includes(item))
+            result.push(item);
+    }
+    return result;
+}
+export function validateRequest(input, permissionMode = "safe") {
+    if (!input || typeof input !== "object")
+        throw new PolicyError("Request must be an object");
+    if (permissionMode !== "safe" && permissionMode !== "full-permissions")
+        throw new PolicyError("Invalid permission mode");
+    if (permissionMode === "safe" && input.mode !== "list") {
+        throw new PolicyError("Standalone safe mode permits only list: target and argument checks are observable only after the signed official client dispatches a call. Enable explicit full-permissions only if that broad authorization is acceptable.");
+    }
+    switch (input.mode) {
+        case "list":
+            if (input.app !== undefined ||
+                input.task !== undefined ||
+                input.query !== undefined ||
+                input.cleanup !== undefined ||
+                input.cleanup_instructions !== undefined ||
+                input.required_capabilities !== undefined) {
+                throw new PolicyError("list accepts only mode");
+            }
+            return {
+                mode: "list",
+                permissionMode,
+                cleanup: true,
+                requiredCapabilities: [],
+                mutating: false,
+                maxComputerUseCalls: 1,
+                reasoningEffort: "low",
+            };
+        case "inspect":
+            if (input.task !== undefined ||
+                input.query !== undefined ||
+                input.cleanup !== undefined ||
+                input.cleanup_instructions !== undefined ||
+                input.required_capabilities !== undefined) {
+                throw new PolicyError("inspect accepts only app");
+            }
+            return {
+                mode: "inspect",
+                permissionMode,
+                app: permissionMode === "full-permissions" ? validateFullApp(input.app) : validateSafeApp(input.app),
+                cleanup: true,
+                requiredCapabilities: [],
+                mutating: false,
+                maxComputerUseCalls: 3,
+                reasoningEffort: "high",
+            };
+        case "act": {
+            const app = permissionMode === "full-permissions" ? validateFullApp(input.app) : validateSafeApp(input.app);
+            if (permissionMode === "safe" && isDictionarySelector(app)) {
+                throw new PolicyError("Dictionary is restricted to inspect or dictionary_lookup in safe mode");
+            }
+            if (input.query !== undefined)
+                throw new PolicyError("act does not accept query; use task");
+            const cleanup = input.cleanup ?? (permissionMode === "safe");
+            if (!cleanup && input.cleanup_instructions !== undefined) {
+                throw new PolicyError("act does not accept cleanup_instructions when cleanup is false");
+            }
+            return {
+                mode: "act",
+                permissionMode,
+                app,
+                task: permissionMode === "full-permissions" ? validateFullTask(input.task) : validateSafeTask(input.task),
+                cleanup,
+                cleanupInstructions: cleanup ? validateCleanupInstructions(input.cleanup_instructions, permissionMode) : undefined,
+                requiredCapabilities: validateRequiredCapabilities(input.required_capabilities),
+                mutating: true,
+                maxComputerUseCalls: 50,
+                reasoningEffort: "xhigh",
+            };
+        }
+        case "dictionary_lookup":
+            if (input.app !== undefined ||
+                input.task !== undefined ||
+                input.cleanup !== undefined ||
+                input.cleanup_instructions !== undefined ||
+                input.required_capabilities !== undefined) {
+                throw new PolicyError("dictionary_lookup accepts only query");
+            }
+            return {
+                mode: "dictionary_lookup",
+                permissionMode,
+                app: DICTIONARY_BUNDLE_ID,
+                query: validateDictionaryQuery(input.query),
+                cleanup: true,
+                requiredCapabilities: ["set_value"],
+                mutating: true,
+                maxComputerUseCalls: 8,
+                reasoningEffort: "high",
+            };
+        default:
+            throw new PolicyError(`Unsupported mode: ${String(input.mode)}`);
+    }
+}
+export function allowedToolsForRequest(request) {
+    switch (request.mode) {
+        case "list":
+            return ["list_apps"];
+        case "inspect":
+            return ["list_apps", "get_app_state"];
+        case "act":
+            return [...COMPUTER_USE_TOOLS];
+        case "dictionary_lookup":
+            return ["get_app_state", "set_value", "scroll"];
+    }
+}
+export function isDictionaryAlwaysAllowed(request, resolvedBundleId, verifiedSystemDictionary) {
+    return (request.permissionMode === "safe" &&
+        verifiedSystemDictionary &&
+        resolvedBundleId === DICTIONARY_BUNDLE_ID &&
+        (request.mode === "inspect" || request.mode === "dictionary_lookup"));
+}
+export function requiresPiConfirmation(request, resolvedBundleId, verifiedSystemDictionary) {
+    if (request.permissionMode === "full-permissions")
+        return false;
+    return request.mode !== "list" && !isDictionaryAlwaysAllowed(request, resolvedBundleId, verifiedSystemDictionary);
+}
+export function validateResolvedAppIdentity(request, resolvedBundleId, verifiedSystemDictionary) {
+    if (request.permissionMode === "safe" && resolvedBundleId) {
+        const blockedCategory = blockedSafeAppCategory(resolvedBundleId);
+        if (blockedCategory) {
+            throw new PolicyError(`Resolved app is blocked by the ${blockedCategory} safety policy`);
+        }
+    }
+    if (request.mode === "dictionary_lookup" && !verifiedSystemDictionary) {
+        throw new PolicyError("Dictionary lookup requires the running Apple-signed system Dictionary at its fixed system path");
+    }
+    if (request.permissionMode === "safe" && request.mode === "act" && verifiedSystemDictionary) {
+        throw new PolicyError("Generic actions against Dictionary are blocked after canonical identity resolution in safe mode");
+    }
+}
+export function createDictionaryArgumentValidator(query) {
+    let setCount = 0;
+    let searchElement;
+    return (tool, args) => {
+        if (tool === "set_value") {
+            if (typeof args.element_index !== "string" || typeof args.value !== "string") {
+                return "Dictionary set_value arguments were not typed strings";
+            }
+            setCount += 1;
+            if (setCount === 1) {
+                if (args.value !== query)
+                    return "Dictionary lookup attempted to set a value other than the approved query";
+                searchElement = args.element_index;
+                return undefined;
+            }
+            if (setCount === 2) {
+                if (args.element_index !== searchElement)
+                    return "Dictionary cleanup targeted a different element than the lookup";
+                if (args.value !== DICTIONARY_NEUTRAL_QUERY)
+                    return "Dictionary cleanup did not restore the fixed neutral query";
+                return undefined;
+            }
+            return "Dictionary lookup attempted more than two value assignments";
+        }
+        if (tool === "scroll") {
+            if (!["up", "down"].includes(String(args.direction)))
+                return "Dictionary lookup attempted a non-vertical scroll";
+            if (args.pages !== undefined && (typeof args.pages !== "number" || args.pages <= 0 || args.pages > 3)) {
+                return "Dictionary lookup attempted an out-of-bounds scroll";
+            }
+        }
+        return undefined;
+    };
+}
+const MUTATION_METHODS = new Set([
+    "click",
+    "perform_secondary_action",
+    "set_value",
+    "select_text",
+    "scroll",
+    "drag",
+    "press_key",
+    "type_text",
+]);
+export function validateObservedMethods(request, methods) {
+    if (methods.length === 0)
+        throw new PolicyError("Codex completed without an observed Computer Use method call");
+    if (methods.length > request.maxComputerUseCalls) {
+        throw new PolicyError(`Computer Use call budget exceeded (${methods.length}/${request.maxComputerUseCalls})`);
+    }
+    const available = new Set(allowedToolsForRequest(request));
+    for (const method of methods) {
+        if (!available.has(method))
+            throw new PolicyError(`Computer Use method is outside policy: ${method}`);
+    }
+    if (request.mode === "list") {
+        if (methods.length !== 1 || methods[0] !== "list_apps")
+            throw new PolicyError("list must make exactly one list_apps call");
+        return;
+    }
+    if (!methods.includes("get_app_state"))
+        throw new PolicyError(`${request.mode} must inspect app state`);
+    if (request.mode === "inspect") {
+        if (methods.some((method) => MUTATION_METHODS.has(method))) {
+            throw new PolicyError("inspect attempted a mutating Computer Use method");
+        }
+        return;
+    }
+    if (request.mode === "dictionary_lookup") {
+        const stateIndexes = methods
+            .map((method, index) => (method === "get_app_state" ? index : -1))
+            .filter((index) => index >= 0);
+        const setIndexes = methods
+            .map((method, index) => (method === "set_value" ? index : -1))
+            .filter((index) => index >= 0);
+        if (setIndexes.length !== 2)
+            throw new PolicyError("dictionary_lookup must set the query once and restore the fixed neutral query once");
+        if (stateIndexes[0] > setIndexes[0])
+            throw new PolicyError("dictionary_lookup did not inspect Dictionary before setting the query");
+        if (!stateIndexes.some((index) => index > setIndexes[0] && index < setIndexes[1])) {
+            throw new PolicyError("dictionary_lookup did not inspect the lookup result before cleanup");
+        }
+        if (!stateIndexes.some((index) => index > setIndexes[1])) {
+            throw new PolicyError("dictionary_lookup did not verify restoration of the fixed neutral query");
+        }
+        return;
+    }
+    const mutationIndexes = methods
+        .map((method, index) => (MUTATION_METHODS.has(method) ? index : -1))
+        .filter((index) => index >= 0);
+    const stateIndexes = methods
+        .map((method, index) => (method === "get_app_state" ? index : -1))
+        .filter((index) => index >= 0);
+    if (mutationIndexes.length === 0)
+        throw new PolicyError("act completed without a mutating Computer Use method");
+    if (stateIndexes[0] > mutationIndexes[0])
+        throw new PolicyError("act did not inspect the target before mutation");
+    if (!stateIndexes.some((index) => index > mutationIndexes.at(-1))) {
+        throw new PolicyError("act did not verify target state after the final mutation");
+    }
+    for (const capability of request.requiredCapabilities) {
+        if (!methods.includes(capability))
+            throw new PolicyError(`Required Computer Use capability was not exercised: ${capability}`);
+    }
+    if (request.cleanup && stateIndexes.filter((index) => index > mutationIndexes[0]).length < 2) {
+        throw new PolicyError("act did not separately verify task result and cleanup state");
+    }
+}
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,KAAK,GAAG,aAAa,CAAC;AACnC,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AAGvC,MAAM,CAAC,MAAM,kBAAkB,GAAG;IACjC,WAAW;IACX,eAAe;IACf,OAAO;IACP,0BAA0B;IAC1B,WAAW;IACX,aAAa;IACb,QAAQ;IACR,MAAM;IACN,WAAW;IACX,WAAW;CACF,CAAC;AAKX,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAC3D,MAAM,CAAC,MAAM,wBAAwB,GAAG,YAAY,CAAC;AA0BrD,MAAM,OAAO,WAAY,SAAQ,KAAK;IACrC,YAAY,OAAe;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC3B,CAAC;CACD;AAED,MAAM,oBAAoB,GAAiD;IAC1E;QACC,OAAO,EAAE,8FAA8F;QACvG,QAAQ,EAAE,gBAAgB;KAC1B;IACD,EAAE,OAAO,EAAE,oCAAoC,EAAE,QAAQ,EAAE,YAAY,EAAE;IACzE,EAAE,OAAO,EAAE,8EAA8E,EAAE,QAAQ,EAAE,aAAa,EAAE;IACpH,EAAE,OAAO,EAAE,iFAAiF,EAAE,QAAQ,EAAE,gBAAgB,EAAE;IAC1H;QACC,OAAO,EAAE,uFAAuF;QAChG,QAAQ,EAAE,SAAS;KACnB;IACD;QACC,OAAO,EAAE,4EAA4E;QACrF,QAAQ,EAAE,mBAAmB;KAC7B;IACD,EAAE,OAAO,EAAE,mFAAmF,EAAE,QAAQ,EAAE,yBAAyB,EAAE;CACrI,CAAC;AAEF,MAAM,0BAA0B,GAAiD;IAChF;QACC,OAAO,EAAE,6GAA6G;QACtH,QAAQ,EAAE,gBAAgB;KAC1B;IACD,EAAE,OAAO,EAAE,yCAAyC,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC9E;QACC,OAAO,EAAE,4FAA4F;QACrG,QAAQ,EAAE,aAAa;KACvB;IACD;QACC,OAAO,EAAE,4GAA4G;QACrH,QAAQ,EAAE,gBAAgB;KAC1B;IACD;QACC,OAAO,EAAE,gGAAgG;QACzG,QAAQ,EAAE,SAAS;KACnB;IACD,EAAE,OAAO,EAAE,oDAAoD,EAAE,QAAQ,EAAE,mBAAmB,EAAE;IAChG,EAAE,OAAO,EAAE,wDAAwD,EAAE,QAAQ,EAAE,yBAAyB,EAAE;CAC1G,CAAC;AAEF,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAiB;IACzD,CAAC,+BAA+B,EAAE,mBAAmB,CAAC,EAAE,SAAS;CACjE,CAAC,CAAC;AAEH,SAAS,sBAAsB,CAAC,KAAa;IAC5C,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,QAAQ,CAAC;IAC1D,CAAC;IACD,IAAI,qCAAqC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,aAAa,GAAG,yBAAyB,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACzE,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,KAAK,MAAM,OAAO,IAAI,0BAA0B,EAAE,CAAC;YAClD,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC,QAAQ,CAAC;QAC1D,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,qBAAqB,GAAiD;IAC3E,EAAE,OAAO,EAAE,4DAA4D,EAAE,QAAQ,EAAE,wBAAwB,EAAE;IAC7G,EAAE,OAAO,EAAE,sDAAsD,EAAE,QAAQ,EAAE,kBAAkB,EAAE;IACjG,EAAE,OAAO,EAAE,8FAA8F,EAAE,QAAQ,EAAE,4BAA4B,EAAE;IACnJ,EAAE,OAAO,EAAE,wEAAwE,EAAE,QAAQ,EAAE,wBAAwB,EAAE;IACzH,EAAE,OAAO,EAAE,4CAA4C,EAAE,QAAQ,EAAE,sBAAsB,EAAE;CAC3F,CAAC;AAEF,SAAS,eAAe,CAAC,GAAY;IACpC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,WAAW,CAAC,uDAAuD,CAAC,CAAC;IAC5G,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,WAAW,CAAC,8BAA8B,CAAC,CAAC;IAC5F,IAAI,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,WAAW,CAAC,6EAA6E,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,eAAe,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,eAAe;QAAE,MAAM,IAAI,WAAW,CAAC,yBAAyB,eAAe,gBAAgB,CAAC,CAAC;IACrG,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,GAAY;IACpC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,WAAW,CAAC,oCAAoC,CAAC,CAAC;IACzF,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,WAAW,CAAC,sDAAsD,CAAC,CAAC;IACpH,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,oDAAoD,CAAC,CAAC;IACvH,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAa;IACtC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,WAAW,CAAC,8BAA8B,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI;QAAE,MAAM,IAAI,WAAW,CAAC,gCAAgC,CAAC,CAAC;IAC/F,IAAI,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,WAAW,CAAC,8CAA8C,CAAC,CAAC;IACvE,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,sBAAsB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,UAAU,KAAK,YAAY,IAAI,UAAU,KAAK,oBAAoB,CAAC,WAAW,EAAE,CAAC;AACzF,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAa;IACtC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,WAAW,CAAC,8BAA8B,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI;QAAE,MAAM,IAAI,WAAW,CAAC,iDAAiD,CAAC,CAAC;IAChH,IAAI,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,WAAW,CAAC,8CAA8C,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,WAAW,CAAC,oCAAoC,CAAC,CAAC;IAC3F,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,WAAW,CAAC,2CAA2C,CAAC,CAAC;IACzG,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,0DAA0D,CAAC,CAAC;IAC7H,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc,EAAE,cAA8B;IAClF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,WAAW,CAAC,mCAAmC,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,cAAc,KAAK,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IACrE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS;QAAE,MAAM,IAAI,WAAW,CAAC,kCAAkC,SAAS,aAAa,CAAC,CAAC;IAC5H,IAAI,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,WAAW,CAAC,6DAA6D,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;QAC/B,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,WAAW,CAAC,uCAAuC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrH,CAAC;IACF,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,4BAA4B,CAAC,KAAc;IACnD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,wCAAwC,CAAC,CAAC;IAC3F,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,kBAAkB,CAAC,CAAC;IACtD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,oCAAoC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChI,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,eAAe;YAAE,SAAS;QAC/D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAuB,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,IAAuB,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAqB,EAAE,cAAc,GAAmB,MAAM;IAC7F,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,WAAW,CAAC,2BAA2B,CAAC,CAAC;IAC5F,IAAI,cAAc,KAAK,MAAM,IAAI,cAAc,KAAK,kBAAkB;QAAE,MAAM,IAAI,WAAW,CAAC,yBAAyB,CAAC,CAAC;IACzH,IAAI,cAAc,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACxD,MAAM,IAAI,WAAW,CACpB,6NAA6N,CAC7N,CAAC;IACH,CAAC;IAED,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,MAAM;YACV,IACC,KAAK,CAAC,GAAG,KAAK,SAAS;gBACvB,KAAK,CAAC,IAAI,KAAK,SAAS;gBACxB,KAAK,CAAC,KAAK,KAAK,SAAS;gBACzB,KAAK,CAAC,OAAO,KAAK,SAAS;gBAC3B,KAAK,CAAC,oBAAoB,KAAK,SAAS;gBACxC,KAAK,CAAC,qBAAqB,KAAK,SAAS,EACxC,CAAC;gBACF,MAAM,IAAI,WAAW,CAAC,wBAAwB,CAAC,CAAC;YACjD,CAAC;YACD,OAAO;gBACN,IAAI,EAAE,MAAM;gBACZ,cAAc;gBACd,OAAO,EAAE,IAAI;gBACb,oBAAoB,EAAE,EAAE;gBACxB,QAAQ,EAAE,KAAK;gBACf,mBAAmB,EAAE,CAAC;gBACtB,eAAe,EAAE,KAAK;aACtB,CAAC;QAEH,KAAK,SAAS;YACb,IACC,KAAK,CAAC,IAAI,KAAK,SAAS;gBACxB,KAAK,CAAC,KAAK,KAAK,SAAS;gBACzB,KAAK,CAAC,OAAO,KAAK,SAAS;gBAC3B,KAAK,CAAC,oBAAoB,KAAK,SAAS;gBACxC,KAAK,CAAC,qBAAqB,KAAK,SAAS,EACxC,CAAC;gBACF,MAAM,IAAI,WAAW,CAAC,0BAA0B,CAAC,CAAC;YACnD,CAAC;YACD,OAAO;gBACN,IAAI,EAAE,SAAS;gBACf,cAAc;gBACd,GAAG,EAAE,cAAc,KAAK,kBAAkB,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC;gBACpG,OAAO,EAAE,IAAI;gBACb,oBAAoB,EAAE,EAAE;gBACxB,QAAQ,EAAE,KAAK;gBACf,mBAAmB,EAAE,CAAC;gBACtB,eAAe,EAAE,MAAM;aACvB,CAAC;QAEH,KAAK,KAAK,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,cAAc,KAAK,kBAAkB,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5G,IAAI,cAAc,KAAK,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5D,MAAM,IAAI,WAAW,CAAC,uEAAuE,CAAC,CAAC;YAChG,CAAC;YACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;gBAAE,MAAM,IAAI,WAAW,CAAC,qCAAqC,CAAC,CAAC;YAC5F,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,cAAc,KAAK,MAAM,CAAC,CAAC;YAC7D,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;gBAC1D,MAAM,IAAI,WAAW,CAAC,gEAAgE,CAAC,CAAC;YACzF,CAAC;YACD,OAAO;gBACN,IAAI,EAAE,KAAK;gBACX,cAAc;gBACd,GAAG;gBACH,IAAI,EAAE,cAAc,KAAK,kBAAkB,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC;gBACzG,OAAO;gBACP,mBAAmB,EAAE,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,KAAK,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS;gBAClH,oBAAoB,EAAE,4BAA4B,CAAC,KAAK,CAAC,qBAAqB,CAAC;gBAC/E,QAAQ,EAAE,IAAI;gBACd,mBAAmB,EAAE,EAAE;gBACvB,eAAe,EAAE,OAAO;aACxB,CAAC;QACH,CAAC;QAED,KAAK,mBAAmB;YACvB,IACC,KAAK,CAAC,GAAG,KAAK,SAAS;gBACvB,KAAK,CAAC,IAAI,KAAK,SAAS;gBACxB,KAAK,CAAC,OAAO,KAAK,SAAS;gBAC3B,KAAK,CAAC,oBAAoB,KAAK,SAAS;gBACxC,KAAK,CAAC,qBAAqB,KAAK,SAAS,EACxC,CAAC;gBACF,MAAM,IAAI,WAAW,CAAC,sCAAsC,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO;gBACN,IAAI,EAAE,mBAAmB;gBACzB,cAAc;gBACd,GAAG,EAAE,oBAAoB;gBACzB,KAAK,EAAE,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC;gBAC3C,OAAO,EAAE,IAAI;gBACb,oBAAoB,EAAE,CAAC,WAAW,CAAC;gBACnC,QAAQ,EAAE,IAAI;gBACd,mBAAmB,EAAE,CAAC;gBACtB,eAAe,EAAE,MAAM;aACvB,CAAC;QAEH;YACC,MAAM,IAAI,WAAW,CAAC,qBAAqB,MAAM,CAAE,KAAwB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;AACF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAyB;IAC/D,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,MAAM;YACV,OAAO,CAAC,WAAW,CAAC,CAAC;QACtB,KAAK,SAAS;YACb,OAAO,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;QACvC,KAAK,KAAK;YACT,OAAO,CAAC,GAAG,kBAAkB,CAAC,CAAC;QAChC,KAAK,mBAAmB;YACvB,OAAO,CAAC,eAAe,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC;AACF,CAAC;AAED,MAAM,UAAU,yBAAyB,CACxC,OAAyB,EACzB,gBAAoC,EACpC,wBAAiC;IAEjC,OAAO,CACN,OAAO,CAAC,cAAc,KAAK,MAAM;QACjC,wBAAwB;QACxB,gBAAgB,KAAK,oBAAoB;QACzC,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB,CAAC,CACpE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CACrC,OAAyB,EACzB,gBAAoC,EACpC,wBAAiC;IAEjC,IAAI,OAAO,CAAC,cAAc,KAAK,kBAAkB;QAAE,OAAO,KAAK,CAAC;IAChE,OAAO,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;AACnH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAC1C,OAAyB,EACzB,gBAAoC,EACpC,wBAAiC;IAEjC,IAAI,OAAO,CAAC,cAAc,KAAK,MAAM,IAAI,gBAAgB,EAAE,CAAC;QAC3D,MAAM,eAAe,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;QACjE,IAAI,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,WAAW,CAAC,kCAAkC,eAAe,gBAAgB,CAAC,CAAC;QAC1F,CAAC;IACF,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB,IAAI,CAAC,wBAAwB,EAAE,CAAC;QACvE,MAAM,IAAI,WAAW,CAAC,gGAAgG,CAAC,CAAC;IACzH,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,IAAI,wBAAwB,EAAE,CAAC;QAC7F,MAAM,IAAI,WAAW,CAAC,iGAAiG,CAAC,CAAC;IAC1H,CAAC;AACF,CAAC;AAID,MAAM,UAAU,iCAAiC,CAAC,KAAa;IAC9D,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,aAAiC,CAAC;IACtC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YAC1B,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9E,OAAO,uDAAuD,CAAC;YAChE,CAAC;YACD,QAAQ,IAAI,CAAC,CAAC;YACd,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACpB,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;oBAAE,OAAO,0EAA0E,CAAC;gBAC5G,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;gBACnC,OAAO,SAAS,CAAC;YAClB,CAAC;YACD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACpB,IAAI,IAAI,CAAC,aAAa,KAAK,aAAa;oBAAE,OAAO,iEAAiE,CAAC;gBACnH,IAAI,IAAI,CAAC,KAAK,KAAK,wBAAwB;oBAAE,OAAO,4DAA4D,CAAC;gBACjH,OAAO,SAAS,CAAC;YAClB,CAAC;YACD,OAAO,6DAA6D,CAAC;QACtE,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAE,OAAO,mDAAmD,CAAC;YACjH,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;gBACvG,OAAO,qDAAqD,CAAC;YAC9D,CAAC;QACF,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC,CAAC;AACH,CAAC;AAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAkB;IACjD,OAAO;IACP,0BAA0B;IAC1B,WAAW;IACX,aAAa;IACb,QAAQ;IACR,MAAM;IACN,WAAW;IACX,WAAW;CACX,CAAC,CAAC;AAEH,MAAM,UAAU,uBAAuB,CAAC,OAAyB,EAAE,OAAiB;IACnF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,8DAA8D,CAAC,CAAC;IAChH,IAAI,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAClD,MAAM,IAAI,WAAW,CAAC,sCAAsC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,mBAAmB,GAAG,CAAC,CAAC;IAC/G,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,0CAA0C,MAAM,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,WAAW;YAAE,MAAM,IAAI,WAAW,CAAC,2CAA2C,CAAC,CAAC;QAC3H,OAAO;IACR,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,yBAAyB,CAAC,CAAC;IACxG,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAyB,CAAC,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,WAAW,CAAC,kDAAkD,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO;IACR,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QAC1C,MAAM,YAAY,GAAG,OAAO;aAC1B,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACjE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;QAChC,MAAM,UAAU,GAAG,OAAO;aACxB,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aAC7D,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;QAChC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,oFAAoF,CAAC,CAAC;QACzI,IAAI,YAAY,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,uEAAuE,CAAC,CAAC;QACpI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,WAAW,CAAC,oEAAoE,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,WAAW,CAAC,yEAAyE,CAAC,CAAC;QAClG,CAAC;QACD,OAAO;IACR,CAAC;IAED,MAAM,eAAe,GAAG,OAAO;SAC7B,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAyB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACtF,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,OAAO;SAC1B,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACjE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;IAChC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,sDAAsD,CAAC,CAAC;IAChH,IAAI,YAAY,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,gDAAgD,CAAC,CAAC;IAClH,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,WAAW,CAAC,0DAA0D,CAAC,CAAC;IACnF,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACvD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,uDAAuD,UAAU,EAAE,CAAC,CAAC;IAC/H,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9F,MAAM,IAAI,WAAW,CAAC,6DAA6D,CAAC,CAAC;IACtF,CAAC;AACF,CAAC"}

package/dist/prompt.d.ts

@@ -0,0 +1,62 @@
+import { type ValidatedRequest } from "./policy.ts";
+export declare const RESULT_SCHEMA: {
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["status", "app", "mode", "summary", "cleaned", "approvalRequired", "usedCapabilities", "apps", "message"];
+    readonly properties: {
+        readonly status: {
+            readonly type: "string";
+            readonly enum: readonly ["ok", "approval_required", "blocked", "error"];
+        };
+        readonly app: {
+            readonly type: "string";
+            readonly maxLength: 500;
+        };
+        readonly mode: {
+            readonly type: "string";
+            readonly enum: readonly ["list", "inspect", "act", "dictionary_lookup"];
+        };
+        readonly summary: {
+            readonly type: "string";
+            readonly maxLength: 1000;
+        };
+        readonly cleaned: {
+            readonly type: "boolean";
+        };
+        readonly approvalRequired: {
+            readonly type: "boolean";
+        };
+        readonly usedCapabilities: {
+            readonly type: "array";
+            readonly maxItems: 50;
+            readonly items: {
+                readonly type: "string";
+                readonly enum: readonly ["list_apps", "get_app_state", "click", "perform_secondary_action", "set_value", "select_text", "scroll", "drag", "press_key", "type_text"];
+            };
+        };
+        readonly apps: {
+            readonly type: "array";
+            readonly maxItems: 100;
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["name", "bundleId"];
+                readonly properties: {
+                    readonly name: {
+                        readonly type: "string";
+                        readonly maxLength: 120;
+                    };
+                    readonly bundleId: {
+                        readonly type: "string";
+                        readonly maxLength: 160;
+                    };
+                };
+            };
+        };
+        readonly message: {
+            readonly type: "string";
+            readonly maxLength: 256;
+        };
+    };
+};
+export declare function buildPrompt(request: ValidatedRequest, canonicalTargetApp?: string): string;

package/dist/prompt.js

@@ -0,0 +1,119 @@
+import { DICTIONARY_NEUTRAL_QUERY } from "./policy.js";
+export const RESULT_SCHEMA = {
+    type: "object",
+    additionalProperties: false,
+    required: [
+        "status",
+        "app",
+        "mode",
+        "summary",
+        "cleaned",
+        "approvalRequired",
+        "usedCapabilities",
+        "apps",
+        "message",
+    ],
+    properties: {
+        status: { type: "string", enum: ["ok", "approval_required", "blocked", "error"] },
+        app: { type: "string", maxLength: 500 },
+        mode: { type: "string", enum: ["list", "inspect", "act", "dictionary_lookup"] },
+        summary: { type: "string", maxLength: 1000 },
+        cleaned: { type: "boolean" },
+        approvalRequired: { type: "boolean" },
+        usedCapabilities: {
+            type: "array",
+            maxItems: 50,
+            items: {
+                type: "string",
+                enum: [
+                    "list_apps",
+                    "get_app_state",
+                    "click",
+                    "perform_secondary_action",
+                    "set_value",
+                    "select_text",
+                    "scroll",
+                    "drag",
+                    "press_key",
+                    "type_text",
+                ],
+            },
+        },
+        apps: {
+            type: "array",
+            maxItems: 100,
+            items: {
+                type: "object",
+                additionalProperties: false,
+                required: ["name", "bundleId"],
+                properties: {
+                    name: { type: "string", maxLength: 120 },
+                    bundleId: { type: "string", maxLength: 160 },
+                },
+            },
+        },
+        message: { type: "string", maxLength: 256 },
+    },
+};
+function enabledToolNames(request) {
+    switch (request.mode) {
+        case "list":
+            return "computer-use/list_apps";
+        case "inspect":
+            return "computer-use/list_apps, computer-use/get_app_state";
+        case "act":
+            return [
+                "list_apps",
+                "get_app_state",
+                "click",
+                "perform_secondary_action",
+                "set_value",
+                "select_text",
+                "scroll",
+                "drag",
+                "press_key",
+                "type_text",
+            ].map((tool) => `computer-use/${tool}`).join(", ");
+        case "dictionary_lookup":
+            return ["get_app_state", "set_value", "scroll"].map((tool) => `computer-use/${tool}`).join(", ");
+    }
+}
+function operationInstructions(request, targetApp = request.app) {
+    switch (request.mode) {
+        case "list":
+            return `Call list_apps exactly once. Return every discovered app as name + bundleId only. Do not include paths, PIDs, titles, windows, or app contents.`;
+        case "inspect":
+            return `Target only ${JSON.stringify(targetApp)}. Call get_app_state. Use list_apps only if the exact target is rejected and must be resolved. Do not mutate anything. Summarize the target's operational state without reproducing sensitive or unrelated text. Return apps=[].`;
+        case "act": {
+            const cleanup = request.cleanup
+                ? request.cleanupInstructions ??
+                    (request.permissionMode === "full-permissions"
+                        ? "Restore transient state created only for this task, without undoing the requested durable result."
+                        : "Restore transient controls/content changed by this task to a neutral pre-task state without saving, sending, deleting, or affecting another app.")
+                : "Cleanup was disabled; leave the requested target-app result in place.";
+            const required = request.requiredCapabilities.length
+                ? `The following capabilities must genuinely be exercised as part of the task and reported: ${request.requiredCapabilities.join(", ")}.`
+                : request.permissionMode === "full-permissions"
+                    ? "Use any of the complete official typed Computer Use methods needed for the task."
+                    : "Choose the least disruptive Computer Use actions that complete the task.";
+            const authorization = request.permissionMode === "full-permissions"
+                ? "The configured full-permissions mode broadly authorizes this wrapper to execute official-service actions without a wrapper per-operation confirmation."
+                : "The task has been confirmed in Pi safe mode.";
+            return `Target only ${JSON.stringify(targetApp)}. ${authorization} The requested task is: ${JSON.stringify(request.task)}. First call get_app_state, then perform the task using the typed Computer Use tools, then call get_app_state to verify the result. ${required} Cleanup requirement: ${cleanup} ${request.cleanup ? "After observing the task result, perform cleanup and call get_app_state again to verify the cleaned state." : "Do not invent cleanup."} Return apps=[].`;
+        }
+        case "dictionary_lookup":
+            return `Target only ${JSON.stringify(targetApp)}, which must resolve to the Apple-signed system Dictionary app. This is a narrowly authorized local dictionary lookup for ${JSON.stringify(request.query)}. Call get_app_state. Call set_value exactly once on Dictionary's search field with the exact approved query. Call get_app_state to read and summarize the definition; scroll only the definition area vertically by at most three pages if needed. Then call set_value exactly once on the same search field with the fixed neutral value ${JSON.stringify(DICTIONARY_NEUTRAL_QUERY)} and call get_app_state to verify that neutral state. Do not click, type, press keys, invoke secondary actions, drag, raise, activate, save, copy, share, open links, or operate any other control or app. Return apps=[].`;
+    }
+}
+export function buildPrompt(request, canonicalTargetApp) {
+    if (request.mode === "list") {
+        return `Call computer-use/list_apps exactly once. Do not call any other tool. Then return the required JSON object with status="ok", app="app inventory", mode="list", cleaned=true, approvalRequired=false, usedCapabilities=["list_apps"], apps containing every discovered name and bundleId only, and a minimal summary/message. Do not include paths, PIDs, titles, windows, app contents, screenshots, tool output, or reasoning.`;
+    }
+    const targetApp = canonicalTargetApp ?? request.app;
+    return `Use only these fully qualified MCP tools: ${enabledToolNames(request)}. Target exactly ${JSON.stringify(targetApp)} and no other app. Keep it in the background; do not raise, activate, or focus it. Make at most ${request.maxComputerUseCalls} calls.
+
+${operationInstructions(request, targetApp)}
+
+If an official app-approval elicitation is cancelled or unavailable, stop immediately and return status="approval_required", approvalRequired=true, cleaned=false, and only the methods that actually completed. Otherwise return status="ok" only after observing the requested result. In the final JSON, set app=${JSON.stringify(request.app)}. usedCapabilities must exactly list successfully completed Computer Use method names in order, including duplicates; apps must be empty. Return only the required JSON object with a minimal summary/message and no screenshots, paths, PIDs, raw accessibility tree, unrelated content, tool output, or reasoning.`;
+}
+//# sourceMappingURL=prompt.js.map

package/dist/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAyB,MAAM,aAAa,CAAC;AAE9E,MAAM,CAAC,MAAM,aAAa,GAAG;IAC5B,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE;QACT,QAAQ;QACR,KAAK;QACL,MAAM;QACN,SAAS;QACT,SAAS;QACT,kBAAkB;QAClB,kBAAkB;QAClB,MAAM;QACN,SAAS;KACT;IACD,UAAU,EAAE;QACX,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE;QACjF,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE;QACvC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,CAAC,EAAE;QAC/E,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;QAC5C,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC5B,gBAAgB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QACrC,gBAAgB,EAAE;YACjB,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE;oBACL,WAAW;oBACX,eAAe;oBACf,OAAO;oBACP,0BAA0B;oBAC1B,WAAW;oBACX,aAAa;oBACb,QAAQ;oBACR,MAAM;oBACN,WAAW;oBACX,WAAW;iBACX;aACD;SACD;QACD,IAAI,EAAE;YACL,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,GAAG;YACb,KAAK,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,QAAQ,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC;gBAC9B,UAAU,EAAE;oBACX,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE;oBACxC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE;iBAC5C;aACD;SACD;QACD,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE;KAC3C;CACQ,CAAC;AAEX,SAAS,gBAAgB,CAAC,OAAyB;IAClD,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,MAAM;YACV,OAAO,wBAAwB,CAAC;QACjC,KAAK,SAAS;YACb,OAAO,oDAAoD,CAAC;QAC7D,KAAK,KAAK;YACT,OAAO;gBACN,WAAW;gBACX,eAAe;gBACf,OAAO;gBACP,0BAA0B;gBAC1B,WAAW;gBACX,aAAa;gBACb,QAAQ;gBACR,MAAM;gBACN,WAAW;gBACX,WAAW;aACX,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,KAAK,mBAAmB;YACvB,OAAO,CAAC,eAAe,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnG,CAAC;AACF,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAyB,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG;IAChF,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,MAAM;YACV,OAAO,iJAAiJ,CAAC;QAC1J,KAAK,SAAS;YACb,OAAO,eAAe,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,kOAAkO,CAAC;QACnR,KAAK,KAAK,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO;gBAC9B,CAAC,CAAC,OAAO,CAAC,mBAAmB;oBAC5B,CAAC,OAAO,CAAC,cAAc,KAAK,kBAAkB;wBAC7C,CAAC,CAAC,mGAAmG;wBACrG,CAAC,CAAC,kJAAkJ,CAAC;gBACvJ,CAAC,CAAC,uEAAuE,CAAC;YAC3E,MAAM,QAAQ,GAAG,OAAO,CAAC,oBAAoB,CAAC,MAAM;gBACnD,CAAC,CAAC,4FAA4F,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBACxI,CAAC,CAAC,OAAO,CAAC,cAAc,KAAK,kBAAkB;oBAC9C,CAAC,CAAC,kFAAkF;oBACpF,CAAC,CAAC,0EAA0E,CAAC;YAC/E,MAAM,aAAa,GAClB,OAAO,CAAC,cAAc,KAAK,kBAAkB;gBAC5C,CAAC,CAAC,wJAAwJ;gBAC1J,CAAC,CAAC,8CAA8C,CAAC;YACnD,OAAO,eAAe,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,aAAa,2BAA2B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,uIAAuI,QAAQ,yBAAyB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,4GAA4G,CAAC,CAAC,CAAC,wBAAwB,kBAAkB,CAAC;QACxd,CAAC;QACD,KAAK,mBAAmB;YACvB,OAAO,eAAe,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,6HAA6H,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,8UAA8U,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,4NAA4N,CAAC;IAC9xB,CAAC;AACF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAyB,EAAE,kBAA2B;IACjF,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7B,OAAO,iaAAia,CAAC;IAC1a,CAAC;IACD,MAAM,SAAS,GAAG,kBAAkB,IAAI,OAAO,CAAC,GAAI,CAAC;IACrD,OAAO,6CAA6C,gBAAgB,CAAC,OAAO,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,mGAAmG,OAAO,CAAC,mBAAmB;;EAEvP,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC;;sTAE2Q,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,sTAAsT,CAAC;AACxoB,CAAC"}