dsh-click 0.1.0

package/lib/types/actions.d.ts

@@ -0,0 +1,94 @@
+/**
+ * The action executor: the safety boundary every mutating action crosses.
+ * One shared flow for click/type/scroll/key — re-observe the window and
+ * refuse on staleness, gate through approval (or the allowlist), perform
+ * through the backend, verify process identity before/after — plus a separate
+ * gate-and-launch flow for `app_launch`. Every decision and outcome lands in
+ * the `dsh-click/action` session audit event.
+ *
+ * @module dsh-click/actions
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { ToolRunContext } from '@deepseek-ai/dsh-tools';
+import type { ResolvedConfig } from './config.ts';
+import { ObservationStore } from './observe.ts';
+import { type ActionOutcome, type DesktopBackend, type LaunchOutcome } from './platform/types.ts';
+/** Which gate allowed an action, for the audit trail. */
+export type ApprovalKind = 'approval' | 'allowlist' | 'none';
+/** The executor's dependencies, all injected at construction. */
+export interface ActionExecutorDeps {
+    /** The mounting context. */
+    readonly ctx: Context;
+    /** Resolved plugin config. */
+    readonly config: ResolvedConfig;
+    /** The active desktop backend. */
+    readonly backend: DesktopBackend;
+    /** The observation cache. */
+    readonly observations: ObservationStore;
+}
+/** Executes mutating desktop actions behind the full safety boundary. */
+export declare class ActionExecutor {
+    private readonly deps;
+    /** @param deps - executor dependencies. */
+    constructor(deps: ActionExecutorDeps);
+    /** The mounting context. */
+    private get ctx();
+    /** The resolved config. */
+    private get config();
+    /** Append one action audit event; a failed append never changes the outcome. */
+    private audit;
+    /**
+     * The staleness boundary: resolve the cited observation, re-observe the
+     * window right now, and compare.
+     *
+     * @param observationId - the observation the action cites.
+     * @param windowId - the window the action addresses.
+     * @param signal - cancellation.
+     * @returns the cited record and the fresh snapshot.
+     */
+    private requireFreshWindow;
+    /**
+     * The approval gate. Matchers run against the sanitized window title and
+     * the executable path; a match skips the ask (still audited as allowlist).
+     * With no matcher, a missing approval service or a missing calling agent
+     * fails closed; the real approval service is asked otherwise.
+     *
+     * @param exec - the calling tool execution.
+     * @param toolName - the tool asking (audit + prompt identity).
+     * @param subject - what the action targets, for the reason and the matchers.
+     * @param signal - cancellation.
+     * @returns which gate allowed the action.
+     */
+    private gate;
+    /**
+     * Compare the process identity captured before and after an action.
+     *
+     * @param before - facts captured pre-action.
+     * @param after - facts captured post-action.
+     */
+    private assertProcessUnchanged;
+    /**
+     * Run one window-scoped mutating action through the shared boundary:
+     * freshness, approval, perform, process check, audit.
+     *
+     * @param toolName - the calling tool name.
+     * @param exec - the calling execution.
+     * @param observationId - the cited observation.
+     * @param windowId - the target window.
+     * @param run - the backend call (receives the resolved focus flag).
+     * @returns the validated backend outcome.
+     */
+    perform(toolName: string, exec: ToolRunContext, observationId: string, windowId: number, run: (focusFallback: boolean) => Promise<ActionOutcome>): Promise<ActionOutcome>;
+    /**
+     * Gate and launch one application. No window observation exists yet, so the
+     * gate runs against the requested name/path alone and the launch outcome's
+     * process facts are the post-identity proof.
+     *
+     * @param exec - the calling execution.
+     * @param name - the app name or executable path.
+     * @param args - launch arguments.
+     * @returns the launch outcome.
+     */
+    launch(exec: ToolRunContext, name: string, args: readonly string[]): Promise<LaunchOutcome>;
+}
+//# sourceMappingURL=actions.d.ts.map

package/lib/types/actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../src/actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAE5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD,OAAO,EAAE,gBAAgB,EAA0B,MAAM,cAAc,CAAA;AAEvE,OAAO,EAAiB,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,KAAK,aAAa,EAAuB,MAAM,qBAAqB,CAAA;AAErI,yDAAyD;AACzD,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,WAAW,GAAG,MAAM,CAAA;AAS5D,iEAAiE;AACjE,MAAM,WAAW,kBAAkB;IACjC,4BAA4B;IAC5B,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAA;IACrB,8BAA8B;IAC9B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;IAC/B,kCAAkC;IAClC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,6BAA6B;IAC7B,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAA;CACxC;AAED,yEAAyE;AACzE,qBAAa,cAAc;IAEb,OAAO,CAAC,QAAQ,CAAC,IAAI;IADjC,2CAA2C;gBACd,IAAI,EAAE,kBAAkB;IAErD,4BAA4B;IAC5B,OAAO,KAAK,GAAG,GAEd;IAED,2BAA2B;IAC3B,OAAO,KAAK,MAAM,GAEjB;IAED,gFAAgF;IAChF,OAAO,CAAC,KAAK;IAWb;;;;;;;;OAQG;YACW,kBAAkB;IAyBhC;;;;;;;;;;;OAWG;YACW,IAAI;IAuClB;;;;;OAKG;IACH,OAAO,CAAC,sBAAsB;IAS9B;;;;;;;;;;OAUG;IACG,OAAO,CACX,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,cAAc,EACpB,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,CAAC,aAAa,EAAE,OAAO,KAAK,OAAO,CAAC,aAAa,CAAC,GACtD,OAAO,CAAC,aAAa,CAAC;IAwCzB;;;;;;;;;OASG;IACG,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC;CAoBlG"}

package/lib/types/config.d.ts

@@ -0,0 +1,119 @@
+/**
+ * Plugin configuration and its explicit resolve step. `resolveConfig` re-judges
+ * every default and bound so programmatic construction that bypasses
+ * Schemastery normalization still fails loud instead of running with hidden
+ * defaults (the explicit-resolve contract).
+ *
+ * @module dsh-click/config
+ */
+import z from '@deepseek-ai/schemastery';
+/** How `screen_shot` decides between an image block and a text description. */
+export type ImageMode = 'auto' | 'text';
+/** Whether mutating actions may ever bring the target window to the foreground. */
+export type FocusFallback = 'never' | 'allow';
+/** Default per-helper-call timeout in milliseconds. */
+export declare const DEFAULT_HELPER_TIMEOUT_MS = 30000;
+/** Ceiling for one helper call: a screenshot of a large desktop can take a while. */
+export declare const MAX_HELPER_TIMEOUT_MS = 300000;
+/** Default cap on one helper response in bytes (PNG screenshots are base64-heavy). */
+export declare const DEFAULT_MAX_HELPER_OUTPUT_BYTES: number;
+/** Ceiling on one helper response. */
+export declare const MAX_HELPER_OUTPUT_BYTES: number;
+/** Default longest side of a captured screenshot in pixels (larger captures downscale). */
+export declare const DEFAULT_MAX_SCREENSHOT_SIDE = 2560;
+/** Bounds for the screenshot side: too small reads nothing, too large is unusable. */
+export declare const MIN_SCREENSHOT_SIDE = 320;
+export declare const MAX_SCREENSHOT_SIDE = 7680;
+/** Default maximum age of an observation that an action may still base on. */
+export declare const DEFAULT_MAX_OBSERVATION_AGE_MS = 30000;
+/** Bounds for the observation age. */
+export declare const MIN_OBSERVATION_AGE_MS = 1000;
+export declare const MAX_OBSERVATION_AGE_MS = 600000;
+/** Default cap on cached observations (LRU; actions address them by id). */
+export declare const DEFAULT_MAX_CACHED_OBSERVATIONS = 8;
+/** Ceiling on cached observations. */
+export declare const MAX_CACHED_OBSERVATIONS = 64;
+/** Default cap on elements the accessibility walk returns per observation. */
+export declare const DEFAULT_MAX_ELEMENTS = 500;
+/** Ceiling on the element cap. */
+export declare const MAX_ELEMENTS = 2000;
+/** Default maximum depth of the accessibility tree walk. */
+export declare const DEFAULT_MAX_TREE_DEPTH = 32;
+/** Ceiling on the tree depth. */
+export declare const MAX_TREE_DEPTH = 64;
+/** Default truncation length for sanitized model-visible strings. */
+export declare const DEFAULT_MAX_TEXT_LENGTH = 200;
+/** Ceiling on the sanitization truncation length. */
+export declare const MAX_TEXT_LENGTH = 10000;
+/** Configuration for the dsh-click desktop-control tools. */
+export interface Config {
+    /** Gate every mutating action (click/type/scroll/key/app_launch) behind approval (default true). */
+    requireApproval?: boolean;
+    /** Window title or executable-path regexes that skip the approval ask (still audited; default []). */
+    autoApproveWindows?: string[];
+    /** Whether mutating actions may bring the target window to the foreground as a fallback (default 'never'). */
+    focusFallback?: FocusFallback;
+    /** How `screen_shot` renders: image block for vision models, text otherwise (default 'auto'). */
+    imageMode?: ImageMode;
+    /** Per-helper-call timeout in milliseconds (default 30000). */
+    helperTimeoutMs?: number;
+    /** Cap on one helper response in bytes (default 25165824). */
+    maxHelperOutputBytes?: number;
+    /** Longest side of a captured screenshot in pixels (default 2560). */
+    maxScreenshotSide?: number;
+    /** Compare a fresh pixel hash before every action (default true; the stale-state boundary). */
+    staleCheckPixels?: boolean;
+    /** Maximum age in ms of an observation that an action may still base on (default 30000). */
+    maxObservationAgeMs?: number;
+    /** Cap on cached observations (default 8). */
+    maxCachedObservations?: number;
+    /** Cap on elements the accessibility walk returns (default 500). */
+    maxElements?: number;
+    /** Maximum depth of the accessibility tree walk (default 32). */
+    maxTreeDepth?: number;
+    /** Truncation length for sanitized model-visible strings (default 200). */
+    maxTextLength?: number;
+    /** Back up and restore control text when `type` fails (default true). */
+    rollbackEnabled?: boolean;
+}
+/** Fully resolved configuration captured at plugin load. */
+export interface ResolvedConfig {
+    /** Whether mutating actions require approval. */
+    requireApproval: boolean;
+    /** Compiled allowlist matchers (window title or executable path). */
+    autoApproveMatchers: ReadonlyArray<RegExp>;
+    /** Whether focus fallback is permitted. */
+    focusFallback: FocusFallback;
+    /** Screenshot render mode. */
+    imageMode: ImageMode;
+    /** Per-helper-call timeout in milliseconds. */
+    helperTimeoutMs: number;
+    /** Cap on one helper response in bytes. */
+    maxHelperOutputBytes: number;
+    /** Longest screenshot side in pixels. */
+    maxScreenshotSide: number;
+    /** Whether the pixel-level stale check runs. */
+    staleCheckPixels: boolean;
+    /** Maximum observation age in milliseconds. */
+    maxObservationAgeMs: number;
+    /** Cap on cached observations. */
+    maxCachedObservations: number;
+    /** Cap on elements per observation. */
+    maxElements: number;
+    /** Maximum tree-walk depth. */
+    maxTreeDepth: number;
+    /** Truncation length for sanitized strings. */
+    maxTextLength: number;
+    /** Whether `type` backs up and restores control text on failure. */
+    rollbackEnabled: boolean;
+}
+/** Schemastery schema for loader-validated configuration. */
+export declare const Config: z<Config>;
+/**
+ * Resolve raw config to the runtime policy, re-validating defaults and bounds.
+ *
+ * @param config - raw loader config; `undefined` for a bare row.
+ * @returns the frozen resolved config.
+ */
+export declare function resolveConfig(config: Config | undefined): ResolvedConfig;
+//# sourceMappingURL=config.d.ts.map

package/lib/types/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAExC,+EAA+E;AAC/E,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,CAAA;AAEvC,mFAAmF;AACnF,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,OAAO,CAAA;AAE7C,uDAAuD;AACvD,eAAO,MAAM,yBAAyB,QAAS,CAAA;AAE/C,qFAAqF;AACrF,eAAO,MAAM,qBAAqB,SAAU,CAAA;AAE5C,sFAAsF;AACtF,eAAO,MAAM,+BAA+B,QAAmB,CAAA;AAE/D,sCAAsC;AACtC,eAAO,MAAM,uBAAuB,QAAmB,CAAA;AAEvD,2FAA2F;AAC3F,eAAO,MAAM,2BAA2B,OAAO,CAAA;AAE/C,sFAAsF;AACtF,eAAO,MAAM,mBAAmB,MAAM,CAAA;AACtC,eAAO,MAAM,mBAAmB,OAAO,CAAA;AAEvC,8EAA8E;AAC9E,eAAO,MAAM,8BAA8B,QAAS,CAAA;AAEpD,sCAAsC;AACtC,eAAO,MAAM,sBAAsB,OAAQ,CAAA;AAC3C,eAAO,MAAM,sBAAsB,SAAU,CAAA;AAE7C,4EAA4E;AAC5E,eAAO,MAAM,+BAA+B,IAAI,CAAA;AAEhD,sCAAsC;AACtC,eAAO,MAAM,uBAAuB,KAAK,CAAA;AAEzC,8EAA8E;AAC9E,eAAO,MAAM,oBAAoB,MAAM,CAAA;AAEvC,kCAAkC;AAClC,eAAO,MAAM,YAAY,OAAQ,CAAA;AAEjC,4DAA4D;AAC5D,eAAO,MAAM,sBAAsB,KAAK,CAAA;AAExC,iCAAiC;AACjC,eAAO,MAAM,cAAc,KAAK,CAAA;AAEhC,qEAAqE;AACrE,eAAO,MAAM,uBAAuB,MAAM,CAAA;AAE1C,qDAAqD;AACrD,eAAO,MAAM,eAAe,QAAS,CAAA;AAErC,6DAA6D;AAC7D,MAAM,WAAW,MAAM;IACrB,oGAAoG;IACpG,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,sGAAsG;IACtG,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B,8GAA8G;IAC9G,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,iGAAiG;IACjG,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,+DAA+D;IAC/D,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,8DAA8D;IAC9D,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,sEAAsE;IACtE,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,+FAA+F;IAC/F,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,4FAA4F;IAC5F,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,8CAA8C;IAC9C,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,iEAAiE;IACjE,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,2EAA2E;IAC3E,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,yEAAyE;IACzE,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED,4DAA4D;AAC5D,MAAM,WAAW,cAAc;IAC7B,iDAAiD;IACjD,eAAe,EAAE,OAAO,CAAA;IACxB,qEAAqE;IACrE,mBAAmB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;IAC1C,2CAA2C;IAC3C,aAAa,EAAE,aAAa,CAAA;IAC5B,8BAA8B;IAC9B,SAAS,EAAE,SAAS,CAAA;IACpB,+CAA+C;IAC/C,eAAe,EAAE,MAAM,CAAA;IACvB,2CAA2C;IAC3C,oBAAoB,EAAE,MAAM,CAAA;IAC5B,yCAAyC;IACzC,iBAAiB,EAAE,MAAM,CAAA;IACzB,gDAAgD;IAChD,gBAAgB,EAAE,OAAO,CAAA;IACzB,+CAA+C;IAC/C,mBAAmB,EAAE,MAAM,CAAA;IAC3B,kCAAkC;IAClC,qBAAqB,EAAE,MAAM,CAAA;IAC7B,uCAAuC;IACvC,WAAW,EAAE,MAAM,CAAA;IACnB,+BAA+B;IAC/B,YAAY,EAAE,MAAM,CAAA;IACpB,+CAA+C;IAC/C,aAAa,EAAE,MAAM,CAAA;IACrB,oEAAoE;IACpE,eAAe,EAAE,OAAO,CAAA;CACzB;AAED,6DAA6D;AAC7D,eAAO,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAe3B,CAAA;AAgBF;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,cAAc,CA0ExE"}

package/lib/types/events.d.ts

@@ -0,0 +1,111 @@
+/**
+ * Session audit events for dsh-click (declaration merging into the harness's
+ * `SessionEventMap`). Both events are log-only; on harness builds that support
+ * the append envelope they should be marked `ignorable` (the pinned peer
+ * 0.1.0-rc.6 has no envelope option, so the append stays two-argument and
+ * remains compatible with both). Tool arguments and rendered results are
+ * already logged by the tool runtime as `tool/call` + `tool/result`; these
+ * events carry the observation and action facts that exist outside them:
+ * window identity, process identity, and the approval/outcome audit trail.
+ *
+ * @module dsh-click/events
+ */
+import type { ImageMediaType } from '@deepseek-ai/dsh-attachment';
+/** Process identity facts captured immediately before and after an action. */
+export interface ProcessFacts {
+    /** Process id owning the target window. */
+    pid: number;
+    /** Executable path, or null when the helper could not read it (permissions). */
+    executablePath: string | null;
+}
+/** One image saved into the attachment store by `screen_shot`. */
+export interface ObservedImage {
+    /** Content-addressed attachment id. */
+    attachmentId: string;
+    /** Verified media type of the stored bytes. */
+    mediaType: ImageMediaType;
+    /** Encoded byte length. */
+    bytes: number;
+    /** Intrinsic width in pixels. */
+    width: number;
+    /** Intrinsic height in pixels. */
+    height: number;
+}
+declare module '@deepseek-ai/dsh-session/types' {
+    interface SessionEventMap {
+        /**
+         * A screen observation was produced by `screen_shot` or `screen_read` —
+         * log-only audit. `observationId` is the id later actions cite in
+         * `basedOn`; window and process identity are the facts the action-time
+         * freshness check compares against.
+         */
+        'dsh-click/observed': {
+            /** Observation id (hash of the observed state). */
+            observationId: string;
+            /** Observed window handle. */
+            windowId: number;
+            /** Process id owning the window. */
+            processId: number;
+            /** Sanitized executable path, or null when unreadable. */
+            executablePath: string | null;
+            /** Sanitized window title. */
+            windowTitle: string;
+            /** Number of accessibility elements captured. */
+            elementCount: number;
+            /** The attached screenshot, when `screen_shot` stored one. */
+            image?: ObservedImage;
+        };
+        /**
+         * A mutating action was gated and executed (or refused) — log-only audit.
+         * `approved` records which gate allowed it; process facts prove the target
+         * process identity before and after the action.
+         */
+        'dsh-click/action': {
+            /** Tool that ran the action. */
+            tool: string;
+            /** Which gate allowed the action: approval ask, allowlist match, or none required. */
+            approved: 'approval' | 'allowlist' | 'none';
+            /** Final outcome: the action ran, or it was refused/failed. */
+            outcome: 'ok' | 'error';
+            /** Observation the action based on, when one was required. */
+            observationId?: string;
+            /** Target window handle, when the action addressed a window. */
+            windowId?: number;
+            /** Process identity captured before the action. */
+            processBefore?: ProcessFacts;
+            /** Process identity captured after the action. */
+            processAfter?: ProcessFacts;
+            /** True when a failed `type` restored the original control text. */
+            restored?: boolean;
+            /** Short sanitized detail (denial reason, stale-check detail). */
+            detail?: string;
+        };
+    }
+}
+/** The observation audit event type. */
+export declare const OBSERVED_EVENT: "dsh-click/observed";
+/** The action audit event type. */
+export declare const ACTION_EVENT: "dsh-click/action";
+/** Type of the observation audit payload. */
+export type ObservedEvent = {
+    observationId: string;
+    windowId: number;
+    processId: number;
+    executablePath: string | null;
+    windowTitle: string;
+    elementCount: number;
+    image?: ObservedImage;
+};
+/** Type of the action audit payload. */
+export type ActionEvent = {
+    tool: string;
+    approved: 'approval' | 'allowlist' | 'none';
+    outcome: 'ok' | 'error';
+    observationId?: string;
+    windowId?: number;
+    processBefore?: ProcessFacts;
+    processAfter?: ProcessFacts;
+    restored?: boolean;
+    detail?: string;
+};
+//# sourceMappingURL=events.d.ts.map

package/lib/types/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAEjE,8EAA8E;AAC9E,MAAM,WAAW,YAAY;IAC3B,2CAA2C;IAC3C,GAAG,EAAE,MAAM,CAAA;IACX,gFAAgF;IAChF,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;CAC9B;AAED,kEAAkE;AAClE,MAAM,WAAW,aAAa;IAC5B,uCAAuC;IACvC,YAAY,EAAE,MAAM,CAAA;IACpB,+CAA+C;IAC/C,SAAS,EAAE,cAAc,CAAA;IACzB,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAA;IACb,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAA;CACf;AAED,OAAO,QAAQ,gCAAgC,CAAC;IAC9C,UAAU,eAAe;QACvB;;;;;WAKG;QACH,oBAAoB,EAAE;YACpB,mDAAmD;YACnD,aAAa,EAAE,MAAM,CAAA;YACrB,8BAA8B;YAC9B,QAAQ,EAAE,MAAM,CAAA;YAChB,oCAAoC;YACpC,SAAS,EAAE,MAAM,CAAA;YACjB,0DAA0D;YAC1D,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;YAC7B,8BAA8B;YAC9B,WAAW,EAAE,MAAM,CAAA;YACnB,iDAAiD;YACjD,YAAY,EAAE,MAAM,CAAA;YACpB,8DAA8D;YAC9D,KAAK,CAAC,EAAE,aAAa,CAAA;SACtB,CAAA;QACD;;;;WAIG;QACH,kBAAkB,EAAE;YAClB,gCAAgC;YAChC,IAAI,EAAE,MAAM,CAAA;YACZ,sFAAsF;YACtF,QAAQ,EAAE,UAAU,GAAG,WAAW,GAAG,MAAM,CAAA;YAC3C,+DAA+D;YAC/D,OAAO,EAAE,IAAI,GAAG,OAAO,CAAA;YACvB,8DAA8D;YAC9D,aAAa,CAAC,EAAE,MAAM,CAAA;YACtB,gEAAgE;YAChE,QAAQ,CAAC,EAAE,MAAM,CAAA;YACjB,mDAAmD;YACnD,aAAa,CAAC,EAAE,YAAY,CAAA;YAC5B,kDAAkD;YAClD,YAAY,CAAC,EAAE,YAAY,CAAA;YAC3B,oEAAoE;YACpE,QAAQ,CAAC,EAAE,OAAO,CAAA;YAClB,kEAAkE;YAClE,MAAM,CAAC,EAAE,MAAM,CAAA;SAChB,CAAA;KACF;CACF;AAED,wCAAwC;AACxC,eAAO,MAAM,cAAc,EAAG,oBAA6B,CAAA;AAE3D,mCAAmC;AACnC,eAAO,MAAM,YAAY,EAAG,kBAA2B,CAAA;AAEvD,6CAA6C;AAC7C,MAAM,MAAM,aAAa,GAAG;IAC1B,aAAa,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,aAAa,CAAA;CACtB,CAAA;AAED,wCAAwC;AACxC,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,UAAU,GAAG,WAAW,GAAG,MAAM,CAAA;IAC3C,OAAO,EAAE,IAAI,GAAG,OAAO,CAAA;IACvB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,aAAa,CAAC,EAAE,YAAY,CAAA;IAC5B,YAAY,CAAC,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,CAAA"}

package/lib/types/index.d.ts

@@ -0,0 +1,39 @@
+/**
+ * `dsh-click` — cross-platform native desktop control for DeepSeek Harness
+ * (Windows first, macOS/Linux backends reserved).
+ *
+ * Host-only function plugin — no default export (the Loader unwraps
+ * `exports.default ?? exports`). It registers eight tools behind one shared
+ * safety boundary: observations are structured text (accessibility tree +
+ * pixel hints) so text-only models work, mutating actions must cite a fresh
+ * observation and pass approval (or the configured window allowlist), the
+ * native helper never steals foreground focus, and every action verifies the
+ * target process identity before and after.
+ *
+ * @module dsh-click
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import { Config } from './config.ts';
+export declare const name = "dsh-click";
+/** Hard services: the tool registry every contribution lands in. */
+export declare const inject: string[];
+export { Config, resolveConfig } from './config.ts';
+export { VERSION, HELPER_PROTOCOL_VERSION } from './version.ts';
+export { DshClickError } from './platform/types.ts';
+export { ObservationStore, observationIdOf, type ObservationRecord, type FreshnessVerdict } from './observe.ts';
+export { ActionExecutor, type ActionExecutorDeps, type ApprovalKind } from './actions.ts';
+export { createBackend, UnavailableBackend } from './platform/selection.ts';
+export { HelperBackend } from './platform/runner.ts';
+export { allTools, type ToolServices } from './tools.ts';
+export { OBSERVED_EVENT, ACTION_EVENT, type ObservedEvent, type ActionEvent, type ProcessFacts } from './events.ts';
+export { sanitizeText, sanitizePath, redactSensitive, sanitizeVisible } from './sanitize.ts';
+/**
+ * Mount the plugin: resolve config, select the platform backend, and register
+ * every tool through `ctx.tools.register` (each registration is an effect
+ * whose disposer removes exactly that tool on stop/HMR).
+ *
+ * @param ctx - context carrying the tools registry.
+ * @param config - raw loader config; defaults applied through {@link resolveConfig}.
+ */
+export declare function apply(ctx: Context, config: Config): void;
+//# sourceMappingURL=index.d.ts.map

package/lib/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAIlD,OAAO,EAAE,MAAM,EAAiB,MAAM,aAAa,CAAA;AAMnD,eAAO,MAAM,IAAI,cAAc,CAAA;AAE/B,oEAAoE;AACpE,eAAO,MAAM,MAAM,UAAY,CAAA;AAE/B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,KAAK,iBAAiB,EAAE,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/G,OAAO,EAAE,cAAc,EAAE,KAAK,kBAAkB,EAAE,KAAK,YAAY,EAAE,MAAM,cAAc,CAAA;AACzF,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,YAAY,CAAA;AACxD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAA;AACnH,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAE5F;;;;;;;GAOG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAYxD"}

package/lib/types/observe.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Observation cache and the staleness boundary. Every observation stores the
+ * window's identity facts plus content hashes; before any action the executor
+ * re-observes the window and this store compares. Identity, tree, or pixel
+ * drift — or an expired observation — refuses the action, so the model must
+ * re-observe instead of acting on a screen that changed.
+ *
+ * @module dsh-click/observe
+ */
+import type { ResolvedConfig } from './config.ts';
+import type { Rect, WindowSnapshot } from './platform/types.ts';
+/** One cached observation, immutable after construction. */
+export interface ObservationRecord {
+    /** Observation id (content hash). */
+    id: string;
+    windowId: number;
+    processId: number;
+    executablePath: string | null;
+    title: string;
+    className: string;
+    rect: Rect;
+    treeHash: string;
+    shotHash: string;
+    elementCount: number;
+    /** Wall-clock capture time in milliseconds. */
+    observedAt: number;
+}
+/** The staleness verdict: ok, or a stable refusal code plus a model-readable detail. */
+export type FreshnessVerdict = {
+    ok: true;
+} | {
+    ok: false;
+    code: 'UNKNOWN_OBSERVATION' | 'EXPIRED' | 'STALE_IDENTITY' | 'STALE_TREE' | 'STALE_PIXELS';
+    detail: string;
+};
+/**
+ * Hash the observable state of one window into a stable observation id.
+ *
+ * @param snapshot - the snapshot facts.
+ * @returns a hex observation id.
+ */
+export declare function observationIdOf(snapshot: WindowSnapshot): string;
+/** Bounded LRU cache of observations, plus the staleness verdict logic. */
+export declare class ObservationStore {
+    private readonly config;
+    private readonly entries;
+    /** @param config - resolved caps (cache size, max age, pixel check). */
+    constructor(config: ResolvedConfig);
+    /**
+     * Cache one observation and return it.
+     *
+     * @param snapshot - the snapshot facts it came from.
+     * @returns the stored record (id = hash of the state).
+     */
+    record(snapshot: WindowSnapshot): ObservationRecord;
+    /**
+     * Look one observation up by id.
+     *
+     * @param id - the observation id an action cites.
+     * @returns the record, or undefined when unknown or evicted.
+     */
+    get(id: string): ObservationRecord | undefined;
+    /**
+     * Compare a fresh re-observation against the cited record. The verdict is
+     * `ok` only when identity (window/pid/exe/title/class/rect), the tree hash,
+     * and — when `staleCheckPixels` is on — the pixel hash all still match, and
+     * the record is not older than `maxObservationAgeMs`.
+     *
+     * @param record - the observation the action cites.
+     * @param fresh - the re-observation captured immediately before the action.
+     * @param now - wall-clock now (injectable for tests).
+     * @returns the verdict.
+     */
+    verify(record: ObservationRecord, fresh: WindowSnapshot, now?: number): FreshnessVerdict;
+}
+//# sourceMappingURL=observe.d.ts.map

package/lib/types/observe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"observe.d.ts","sourceRoot":"","sources":["../../src/observe.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAE/D,4DAA4D;AAC5D,MAAM,WAAW,iBAAiB;IAChC,qCAAqC;IACrC,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,IAAI,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,+CAA+C;IAC/C,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,wFAAwF;AACxF,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,qBAAqB,GAAG,SAAS,GAAG,gBAAgB,GAAG,YAAY,GAAG,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAE7H;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CAYhE;AAED,2EAA2E;AAC3E,qBAAa,gBAAgB;IAIf,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuC;IAE/D,wEAAwE;gBAC3C,MAAM,EAAE,cAAc;IAEnD;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,EAAE,cAAc,GAAG,iBAAiB;IAwBnD;;;;;OAKG;IACH,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS;IAI9C;;;;;;;;;;OAUG;IACH,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,GAAE,MAAmB,GAAG,gBAAgB;CAsCrG"}

package/lib/types/platform/runner.d.ts

@@ -0,0 +1,40 @@
+/**
+ * The Windows backend: every operation spawns the native PowerShell helper
+ * (`native/win32/dsh-click-helper.ps1`) through the harness's `ctx.subprocess`
+ * seam. The request travels as JSON on stdin; the response is JSON on stdout
+ * and is validated field-by-field at this wire boundary. Each call is
+ * deadline-bounded (config `helperTimeoutMs`) and aborts with the caller's
+ * signal (the subprocess service escalates to tree termination).
+ *
+ * @module dsh-click/platform/runner
+ */
+import type { SubprocessRuntime } from '@deepseek-ai/dsh-subprocess';
+import type { ResolvedConfig } from '../config.ts';
+import { type ActionOutcome, type AppInfo, type ClickRequest, type DesktopBackend, type KeyRequest, type LaunchOutcome, type Screenshot, type ScrollRequest, type Tree, type WindowInfo, type WindowRef, type WindowSnapshot, type TypeRequest } from './types.ts';
+/** The Windows helper backend over `ctx.subprocess`. */
+export declare class HelperBackend implements DesktopBackend {
+    private readonly config;
+    private readonly subprocess;
+    /** Resolved powershell executable path, cached across calls. */
+    private powershell;
+    readonly available = true;
+    /** @param config - resolved limits for timeout and output size. */
+    /** @param subprocess - the subprocess service that runs the helper. */
+    constructor(config: ResolvedConfig, subprocess: SubprocessRuntime);
+    readonly platform = "win32";
+    /** Run one helper operation and return its validated result payload. */
+    private invoke;
+    /** Resolve (and cache) the powershell executable through the subprocess seam. */
+    private resolvePowershell;
+    listWindows(signal?: AbortSignal): Promise<WindowInfo[]>;
+    shot(ref: WindowRef, maxSide: number, signal?: AbortSignal): Promise<Screenshot>;
+    tree(ref: WindowRef, maxElements: number, maxDepth: number, includePixels: boolean, signal?: AbortSignal): Promise<Tree>;
+    snapshot(windowId: number, signal?: AbortSignal): Promise<WindowSnapshot>;
+    click(request: ClickRequest, focusFallback: boolean, signal?: AbortSignal): Promise<ActionOutcome>;
+    type(request: TypeRequest, focusFallback: boolean, signal?: AbortSignal): Promise<ActionOutcome>;
+    scroll(request: ScrollRequest, focusFallback: boolean, signal?: AbortSignal): Promise<ActionOutcome>;
+    key(request: KeyRequest, focusFallback: boolean, signal?: AbortSignal): Promise<ActionOutcome>;
+    apps(signal?: AbortSignal): Promise<AppInfo[]>;
+    launch(name: string, args: readonly string[], signal?: AbortSignal): Promise<LaunchOutcome>;
+}
+//# sourceMappingURL=runner.d.ts.map

package/lib/types/platform/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../../src/platform/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AACpE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAElD,OAAO,EAML,KAAK,aAAa,EAClB,KAAK,OAAO,EACZ,KAAK,YAAY,EACjB,KAAK,cAAc,EAInB,KAAK,UAAU,EACf,KAAK,aAAa,EAGlB,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,IAAI,EACT,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,WAAW,EACjB,MAAM,YAAY,CAAA;AA6HnB,wDAAwD;AACxD,qBAAa,aAAc,YAAW,cAAc;IAShD,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAT7B,gEAAgE;IAChE,OAAO,CAAC,UAAU,CAA6B;IAE/C,QAAQ,CAAC,SAAS,QAAO;IAEzB,mEAAmE;IACnE,uEAAuE;gBAEpD,MAAM,EAAE,cAAc,EACtB,UAAU,EAAE,iBAAiB;IAGhD,QAAQ,CAAC,QAAQ,WAAU;IAE3B,wEAAwE;YAC1D,MAAM;IAsDpB,iFAAiF;IACjF,OAAO,CAAC,iBAAiB;IAanB,WAAW,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAMxD,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAgBhF,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAexH,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC;IASzE,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC;IAKlG,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC;IAKhG,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC;IAKpG,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC;IAK9F,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAoB9C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC;CAYlG"}

package/lib/types/platform/selection.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Backend selection: which {@link DesktopBackend} serves this deployment.
+ * Selection never fails at load — an unsupported platform or a missing
+ * subprocess service yields an unavailable backend whose every call fails
+ * closed with a model-readable reason, so profiles keep booting everywhere
+ * and actions refuse loudly instead of silently doing nothing.
+ *
+ * @module dsh-click/platform/selection
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { ResolvedConfig } from '../config.ts';
+import { type ActionOutcome, type AppInfo, type DesktopBackend, type LaunchOutcome, type Screenshot, type Tree, type WindowInfo, type WindowSnapshot } from './types.ts';
+/** A backend that cannot act: every operation fails closed with the given reason. */
+export declare class UnavailableBackend implements DesktopBackend {
+    readonly platform: string;
+    readonly reason: string;
+    /** @param platform - the platform id this stub stands in for. */
+    /** @param reason - model-readable reason why the backend cannot act. */
+    constructor(platform: string, reason: string);
+    readonly available = false;
+    get unavailableReason(): string;
+    /** Throw the shared backend-unavailable failure. */
+    private refuse;
+    listWindows(): Promise<WindowInfo[]>;
+    shot(): Promise<Screenshot>;
+    tree(): Promise<Tree>;
+    snapshot(): Promise<WindowSnapshot>;
+    click(): Promise<ActionOutcome>;
+    type(): Promise<ActionOutcome>;
+    scroll(): Promise<ActionOutcome>;
+    key(): Promise<ActionOutcome>;
+    apps(): Promise<AppInfo[]>;
+    launch(): Promise<LaunchOutcome>;
+}
+/**
+ * Select the backend for this deployment. Windows needs `ctx.subprocess` to
+ * run the native helper; every other platform is reserved and fails closed.
+ *
+ * @param ctx - the mounting context.
+ * @param config - resolved plugin config (helper limits).
+ * @returns the active backend (possibly unavailable).
+ */
+export declare function createBackend(ctx: Context, config: ResolvedConfig): DesktopBackend;
+//# sourceMappingURL=selection.d.ts.map

package/lib/types/platform/selection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"selection.d.ts","sourceRoot":"","sources":["../../../src/platform/selection.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAElD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAElD,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,OAAO,EACZ,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,IAAI,EACT,KAAK,UAAU,EACf,KAAK,cAAc,EACpB,MAAM,YAAY,CAAA;AAEnB,qFAAqF;AACrF,qBAAa,kBAAmB,YAAW,cAAc;IAG3C,QAAQ,CAAC,QAAQ,EAAE,MAAM;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM;IAF9D,iEAAiE;IACjE,wEAAwE;gBACnD,QAAQ,EAAE,MAAM,EAAW,MAAM,EAAE,MAAM;IAE9D,QAAQ,CAAC,SAAS,SAAQ;IAE1B,IAAI,iBAAiB,IAAI,MAAM,CAE9B;IAED,oDAAoD;IACpD,OAAO,CAAC,MAAM;IAOd,WAAW,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IACpC,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC;IAC3B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IACrB,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC;IACnC,KAAK,IAAI,OAAO,CAAC,aAAa,CAAC;IAC/B,IAAI,IAAI,OAAO,CAAC,aAAa,CAAC;IAC9B,MAAM,IAAI,OAAO,CAAC,aAAa,CAAC;IAChC,GAAG,IAAI,OAAO,CAAC,aAAa,CAAC;IAC7B,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAC1B,MAAM,IAAI,OAAO,CAAC,aAAa,CAAC;CACjC;AAQD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,GAAG,cAAc,CASlF"}