codex-computer-use-mcp 0.1.0

package/dist/service.js

@@ -0,0 +1,382 @@
+import crypto from "node:crypto";
+import path from "node:path";
+import { homedir } from "node:os";
+import { appendAudit } from "./audit.js";
+import { loadConfig } from "./config.js";
+import { acquireAppLock } from "./lock.js";
+import { COMPUTER_USE_TOOLS, MODEL, PolicyError, allowedToolsForRequest, createDictionaryArgumentValidator, validateObservedMethods, validateResolvedAppIdentity, validateRequest, } from "./policy.js";
+import { buildPrompt } from "./prompt.js";
+import { runOfficialCodex, verifyOfficialBroker } from "./runner.js";
+import { ensureAppRunningInBackground, frontmostBundleId, frontmostBundleIdAsync, resolveAppIdentity, watchTargetFrontmost, } from "./system.js";
+export function defaultStateRoot() {
+    return process.env.CODEX_COMPUTER_USE_HOME || path.join(homedir(), ".codex-computer-use-mcp");
+}
+function usageText(result) {
+    const usage = result.usage;
+    return `Codex usage: ${usage.input} input (${usage.cachedInput} cached), ${usage.output} output tokens`;
+}
+function safeDisplay(value, maxLength) {
+    return value.replace(/[\u0000-\u001f\u007f]+/g, " ").replace(/\s+/g, " ").trim().slice(0, maxLength);
+}
+function auditAppIdentifier(app, canonicalBundleId) {
+    if (!app)
+        return null;
+    if (canonicalBundleId)
+        return canonicalBundleId;
+    return `target-sha256:${crypto.createHash("sha256").update(app).digest("hex").slice(0, 16)}`;
+}
+function rejectedInputMetadata(raw) {
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
+        return { operation: "invalid_request", app: null, mutating: false, cleanup: false, inputBytes: 0 };
+    }
+    const value = raw;
+    const operation = typeof value.mode === "string" && ["list", "inspect", "act", "dictionary_lookup", "configure"].includes(value.mode)
+        ? value.mode
+        : "invalid_request";
+    const app = typeof value.app === "string" ? auditAppIdentifier(value.app, undefined) : null;
+    const input = [value.task, value.query, value.cleanup_instructions]
+        .filter((item) => typeof item === "string")
+        .join("");
+    return {
+        operation,
+        app,
+        mutating: operation === "act" || operation === "dictionary_lookup" || operation === "configure",
+        cleanup: value.cleanup === true,
+        inputBytes: Buffer.byteLength(input, "utf8"),
+    };
+}
+function interruptionMessage(kind, app, methods) {
+    const prior = methods.length
+        ? ` Earlier successful calls (${methods.join(", ")}) may already have changed state; cleanup is unverified.`
+        : " No successful Computer Use call was observed before the interruption.";
+    switch (kind) {
+        case "app_approval":
+            return `Official Computer Use app approval is required for ${app}. Complete or deny that first-party app approval in an official interactive session, then retry only if approved.${prior}`;
+        case "sensitive_action":
+            return `Official Computer Use sensitive-action confirmation interrupted work in ${app}. Review that specific first-party action prompt; wrapper full-permissions does not bypass it.${prior}`;
+        case "os_permission":
+            return `A macOS privacy permission interrupted Computer Use for ${app}. Review the relevant macOS permission directly; the wrapper does not alter OS privacy controls.${prior}`;
+        case "unknown_elicitation":
+            return `An unclassified first-party Computer Use elicitation interrupted work in ${app}. Review it in an official interactive session rather than assuming it is app approval.${prior}`;
+    }
+}
+export async function executeOperation(raw, deps = {}) {
+    const stateDir = deps.stateRoot || defaultStateRoot();
+    const runId = crypto.randomUUID();
+    const startedAt = Date.now();
+    const config = await loadConfig(stateDir);
+    const permissionMode = config.permissionMode;
+    let request;
+    try {
+        request = validateRequest(raw, permissionMode);
+    }
+    catch (error) {
+        const rejected = rejectedInputMetadata(raw);
+        const audit = {
+            timestamp: new Date().toISOString(),
+            runId,
+            operation: rejected.operation,
+            permissionMode,
+            app: rejected.app,
+            mutating: rejected.mutating,
+            cleanupRequested: rejected.cleanup,
+            userConfirmed: false,
+            authorization: permissionMode === "full-permissions" ? "full_permissions_config" : "none",
+            inputBytes: rejected.inputBytes,
+            outcome: "policy_rejected",
+            durationMs: Date.now() - startedAt,
+            model: MODEL,
+            usage: { input: 0, cachedInput: 0, output: 0 },
+            computerUseCalls: 0,
+            computerUseMethods: [],
+            backgroundPreserved: null,
+            cleanupVerified: null,
+        };
+        try {
+            await appendAudit(stateDir, audit, "background-computer-use.jsonl");
+        }
+        catch {
+            throw new Error("Computer Use request was rejected, but secure audit logging failed");
+        }
+        if (error instanceof PolicyError)
+            throw error;
+        throw new PolicyError("Request did not pass the Computer Use policy");
+    }
+    let userConfirmed = false;
+    let authorization = permissionMode === "full-permissions" ? "full_permissions_config" : "none";
+    const locks = [];
+    let runner;
+    let outcome = "failed";
+    let backgroundPreserved = null;
+    let cleanupVerified = null;
+    const app = request.app;
+    let targetIdentity = app ? resolveAppIdentity(app) : undefined;
+    const initialTargetLeaseId = targetIdentity?.leaseId;
+    let targetLeaseId = initialTargetLeaseId;
+    let canonicalTargetApp = targetIdentity?.bundleId;
+    let frontBefore;
+    let targetBecameFrontmost = false;
+    let unrelatedFocusChanges = false;
+    let focusWatcher;
+    let focusWatcherFailed = false;
+    try {
+        validateResolvedAppIdentity(request, targetIdentity?.bundleId, targetIdentity?.verifiedSystemDictionary === true);
+        if (initialTargetLeaseId)
+            locks.push(await acquireAppLock(stateDir, initialTargetLeaseId, runId));
+        frontBefore = frontmostBundleId();
+        if (!frontBefore)
+            throw new PolicyError("Could not observe the frontmost app; refusing to spend Codex quota without background verification");
+        let focusSamplePromise;
+        const sampleFocus = () => {
+            if (focusSamplePromise)
+                return focusSamplePromise;
+            focusSamplePromise = (async () => {
+                const current = await frontmostBundleIdAsync();
+                if (!current)
+                    return;
+                if (canonicalTargetApp && current.toLowerCase() === canonicalTargetApp.toLowerCase())
+                    targetBecameFrontmost = true;
+                else if (current !== frontBefore)
+                    unrelatedFocusChanges = true;
+            })().finally(() => {
+                focusSamplePromise = undefined;
+            });
+            return focusSamplePromise;
+        };
+        if (app)
+            focusWatcher = await watchTargetFrontmost();
+        const focusMonitor = setInterval(() => void sampleFocus(), 250);
+        focusMonitor.unref();
+        try {
+            if (app) {
+                targetIdentity = await ensureAppRunningInBackground(app, targetIdentity);
+                canonicalTargetApp = targetIdentity.bundleId;
+                if (!canonicalTargetApp)
+                    throw new PolicyError("Could not resolve the background-launched app to a canonical bundle ID");
+                targetLeaseId = canonicalTargetApp.toLowerCase();
+                validateResolvedAppIdentity(request, targetIdentity.bundleId, targetIdentity.verifiedSystemDictionary);
+                if (targetLeaseId !== initialTargetLeaseId)
+                    locks.push(await acquireAppLock(stateDir, targetLeaseId, runId));
+                await sampleFocus();
+                if (frontmostBundleId()?.toLowerCase() === targetLeaseId)
+                    targetBecameFrontmost = true;
+                if (targetBecameFrontmost)
+                    throw new PolicyError("The target app became frontmost during background launch; background-only guarantee failed");
+            }
+            await deps.onProgress?.(`${permissionMode === "full-permissions" ? "FULL PERMISSIONS; " : ""}Leased ${app ?? "app inventory"}; starting signed Codex Computer Use worker…`);
+            runner = await (deps.runCodex ?? runOfficialCodex)(buildPrompt(request, canonicalTargetApp), {
+                signal: deps.signal,
+                timeoutMs: 300_000,
+                allowedTools: allowedToolsForRequest(request),
+                targetApp: request.app,
+                targetAppAliases: [canonicalTargetApp, targetLeaseId, initialTargetLeaseId].filter((value) => Boolean(value)),
+                reasoningEffort: request.reasoningEffort,
+                maxToolCalls: request.maxComputerUseCalls,
+                validateCallArguments: request.mode === "dictionary_lookup" ? createDictionaryArgumentValidator(request.query) : undefined,
+            });
+        }
+        finally {
+            clearInterval(focusMonitor);
+            await sampleFocus();
+            if (focusWatcher) {
+                focusWatcherFailed = !focusWatcher.healthy();
+                await focusWatcher.stop();
+                if (canonicalTargetApp)
+                    targetBecameFrontmost ||= focusWatcher.becameFrontmost(canonicalTargetApp);
+            }
+        }
+        if (focusWatcherFailed)
+            throw new PolicyError("Target focus-event monitor exited before the Computer Use worker");
+        if (runner.policyViolation) {
+            outcome = "policy_violation";
+            throw new PolicyError(`${runner.policyViolation}${request.mutating ? "; target cleanup is not verified—inspect and restore the app before retrying" : ""}`);
+        }
+        if (runner.firstPartyInterruption) {
+            outcome = `first_party_${runner.firstPartyInterruption}`;
+            return {
+                ok: false,
+                isError: true,
+                text: `[${permissionMode}] ${interruptionMessage(runner.firstPartyInterruption, app ?? "the target app", runner.computerUseMethods)} Do not retry automatically. ${usageText(runner)}`,
+                details: {
+                    runId,
+                    mode: request.mode,
+                    permissionMode,
+                    app,
+                    outcome,
+                    approvalRequired: runner.firstPartyInterruption === "app_approval",
+                    firstPartyInterruption: runner.firstPartyInterruption,
+                    usedCapabilities: runner.computerUseMethods,
+                    usage: runner.usage,
+                    model: MODEL,
+                    durationMs: runner.durationMs,
+                    retryAllowed: false,
+                },
+            };
+        }
+        if (runner.errorKind === "cancelled") {
+            outcome = "cancelled";
+            cleanupVerified = false;
+            return {
+                ok: false,
+                isError: true,
+                text: `Computer Use was cancelled. ${runner.computerUseMethods.length ? `Earlier successful calls (${runner.computerUseMethods.join(", ")}) may already have changed state; cleanup is unverified. ` : "No successful Computer Use call was observed. "}Do not retry automatically.`,
+                details: {
+                    runId,
+                    mode: request.mode,
+                    permissionMode,
+                    app,
+                    outcome,
+                    usedCapabilities: runner.computerUseMethods,
+                    usage: runner.usage,
+                    model: MODEL,
+                    durationMs: runner.durationMs,
+                    cleanupVerified: false,
+                    retryAllowed: false,
+                },
+            };
+        }
+        if (runner.exitCode !== 0 || !runner.result) {
+            outcome = runner.errorKind ?? "broker_failed";
+            throw new Error(`Official Codex broker failed (${runner.errorKind ?? "unknown"})${request.mutating ? "; target cleanup is not verified—inspect and restore the app before retrying" : ""}`);
+        }
+        const result = runner.result;
+        if (result.mode !== request.mode)
+            throw new PolicyError("Codex returned a mismatched mode");
+        if (app &&
+            ![app, canonicalTargetApp, targetLeaseId]
+                .filter((value) => Boolean(value))
+                .some((value) => value.toLowerCase() === result.app.toLowerCase())) {
+            throw new PolicyError("Codex returned a mismatched target app");
+        }
+        if (result.status === "approval_required" || result.approvalRequired) {
+            outcome = "unverified_approval_claim";
+            throw new Error("Codex claimed app approval was required without an observed official approval event; no task completion is trusted");
+        }
+        if (result.status !== "ok") {
+            outcome = `computer_use_${result.status}`;
+            throw new Error(`Computer Use returned ${result.status}${request.mutating ? "; target cleanup is not verified—inspect and restore the app before retrying" : ""}`);
+        }
+        validateObservedMethods(request, runner.computerUseMethods);
+        const frontAfter = frontmostBundleId();
+        if (!frontAfter)
+            throw new PolicyError("Could not verify the final frontmost app state");
+        if (targetLeaseId && frontAfter.toLowerCase() === targetLeaseId)
+            targetBecameFrontmost = true;
+        else if (frontAfter !== frontBefore)
+            unrelatedFocusChanges = true;
+        backgroundPreserved = !targetBecameFrontmost;
+        if (!backgroundPreserved)
+            throw new PolicyError("The confirmed target app became frontmost; background-only guarantee failed");
+        cleanupVerified = request.mutating ? (request.cleanup ? result.cleaned : null) : true;
+        if (request.mutating && request.cleanup && result.cleaned !== true)
+            throw new PolicyError("Requested cleanup was not verified");
+        outcome = "ok";
+        if (request.mode === "list") {
+            const safeApps = result.apps.map((item) => ({ name: safeDisplay(item.name, 120), bundleId: safeDisplay(item.bundleId, 160) }));
+            const lines = safeApps.map((item) => `${item.name} (${item.bundleId})`);
+            return {
+                ok: true,
+                isError: false,
+                text: `[${permissionMode}] Discovered ${safeApps.length} apps through signed Codex Computer Use:\n${lines.join("\n")}\n\n${usageText(runner)}.`,
+                details: {
+                    runId,
+                    mode: request.mode,
+                    permissionMode,
+                    outcome,
+                    apps: safeApps,
+                    cleaned: true,
+                    backgroundPreserved,
+                    unrelatedFocusChanges,
+                    usedCapabilities: runner.computerUseMethods,
+                    usage: runner.usage,
+                    model: MODEL,
+                    durationMs: runner.durationMs,
+                },
+            };
+        }
+        return {
+            ok: true,
+            isError: false,
+            text: `[${permissionMode}] ${app} ${request.mode} completed through signed Codex Computer Use. ${safeDisplay(result.summary, 1000)} Background preserved: yes. ${request.cleanup ? "Cleanup verified: yes. " : "Cleanup not requested. "}Capabilities used: ${runner.computerUseMethods.join(", ")}. ${usageText(runner)}.`,
+            details: {
+                runId,
+                mode: request.mode,
+                permissionMode,
+                app,
+                outcome,
+                summary: safeDisplay(result.summary, 1000),
+                cleaned: result.cleaned,
+                backgroundPreserved,
+                unrelatedFocusChanges,
+                approvalRequired: false,
+                usedCapabilities: runner.computerUseMethods,
+                usage: runner.usage,
+                model: MODEL,
+                durationMs: runner.durationMs,
+            },
+        };
+    }
+    finally {
+        let releaseFailure = false;
+        for (const held of locks.reverse()) {
+            try {
+                await held.release();
+            }
+            catch {
+                releaseFailure = true;
+            }
+        }
+        const audit = {
+            timestamp: new Date().toISOString(),
+            runId,
+            operation: request.mode,
+            permissionMode,
+            app: auditAppIdentifier(app, canonicalTargetApp),
+            mutating: request.mutating,
+            cleanupRequested: request.cleanup,
+            userConfirmed,
+            authorization,
+            inputBytes: Buffer.byteLength(`${request.task ?? request.query ?? ""}${request.cleanupInstructions ?? ""}`, "utf8"),
+            outcome,
+            durationMs: Date.now() - startedAt,
+            model: MODEL,
+            usage: runner?.usage ?? { input: 0, cachedInput: 0, output: 0 },
+            computerUseCalls: runner?.computerUseMethods.length ?? 0,
+            computerUseMethods: runner?.computerUseMethods ?? [],
+            backgroundPreserved,
+            cleanupVerified,
+        };
+        try {
+            await appendAudit(stateDir, audit, "background-computer-use.jsonl");
+        }
+        catch {
+            throw new Error(`Computer Use ended with outcome ${outcome}, but secure audit logging failed${request.mutating ? "; prior mutations and cleanup state may require manual inspection" : ""}`);
+        }
+        if (releaseFailure) {
+            throw new Error(`Computer Use ended with outcome ${outcome}, but one or more app leases did not release cleanly`);
+        }
+    }
+}
+export async function getStatus(stateRoot = defaultStateRoot()) {
+    const config = await loadConfig(stateRoot);
+    let brokerVerified = false;
+    let brokerVersion;
+    try {
+        brokerVersion = verifyOfficialBroker();
+        brokerVerified = true;
+    }
+    catch {
+        // Status remains readable on incompatible hosts without exposing local verification details.
+    }
+    return {
+        stateRoot,
+        permissionMode: config.permissionMode,
+        model: MODEL,
+        brokerVerified,
+        ...(brokerVersion ? { brokerVersion } : {}),
+        officialApprovalAuthoritative: true,
+        supportedMethods: [...COMPUTER_USE_TOOLS],
+        auditPath: path.join(stateRoot, "audit", "background-computer-use.jsonl"),
+    };
+}
+//# sourceMappingURL=service.js.map

package/dist/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,WAAW,EAAoB,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAwB,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAgB,MAAM,WAAW,CAAC;AACzD,OAAO,EACL,kBAAkB,EAClB,KAAK,EACL,WAAW,EACX,sBAAsB,EACtB,iCAAiC,EACjC,uBAAuB,EACvB,2BAA2B,EAC3B,eAAe,GAEhB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAkD,MAAM,aAAa,CAAC;AACrH,OAAO,EACL,4BAA4B,EAC5B,iBAAiB,EACjB,sBAAsB,EACtB,kBAAkB,EAElB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AAiBrB,MAAM,UAAU,gBAAgB;IAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,yBAAyB,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,SAAS,CAAC,MAAoB;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,OAAO,gBAAgB,KAAK,CAAC,KAAK,WAAW,KAAK,CAAC,WAAW,aAAa,KAAK,CAAC,MAAM,gBAAgB,CAAC;AAC1G,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,SAAiB;IACnD,OAAO,KAAK,CAAC,OAAO,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AACvG,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAuB,EAAE,iBAAqC;IACxF,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,iBAAiB;QAAE,OAAO,iBAAiB,CAAC;IAChD,OAAO,iBAAiB,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC/F,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAY;IACzC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IACrG,CAAC;IACD,MAAM,KAAK,GAAG,GAA8B,CAAC;IAC7C,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QACnI,CAAC,CAAC,KAAK,CAAC,IAAI;QACZ,CAAC,CAAC,iBAAiB,CAAC;IACtB,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5F,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,oBAAoB,CAAC;SAChE,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;SAC1D,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,OAAO;QACL,SAAS;QACT,GAAG;QACH,QAAQ,EAAE,SAAS,KAAK,KAAK,IAAI,SAAS,KAAK,mBAAmB,IAAI,SAAS,KAAK,WAAW;QAC/F,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAA4B,EAAE,GAAW,EAAE,OAAiB;IACvF,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM;QAC1B,CAAC,CAAC,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,0DAA0D;QAC5G,CAAC,CAAC,wEAAwE,CAAC;IAC7E,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,cAAc;YACjB,OAAO,sDAAsD,GAAG,oHAAoH,KAAK,EAAE,CAAC;QAC9L,KAAK,kBAAkB;YACrB,OAAO,2EAA2E,GAAG,iGAAiG,KAAK,EAAE,CAAC;QAChM,KAAK,eAAe;YAClB,OAAO,2DAA2D,GAAG,mGAAmG,KAAK,EAAE,CAAC;QAClL,KAAK,qBAAqB;YACxB,OAAO,4EAA4E,GAAG,0FAA0F,KAAK,EAAE,CAAC;IAC5L,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAY,EAAE,IAAI,GAA0B,EAAE;IACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,IAAI,gBAAgB,EAAE,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;IAC7C,IAAI,OAA2C,CAAC;IAChD,IAAI,CAAC;QACH,OAAO,GAAG,eAAe,CAAC,GAAqB,EAAE,cAAc,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAgB;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK;YACL,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,cAAc;YACd,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,gBAAgB,EAAE,QAAQ,CAAC,OAAO;YAClC,aAAa,EAAE,KAAK;YACpB,aAAa,EAAE,cAAc,KAAK,kBAAkB,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,MAAM;YACzF,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,OAAO,EAAE,iBAAiB;YAC1B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAClC,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;YAC9C,gBAAgB,EAAE,CAAC;YACnB,kBAAkB,EAAE,EAAE;YACtB,mBAAmB,EAAE,IAAI;YACzB,eAAe,EAAE,IAAI;SACtB,CAAC;QACF,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,EAAE,+BAA+B,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,KAAK,YAAY,WAAW;YAAE,MAAM,KAAK,CAAC;QAC9C,MAAM,IAAI,WAAW,CAAC,8CAA8C,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,aAAa,GACf,cAAc,KAAK,kBAAkB,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7E,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,IAAI,MAAgC,CAAC;IACrC,IAAI,OAAO,GAAG,QAAQ,CAAC;IACvB,IAAI,mBAAmB,GAAmB,IAAI,CAAC;IAC/C,IAAI,eAAe,GAAmB,IAAI,CAAC;IAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,IAAI,cAAc,GAAG,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,MAAM,oBAAoB,GAAG,cAAc,EAAE,OAAO,CAAC;IACrD,IAAI,aAAa,GAAG,oBAAoB,CAAC;IACzC,IAAI,kBAAkB,GAAG,cAAc,EAAE,QAAQ,CAAC;IAClD,IAAI,WAA+B,CAAC;IACpC,IAAI,qBAAqB,GAAG,KAAK,CAAC;IAClC,IAAI,qBAAqB,GAAG,KAAK,CAAC;IAClC,IAAI,YAAgD,CAAC;IACrD,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAE/B,IAAI,CAAC;QACH,2BAA2B,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,EAAE,wBAAwB,KAAK,IAAI,CAAC,CAAC;QAClH,IAAI,oBAAoB;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,cAAc,CAAC,QAAQ,EAAE,oBAAoB,EAAE,KAAK,CAAC,CAAC,CAAC;QAElG,WAAW,GAAG,iBAAiB,EAAE,CAAC;QAClC,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,WAAW,CAAC,oGAAoG,CAAC,CAAC;QAC9I,IAAI,kBAA6C,CAAC;QAClD,MAAM,WAAW,GAAG,GAAkB,EAAE;YACtC,IAAI,kBAAkB;gBAAE,OAAO,kBAAkB,CAAC;YAClD,kBAAkB,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,OAAO,GAAG,MAAM,sBAAsB,EAAE,CAAC;gBAC/C,IAAI,CAAC,OAAO;oBAAE,OAAO;gBACrB,IAAI,kBAAkB,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,kBAAkB,CAAC,WAAW,EAAE;oBAAE,qBAAqB,GAAG,IAAI,CAAC;qBAC9G,IAAI,OAAO,KAAK,WAAW;oBAAE,qBAAqB,GAAG,IAAI,CAAC;YACjE,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;gBAChB,kBAAkB,GAAG,SAAS,CAAC;YACjC,CAAC,CAAC,CAAC;YACH,OAAO,kBAAkB,CAAC;QAC5B,CAAC,CAAC;QACF,IAAI,GAAG;YAAE,YAAY,GAAG,MAAM,oBAAoB,EAAE,CAAC;QACrD,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QAChE,YAAY,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,IAAI,GAAG,EAAE,CAAC;gBACR,cAAc,GAAG,MAAM,4BAA4B,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;gBACzE,kBAAkB,GAAG,cAAc,CAAC,QAAQ,CAAC;gBAC7C,IAAI,CAAC,kBAAkB;oBAAE,MAAM,IAAI,WAAW,CAAC,wEAAwE,CAAC,CAAC;gBACzH,aAAa,GAAG,kBAAkB,CAAC,WAAW,EAAE,CAAC;gBACjD,2BAA2B,CAAC,OAAO,EAAE,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,wBAAwB,CAAC,CAAC;gBACvG,IAAI,aAAa,KAAK,oBAAoB;oBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,cAAc,CAAC,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC7G,MAAM,WAAW,EAAE,CAAC;gBACpB,IAAI,iBAAiB,EAAE,EAAE,WAAW,EAAE,KAAK,aAAa;oBAAE,qBAAqB,GAAG,IAAI,CAAC;gBACvF,IAAI,qBAAqB;oBAAE,MAAM,IAAI,WAAW,CAAC,4FAA4F,CAAC,CAAC;YACjJ,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,GAAG,cAAc,KAAK,kBAAkB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,UAAU,GAAG,IAAI,eAAe,8CAA8C,CAAC,CAAC;YAC5K,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,gBAAgB,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,kBAAkB,CAAC,EAAE;gBAC3F,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,OAAO;gBAClB,YAAY,EAAE,sBAAsB,CAAC,OAAO,CAAC;gBAC7C,SAAS,EAAE,OAAO,CAAC,GAAG;gBACtB,gBAAgB,EAAE,CAAC,kBAAkB,EAAE,aAAa,EAAE,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC9H,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,YAAY,EAAE,OAAO,CAAC,mBAAmB;gBACzC,qBAAqB,EAAE,OAAO,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,iCAAiC,CAAC,OAAO,CAAC,KAAM,CAAC,CAAC,CAAC,CAAC,SAAS;aAC5H,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,aAAa,CAAC,YAAY,CAAC,CAAC;YAC5B,MAAM,WAAW,EAAE,CAAC;YACpB,IAAI,YAAY,EAAE,CAAC;gBACjB,kBAAkB,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;gBAC7C,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;gBAC1B,IAAI,kBAAkB;oBAAE,qBAAqB,KAAK,YAAY,CAAC,eAAe,CAAC,kBAAkB,CAAC,CAAC;YACrG,CAAC;QACH,CAAC;QAED,IAAI,kBAAkB;YAAE,MAAM,IAAI,WAAW,CAAC,kEAAkE,CAAC,CAAC;QAClH,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC3B,OAAO,GAAG,kBAAkB,CAAC;YAC7B,MAAM,IAAI,WAAW,CAAC,GAAG,MAAM,CAAC,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,8EAA8E,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9J,CAAC;QACD,IAAI,MAAM,CAAC,sBAAsB,EAAE,CAAC;YAClC,OAAO,GAAG,eAAe,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACzD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,IAAI,cAAc,KAAK,mBAAmB,CAAC,MAAM,CAAC,sBAAsB,EAAE,GAAG,IAAI,gBAAgB,EAAE,MAAM,CAAC,kBAAkB,CAAC,gCAAgC,SAAS,CAAC,MAAM,CAAC,EAAE;gBACtL,OAAO,EAAE;oBACP,KAAK;oBACL,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,cAAc;oBACd,GAAG;oBACH,OAAO;oBACP,gBAAgB,EAAE,MAAM,CAAC,sBAAsB,KAAK,cAAc;oBAClE,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;oBACrD,gBAAgB,EAAE,MAAM,CAAC,kBAAkB;oBAC3C,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,KAAK,EAAE,KAAK;oBACZ,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,YAAY,EAAE,KAAK;iBACpB;aACF,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;YACrC,OAAO,GAAG,WAAW,CAAC;YACtB,eAAe,GAAG,KAAK,CAAC;YACxB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,+BAA+B,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,6BAA6B,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC,CAAC,gDAAgD,6BAA6B;gBACpR,OAAO,EAAE;oBACP,KAAK;oBACL,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,cAAc;oBACd,GAAG;oBACH,OAAO;oBACP,gBAAgB,EAAE,MAAM,CAAC,kBAAkB;oBAC3C,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,KAAK,EAAE,KAAK;oBACZ,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,eAAe,EAAE,KAAK;oBACtB,YAAY,EAAE,KAAK;iBACpB;aACF,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC5C,OAAO,GAAG,MAAM,CAAC,SAAS,IAAI,eAAe,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,SAAS,IAAI,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,8EAA8E,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9L,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;YAAE,MAAM,IAAI,WAAW,CAAC,kCAAkC,CAAC,CAAC;QAC5F,IACE,GAAG;YACH,CAAC,CAAC,GAAG,EAAE,kBAAkB,EAAE,aAAa,CAAC;iBACtC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;iBAClD,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EACpE,CAAC;YACD,MAAM,IAAI,WAAW,CAAC,wCAAwC,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,mBAAmB,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACrE,OAAO,GAAG,2BAA2B,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,oHAAoH,CAAC,CAAC;QACxI,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC3B,OAAO,GAAG,gBAAgB,MAAM,CAAC,MAAM,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,8EAA8E,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrK,CAAC;QACD,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAE5D,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC;QACvC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,WAAW,CAAC,gDAAgD,CAAC,CAAC;QACzF,IAAI,aAAa,IAAI,UAAU,CAAC,WAAW,EAAE,KAAK,aAAa;YAAE,qBAAqB,GAAG,IAAI,CAAC;aACzF,IAAI,UAAU,KAAK,WAAW;YAAE,qBAAqB,GAAG,IAAI,CAAC;QAClE,mBAAmB,GAAG,CAAC,qBAAqB,CAAC;QAC7C,IAAI,CAAC,mBAAmB;YAAE,MAAM,IAAI,WAAW,CAAC,6EAA6E,CAAC,CAAC;QAC/H,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtF,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;YAAE,MAAM,IAAI,WAAW,CAAC,oCAAoC,CAAC,CAAC;QAEhI,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/H,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;YACxE,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,IAAI,cAAc,gBAAgB,QAAQ,CAAC,MAAM,6CAA6C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,SAAS,CAAC,MAAM,CAAC,GAAG;gBAC/I,OAAO,EAAE;oBACP,KAAK;oBACL,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,cAAc;oBACd,OAAO;oBACP,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,IAAI;oBACb,mBAAmB;oBACnB,qBAAqB;oBACrB,gBAAgB,EAAE,MAAM,CAAC,kBAAkB;oBAC3C,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,KAAK,EAAE,KAAK;oBACZ,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B;aACF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,IAAI,cAAc,KAAK,GAAG,IAAI,OAAO,CAAC,IAAI,iDAAiD,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,+BAA+B,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,yBAAyB,sBAAsB,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,MAAM,CAAC,GAAG;YAC3T,OAAO,EAAE;gBACP,KAAK;gBACL,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,cAAc;gBACd,GAAG;gBACH,OAAO;gBACP,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC;gBAC1C,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,mBAAmB;gBACnB,qBAAqB;gBACrB,gBAAgB,EAAE,KAAK;gBACvB,gBAAgB,EAAE,MAAM,CAAC,kBAAkB;gBAC3C,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,KAAK,EAAE,KAAK;gBACZ,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B;SACF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc,GAAG,IAAI,CAAC;YACxB,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAgB;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK;YACL,SAAS,EAAE,OAAO,CAAC,IAAI;YACvB,cAAc;YACd,GAAG,EAAE,kBAAkB,CAAC,GAAG,EAAE,kBAAkB,CAAC;YAChD,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,gBAAgB,EAAE,OAAO,CAAC,OAAO;YACjC,aAAa;YACb,aAAa;YACb,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK,IAAI,EAAE,GAAG,OAAO,CAAC,mBAAmB,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC;YACnH,OAAO;YACP,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAClC,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;YAC/D,gBAAgB,EAAE,MAAM,EAAE,kBAAkB,CAAC,MAAM,IAAI,CAAC;YACxD,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,IAAI,EAAE;YACpD,mBAAmB;YACnB,eAAe;SAChB,CAAC;QACF,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,EAAE,+BAA+B,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,mCAAmC,OAAO,oCAAoC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,mEAAmE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/L,CAAC;QACD,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,mCAAmC,OAAO,sDAAsD,CAAC,CAAC;QACpH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,SAAS,GAAG,gBAAgB,EAAE;IAC5D,MAAM,MAAM,GAAoB,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;IAC5D,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,aAAiC,CAAC;IACtC,IAAI,CAAC;QACH,aAAa,GAAG,oBAAoB,EAAE,CAAC;QACvC,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,6FAA6F;IAC/F,CAAC;IACD,OAAO;QACL,SAAS;QACT,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,KAAK,EAAE,KAAK;QACZ,cAAc;QACd,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,6BAA6B,EAAE,IAAI;QACnC,gBAAgB,EAAE,CAAC,GAAG,kBAAkB,CAAC;QACzC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,+BAA+B,CAAC;KAC1E,CAAC;AACJ,CAAC"}

package/dist/system.d.ts

@@ -0,0 +1,17 @@
+export declare function frontmostApplicationToken(): string | undefined;
+export declare function frontmostBundleId(): string | undefined;
+export declare function frontmostBundleIdAsync(): Promise<string | undefined>;
+export interface ResolvedAppIdentity {
+    bundleId?: string;
+    leaseId: string;
+    verifiedSystemDictionary: boolean;
+}
+export declare function resolveAppIdentity(app: string): ResolvedAppIdentity;
+export declare function resolveAppLeaseId(app: string): string;
+export declare function ensureAppRunningInBackground(app: string, identity?: ResolvedAppIdentity): Promise<ResolvedAppIdentity>;
+export interface TargetFrontmostWatcher {
+    becameFrontmost(bundleId: string): boolean;
+    healthy(): boolean;
+    stop(): Promise<void>;
+}
+export declare function watchTargetFrontmost(listenerPath?: string, infoPath?: string): Promise<TargetFrontmostWatcher>;

package/dist/system.js

@@ -0,0 +1,228 @@
+import { execFile, spawn, spawnSync } from "node:child_process";
+import { realpathSync } from "node:fs";
+import path from "node:path";
+import { promisify } from "node:util";
+const execFileAsync = promisify(execFile);
+export function frontmostApplicationToken() {
+    const front = spawnSync("/usr/bin/lsappinfo", ["front"], { encoding: "utf8", timeout: 3000 });
+    const asn = (front.stdout ?? "").trim();
+    return front.status === 0 && asn.startsWith("ASN:") ? asn : undefined;
+}
+export function frontmostBundleId() {
+    const asn = frontmostApplicationToken();
+    if (!asn)
+        return undefined;
+    const info = spawnSync("/usr/bin/lsappinfo", ["info", "-only", "bundleID", asn], {
+        encoding: "utf8",
+        timeout: 3000,
+    });
+    if (info.status !== 0)
+        return undefined;
+    const match = (info.stdout ?? "").match(/"CFBundleIdentifier"="([^"]+)"/);
+    return match?.[1];
+}
+export async function frontmostBundleIdAsync() {
+    try {
+        const front = await execFileAsync("/usr/bin/lsappinfo", ["front"], { encoding: "utf8", timeout: 3000 });
+        const asn = front.stdout.trim();
+        if (!asn.startsWith("ASN:"))
+            return undefined;
+        const info = await execFileAsync("/usr/bin/lsappinfo", ["info", "-only", "bundleID", asn], {
+            encoding: "utf8",
+            timeout: 3000,
+        });
+        return info.stdout.match(/"CFBundleIdentifier"="([^"]+)"/)?.[1];
+    }
+    catch {
+        return undefined;
+    }
+}
+const DICTIONARY_BUNDLE_ID = "com.apple.Dictionary";
+const DICTIONARY_PATH = "/System/Applications/Dictionary.app";
+function verifySystemDictionaryBundle(bundleId) {
+    if (bundleId !== DICTIONARY_BUNDLE_ID)
+        return false;
+    const verify = spawnSync("/usr/bin/codesign", ["--verify", "--strict", DICTIONARY_PATH], {
+        encoding: "utf8",
+        timeout: 10_000,
+    });
+    if (verify.status !== 0)
+        return false;
+    const requirement = spawnSync("/usr/bin/codesign", ["-dr", "-", DICTIONARY_PATH], {
+        encoding: "utf8",
+        timeout: 10_000,
+    });
+    const output = `${requirement.stdout ?? ""}\n${requirement.stderr ?? ""}`;
+    return requirement.status === 0 && output.includes(`identifier "${DICTIONARY_BUNDLE_ID}"`) && output.includes("anchor apple");
+}
+export function resolveAppIdentity(app) {
+    const trimmed = app.trim();
+    if (path.isAbsolute(trimmed)) {
+        try {
+            const resolvedPath = realpathSync(trimmed);
+            const plist = path.join(resolvedPath, "Contents", "Info.plist");
+            const metadata = spawnSync("/usr/bin/plutil", ["-extract", "CFBundleIdentifier", "raw", plist], {
+                encoding: "utf8",
+                timeout: 3000,
+            });
+            const bundleId = (metadata.stdout ?? "").trim();
+            if (metadata.status === 0 && /^[A-Za-z0-9-]+(?:\.[A-Za-z0-9-]+)+$/.test(bundleId)) {
+                return {
+                    bundleId,
+                    leaseId: bundleId.toLowerCase(),
+                    verifiedSystemDictionary: verifySystemDictionaryBundle(bundleId),
+                };
+            }
+            return { leaseId: `path:${resolvedPath.toLowerCase()}`, verifiedSystemDictionary: false };
+        }
+        catch {
+            return { leaseId: `path:${trimmed.toLowerCase()}`, verifiedSystemDictionary: false };
+        }
+    }
+    const isBundleId = /^[A-Za-z0-9-]+(?:\.[A-Za-z0-9-]+)+$/.test(trimmed);
+    const script = [
+        "on run argv",
+        isBundleId ? "id of application id (item 1 of argv)" : "id of application (item 1 of argv)",
+        "end run",
+    ];
+    const result = spawnSync("/usr/bin/osascript", ["-e", script[0], "-e", script[1], "-e", script[2], "--", trimmed], {
+        encoding: "utf8",
+        timeout: 3000,
+    });
+    const resolvedBundleId = (result.stdout ?? "").trim();
+    if (result.status === 0 && /^[A-Za-z0-9-]+(?:\.[A-Za-z0-9-]+)+$/.test(resolvedBundleId)) {
+        return {
+            bundleId: resolvedBundleId,
+            leaseId: resolvedBundleId.toLowerCase(),
+            verifiedSystemDictionary: verifySystemDictionaryBundle(resolvedBundleId),
+        };
+    }
+    if (isBundleId)
+        return { leaseId: trimmed.toLowerCase(), verifiedSystemDictionary: false };
+    return { leaseId: `name:${trimmed.toLowerCase()}`, verifiedSystemDictionary: false };
+}
+export function resolveAppLeaseId(app) {
+    return resolveAppIdentity(app).leaseId;
+}
+export async function ensureAppRunningInBackground(app, identity = resolveAppIdentity(app)) {
+    if (identity.bundleId) {
+        const found = spawnSync("/usr/bin/lsappinfo", ["find", `bundleID=${identity.bundleId}`], {
+            encoding: "utf8",
+            timeout: 3000,
+        });
+        if (found.status === 0 && (found.stdout ?? "").trim().startsWith("ASN:"))
+            return identity;
+    }
+    const selectorIsBundleId = /^[A-Za-z0-9-]+(?:\.[A-Za-z0-9-]+)+$/.test(app.trim());
+    const launchArgs = path.isAbsolute(app)
+        ? ["-g", app]
+        : identity.bundleId || selectorIsBundleId
+            ? ["-g", "-b", identity.bundleId ?? app.trim()]
+            : ["-g", "-a", app];
+    const launched = spawnSync("/usr/bin/open", launchArgs, { encoding: "utf8", timeout: 10_000 });
+    if (launched.status !== 0)
+        throw new Error("Could not launch the target app in the background");
+    for (let attempt = 0; attempt < 100; attempt++) {
+        const resolved = resolveAppIdentity(identity.bundleId ?? app);
+        if (resolved.bundleId) {
+            const found = spawnSync("/usr/bin/lsappinfo", ["find", `bundleID=${resolved.bundleId}`], {
+                encoding: "utf8",
+                timeout: 3000,
+            });
+            if (found.status === 0 && (found.stdout ?? "").trim().startsWith("ASN:"))
+                return resolved;
+        }
+        await new Promise((resolve) => setTimeout(resolve, 50));
+    }
+    throw new Error("Target app did not become available after background launch");
+}
+function bundleIdForAsn(asn, infoPath = "/usr/bin/lsappinfo") {
+    const info = spawnSync(infoPath, ["info", "-only", "bundleID", asn], {
+        encoding: "utf8",
+        timeout: 3000,
+    });
+    if (info.status !== 0)
+        return undefined;
+    return (info.stdout ?? "").match(/"CFBundleIdentifier"="([^"]+)"/)?.[1];
+}
+export async function watchTargetFrontmost(listenerPath = "/usr/bin/lsappinfo", infoPath = "/usr/bin/lsappinfo") {
+    // Listen globally so a stopped/display-name target is covered before background launch and canonical resolution.
+    const proc = spawn(listenerPath, ["listen", "+becameFrontmost", "forever"], {
+        stdio: ["ignore", "pipe", "pipe"],
+    });
+    const observedBundles = new Set();
+    const observedAsns = new Set();
+    const unresolvedAsns = new Set();
+    let running = true;
+    let buffer = "";
+    const resolvePending = () => {
+        for (const asn of unresolvedAsns) {
+            const bundleId = bundleIdForAsn(asn, infoPath);
+            if (!bundleId)
+                continue;
+            observedBundles.add(bundleId.toLowerCase());
+            observedAsns.add(asn);
+            unresolvedAsns.delete(asn);
+        }
+    };
+    const retryTimer = setInterval(resolvePending, 50);
+    retryTimer.unref();
+    const markStopped = () => {
+        running = false;
+        clearInterval(retryTimer);
+    };
+    proc.stdout.setEncoding("utf8");
+    proc.stdout.on("data", (chunk) => {
+        buffer = `${buffer}${chunk}`.slice(-16_384);
+        for (const match of buffer.matchAll(/ASN:0x[0-9a-f]+-0x[0-9a-f]+/gi)) {
+            const asn = match[0];
+            if (!observedAsns.has(asn))
+                unresolvedAsns.add(asn);
+        }
+        resolvePending();
+    });
+    proc.once("error", markStopped);
+    proc.once("close", markStopped);
+    await new Promise((resolve) => setTimeout(resolve, 75));
+    if (!running || proc.exitCode !== null)
+        throw new Error("Target focus-event monitor failed to start");
+    return {
+        becameFrontmost: (bundleId) => {
+            resolvePending();
+            return observedBundles.has(bundleId.toLowerCase());
+        },
+        healthy: () => running && proc.exitCode === null,
+        stop: async () => {
+            if (proc.exitCode === null) {
+                proc.kill("SIGTERM");
+                await new Promise((resolve) => {
+                    const timeout = setTimeout(resolve, 1000);
+                    proc.once("close", () => {
+                        clearTimeout(timeout);
+                        resolve();
+                    });
+                });
+                if (proc.exitCode === null) {
+                    proc.kill("SIGKILL");
+                    await new Promise((resolve) => {
+                        const timeout = setTimeout(resolve, 500);
+                        proc.once("close", () => {
+                            clearTimeout(timeout);
+                            resolve();
+                        });
+                    });
+                }
+            }
+            clearInterval(retryTimer);
+            // Events may arrive only while SIGTERM is draining stdout. Resolve every queued ASN before returning.
+            for (let attempt = 0; unresolvedAsns.size > 0 && attempt < 10; attempt += 1) {
+                resolvePending();
+                if (unresolvedAsns.size > 0)
+                    await new Promise((resolve) => setTimeout(resolve, 25));
+            }
+            if (unresolvedAsns.size > 0)
+                throw new Error("Could not resolve all queued focus-event identities");
+        },
+    };
+}
+//# sourceMappingURL=system.js.map