Skip to content

fix(apple): refuse captures whose window or panel identity is unknown - #3761

Open
thymikee wants to merge 12 commits into
mainfrom
fix/adr-drift-apple-capture-identity
Open

thymikee wants to merge 12 commits into
mainfrom
fix/adr-drift-apple-capture-identity

Conversation

@thymikee

@thymikee thymikee commented Oct 16, 2026 •

Copy link
Copy Markdown
Member

Summary

  • Native macOS capture, scroll, and click fallback share one visible, nonempty layer-0 front-window selection and one on-screen window-list query. App-modal level-8 alerts and floating palettes are skipped. Capture refuses instead of substituting another window, with typed exclusion reasons and a runnable snapshot remedy. Each refusal builds its reason, hint, and front-window id in the Swift helper, so the TypeScript client forwards the details envelope without a lookup table. Screenshot and scroll report window-list-unreadable with a retry hint when the window-list query fails.
  • Foldable capture refuses with capture-panel-unidentified when neither panel power nor primary identity selects a panel. Help warns that an ambiguous primary panel may be dark.

10 files. Part of #3744. ADR 0031 and modal-panel eligibility remain outside this PR. Helper packaging (npm files and Package.swift test targets) is owned by a separate PR.

Validation

  • Head 6d40fbc0f2: pnpm check:affected --run --head 6d40fbc0f2 passed (exactCommit=true) (receipt run-ggnrE5).
  • At 6d40fbc0f2: Swift debug build and 16 helper + 6 input tests passed, including nil-versus-empty reads and per-refusal hint pins. 12 focused helper tests and 1338 capture/platform-apple tests passed. Format, lint, typecheck, layering, fallow, and docs checks passed in the receipt above.
  • Live native runs on this Mac (Screen Recording granted, helper rebuilt from this head, isolated session and state dir): TextEdit front-window captures succeeded (1172x976 and 780x636 PNGs); a menu-bar-only app after closing its windows refused with COMMAND_FAILED, details.reason: "window-not-found", and details.hint: "Open or unminimize a window of the app on the current Space, then retry the screenshot." reaching the CLI untouched. Sessions closed, daemon stopped, state dir removed.
  • Earlier-head live evidence also covers minimized-window refusal, overlays, diff, and front-only scrolling. Capture exclusions remain fixture-tested; no iOS 27.1 Duo run.
  • New-head CI: pending; Coverage, Integration, native/device lanes remain required.

View guided diff Turn on auto-fix

ADR 0031 decides that a native macOS app screenshot captures only the
app's front window through ScreenCaptureKit (#3188). When the front
window's WindowServer ID was missing from the shareable candidates, the
helper captured the app's largest window instead, so the image could
show a window the user was not looking at.

The helper now selects the front window by ID or refuses with a typed
reason: `window-not-found` when the app has no on-screen window,
`front-window-not-shareable` when ScreenCaptureKit does not offer the
front window. The shared outcomes fixture pins both reasons for Swift
and TypeScript, and the host adds a hint for each.

Evidence: the audit at bd4fd68 (AppWindowScreenshot.swift:21);
re-verified on 4c1c786. Part of #3744.
ADR 0025 decides that only CoreDevice facts identify a panel: the sole
lit panel, otherwise the `primary` panel, and never array position.
When no panel reported `primary` and power did not decide one lit
panel, the inventory captured the first lit or first integrated panel
in list order.

That inventory now names no panel, and capture-target resolution
refuses with COMMAND_FAILED, reason `capture-panel-unidentified`, and a
hint. The sole-lit-panel path and the primary-panel path are unchanged.
The foldable help topic states the refusal.

Evidence: the audit at bd4fd68 (display-inventory.ts:261);
re-verified on 4c1c786. Part of #3744.

@cubic-dev-ai cubic-dev-ai Bot left a comment •

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All reported issues were addressed across 10 files

You’re at about 91% of the monthly reviewed-line limit. You may want to disable incremental reviews to conserve quota. Reviews will continue until that limit is exceeded. If you need help avoiding interruptions, please contact contact@cubic.dev.

Reply with feedback, questions, or to request a fix.

View guided diff | Turn on auto-fix | Re-trigger cubic

Comment thread packages/platform-apple/src/os/macos/helper.test.ts Outdated
Comment thread src/commands/system/index.ts Outdated
Comment thread packages/platform-apple/src/os/macos/helper.ts Outdated
@github-actions

github-actions Bot commented Oct 16, 2026 •

Copy link
Copy Markdown
Contributor

Size Report

Metric Base Current Diff
Installed (including dependencies) 5.32 MB 5.33 MB +11.2 kB
Package (unpacked) 5.32 MB 5.33 MB +11.2 kB
Package (download) 1.60 MB 1.60 MB +2.8 kB

Startup median (7 runs, lower is better):

Scenario Base Current Diff
CLI --version 19.4 ms 21.2 ms +1.9 ms
CLI --help 51.7 ms 52.6 ms +1.0 ms

@github-actions

github-actions Bot commented Oct 16, 2026 •

Copy link
Copy Markdown
Contributor
PR Preview Action v1.8.1

QR code for preview link

🚀 View preview at
https://callstack.github.io/agent-device/pr-preview/pr-3761/

Built to branch gh-pages at 2026-10-17 13:27 UTC.
Preview will be ready when the GitHub Pages deployment is complete.

@thymikee

Copy link
Copy Markdown
Member Author

The Swift change looks right, but the native-backend screenshot route has no live evidence yet, so it needs one run on a real host before merge (reviewed at dec7c9b).

AppWindowScreenshot.swift:19 changes the native-backend route for every macOS app capture. When there is no front window ID, or ScreenCaptureKit does not list the front ID, it now throws. It used to return the largest window. If a live app has a CGWindowList front window that SCShareableContent drops (for example a zero-area or transient layer-0 window), every screenshot of that app would now fail. No fixture can show whether that happens, and no live run reached this route because the author's host lacks Screen Recording permission. Could you run it on a host with Screen Recording granted? Set AGENT_DEVICE_MACOS_APP_BACKEND=native and open TextEdit. Run agent-device screenshot and show that the PNG holds the front window. Then minimize every TextEdit window and run screenshot again. It should fail with COMMAND_FAILED, reason window-not-found, and the hint. The minimized case is easy to provoke, unlike front-window-not-shareable. A Duo run is optional, since the changed branch is unit-proven and the lit-panel path is unchanged. Run one only on a host with the iOS 27.1 runtime.

I did not run the Swift or Vitest suites. The regression value of the Swift tests relies on the author's planted-fallback report, because frontCaptureWindow is new. The Duo refusal path is fixture-only, since a CoreDevice payload without a primary panel cannot be produced on a real host.

Smoke Tests failed in the iOS runner suite on RunnerTests.testSynthesizedReplacementLeavesAMaskedFieldUnverified (RunnerTests+SynthesizedTextEntryTests.swift:169), where the masked-field bullet count was 13 instead of 8. This PR changes nothing under apple/runner or the text-entry route, so the failure looks unrelated. No conflicts.

Of the open inline threads, the two docs-wording notes still apply: system/index.ts:281 (lit panel wording) and helper.ts:157-158 (retry hint wording). The helper.test.ts:247 thread does not apply: the PR leaves screenshot argv unchanged, and the existing argv test owns that shape. You can resolve it.

Before merge, this PR needs the live native-backend evidence above: a front-window PNG from on-screen TextEdit, and the window-not-found refusal with the hint when every TextEdit window is minimized.

Choose the first on-screen normal-layer app window with positive alpha and nonempty bounds. Keep interaction window selection unchanged and refuse if an eligible front window is absent from ScreenCaptureKit.

Review: #3761 (comment)
@thymikee

Copy link
Copy Markdown
Member Author

Follow-up head: f8e9688ac6.

  • fa3fe4f774: screenshot selection now rejects off-screen, nonzero-layer, fully transparent, and empty CGWindowList entries before matching the front ID in ScreenCaptureKit. A visible/nonempty front window omitted by ScreenCaptureKit still refuses; there is no substitution.
  • a77578f8ee, f8e9688ac6: capture-exclusion hint and ambiguous-primary-panel wording fixed.
  • Threads: 2 fixed, 1 not applicable and resolved per maintainer; 0 rejected/open.

pnpm check:affected --run --head f8e9688ac6 passed (exactCommit=true, receipt run-KhgbXp). Focused Vitest: 48 passed. Swift helper: 13 passed; release build and XCTest selection passed. Removing alpha/size filters in a disposable checkout made both added tests fail (11 passed); cleanup completed.

Previous-head CI: only iOS Smoke Tests failed, at the unchanged masked-field assertion (13 bullets vs 8). PR #3722 has the identical failure. That runner XCTest exercises neither changed capture route. Android/Linux/macOS smoke, Coverage, Integration, package/guards, docs/preview, CodeQL, Size, and cubic passed; the fixture-cache matrix job was skipped. New-head CI is pending.

Live check remains with maintainer: preflight is false; native TextEdit screenshot returned COMMAND_FAILED, permission: screen-recording, before dispatch. With permission granted, verify the front-window PNG and minimized-all-windows window-not-found plus hint. Isolated daemon stopped.

@thymikee

Copy link
Copy Markdown
Member Author

Live macOS evidence at f8e9688ac6 (native backend, Screen Recording granted, CGPreflightScreenCaptureAccess() == true).

Setup: AGENT_DEVICE_MACOS_APP_BACKEND=native, isolated --state-dir, TextEdit with three windows: live3761-front.txt (front), live3761-back.txt, and an existing Untitled. The helper that ran (~/.agent-device/macos-helper/current/agent-device-macos-helper, sha1 ce2f5974…) is byte-identical to pnpm build:macos-helper from this head.

  1. screenshot front.png → 1312×844 PNG of live3761-front.txt (title bar and text "FRONT WINDOW" visible), not another window.
  2. All three windows minimized through their AX minimize buttons, then screenshot → COMMAND_FAILED, details.reason: "window-not-found", hint "Open or unminimize a window of the app on the current Space, then retry the screenshot.", dispatched: "no". No PNG was written.
  3. One window restored: screenshot --overlay-refs annotates 4 refs on the front window; diff screenshot --baseline front.png reports 100 of 1,107,328 pixels changed, one 4×26 region at the text caret (the blinking cursor). Overlay and live diff use the front window.

Not run: a sheet or popover, a fullscreen Space, and the iOS 27.1 iPhone Duo (this host has no iOS 27.1 runtime). Cleanup: test documents closed, Untitled restored, session closed, daemon stopped.

@thymikee

Copy link
Copy Markdown
Member Author

Addressed all three follow-up findings in separate commits: M1 dd5a35e488 shares front-window eligibility; L1 c326cafbfd defines it in help/docs; L2 0de4a1e2c8 distinguishes capture exclusions with a typed reason and non-retry hint. M2/ADR 0031 remain out of scope. No unresolved review threads.

At 0de4a1e2c8: 14 Swift tests passed, focused TypeScript/help/doc checks passed, CLI/native builds and XCTest selection passed. check:affected --run --head 0de4a1e2c8 passed with exactCommit=true, checkoutChanged=false (receipt run-CDMHCO). Disposable mutations fail the intended selection/exclusion tests; restoring fixes passes.

Live on this Mac with AGENT_DEVICE_MACOS_APP_BACKEND=native, worktree-built helper, session pr3761-r2, and worktree-local state: the 1312×844 PNG shows pr3761-r2-front.txt, not the back document. scroll down --pixels 300 reports ax-scroll-bar; the next PNG starts at FRONT line 23. AX text y changes 221→−80 only in the front document; back stays 192. Both created documents closed through close buttons; existing Untitled untouched; session/daemon stopped.

Prior-head CI is green; new-head CI is pending.

@cubic-dev-ai cubic-dev-ai Bot left a comment •

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All reported issues were addressed across 8 files (changes from recent commits).

You’re at about 96% of the monthly reviewed-line limit. You may want to disable incremental reviews to conserve quota. Reviews will continue until that limit is exceeded. If you need help avoiding interruptions, please contact contact@cubic.dev.

Reply with feedback, questions, or to request a fix.

View guided diff | Turn on auto-fix | Re-trigger cubic

Share the on-screen window-list query while preserving nil versus empty point refusals. Pin layer-8 alert exclusion at the shared selection boundary.

Review: #3761 (comment)
@thymikee

Copy link
Copy Markdown
Member Author

Round 4 head: 5e16f816b5.

  • bb69e6a301: one on-screen query and shared frontWindow owner; nil-versus-empty point refusals preserved; level-8 alert fixture added.
  • 5e16f816b5: help/docs state layer-0 eligibility and skipped app-modal alerts; capture-exclusion hint gives runnable snapshot step.
  • Threads: 1 fixed and resolved (cubic); 0 rejected/open. All four round-3 low findings addressed. Issue comments, reviews, and inline threads reread.

Validation: exact-head affected gate passed (exactCommit=true, checkoutChanged=false, receipt run-3OxBK9); format, Swift debug/release builds, 15 helper + 6 input tests, 102 focused TS/help/doc tests, XCTest selection passed. Initial gate failed an unchanged config assertion because generated PID path test-run-12316 matched synthetic run-123; controlled reproduction fails identically on base 0de4a1e2c8 and head (1 failed/18 passed), then normal gate passed. Experiment checkout removed.

Live native TextEdit, rebuilt helper: 1312×844 PNG visibly captures pr3761-r4-front.txt, with Untitled behind it. Test document/session closed; isolated daemon stopped.

New-head CI pending; monitoring for up to ~40 minutes. No merge or approval.

@cubic-dev-ai cubic-dev-ai Bot left a comment •

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All reported issues were addressed across 7 files (changes from recent commits).

You’re at about 96% of the monthly reviewed-line limit. You may want to disable incremental reviews to conserve quota. Reviews will continue until that limit is exceeded. If you need help avoiding interruptions, please contact contact@cubic.dev.

Reply with feedback, questions, or to request a fix.

View guided diff | Turn on auto-fix | Re-trigger cubic

Comment thread apple/macos-helper/Sources/AgentDeviceMacOSHelper/BackgroundInteraction.swift Outdated
Refuse screenshot and scroll with window-list-unreadable when the shared window-list read fails, and preserve a retry hint through the host helper client.

Review: #3761 (comment)
@thymikee

Copy link
Copy Markdown
Member Author

Round 5 head: 70acf8844c71e0de43730edda7c43e818ee70a8a (pushed).

Screenshot and scroll now refuse nil window-list reads with window-list-unreadable and a retry hint. Empty lists still mean no window. no-accessible-target was unsuitable because its native-interactor mapping reports unsupported backend and suggests XCTest. The new reason is pinned in the shared Swift/TypeScript fixture; no help/docs reason list needs extending.

Threads: 1 fixed and resolved (cubic); 0 rejected/open. Issue comments, submitted reviews, and inline threads reread; no new maintainer items. Follow-up self-review found no further issue; no separate reviewer used this round.

Validation: 16 helper + 6 input Swift tests, 26 focused TypeScript tests, format, and XCTest selection passed. pnpm check:affected --run --head 70acf8844c passed (exactCommit=true, checkoutChanged=false, receipt run-tnR25f). Optional live run skipped; earlier-head evidence remains attributed in the body.

Current-head CI is queued/in progress, with no result yet. Previous-head completed checks passed; iOS/macOS smoke were pending. PR is conflict-free. No merge or approval.

@thymikee

Copy link
Copy Markdown
Member Author

This PR is ready at 70acf88. The two points from the earlier review (#3761 (comment)) are fixed: a nil window list now throws window-list-unreadable instead of collapsing to window-not-found, and requireAppWindowPoint now reads appWindowInfo(), so one CGWindowListCopyWindowInfo definition remains. Not blocking, and you can take or leave these: requireAppWindowPoint (BackgroundInteraction.swift:309) still refuses an unreadable list as noAccessibleTarget, so press and fill never reach window-list-unreadable (the rule would be that every nil appWindowInfo() read refuses with window-list-unreadable), and the window-list hint in runMacOsHelper (helper.ts:386) is a literal, where a Record<WindowListRefusalReason,string> table beside MACOS_SCREENSHOT_REFUSAL_HINTS would give one hint mechanism.

On the open threads, both Cubic threads are fixed at this head, so you can resolve them: #3761 (comment) (nil list now throws) and #3761 (comment) (single window-info read).

All 20 checks pass at 70acf88, and no conflicts are known. I did not run the Swift or Vitest suites. I judged the nil-list test from the diff, since the old ?? [] returned nil and did not throw. There is no live run at 70acf88: the nil-list path cannot be provoked on a real host, and the earlier live run at 5e16f81 covers the unchanged success path. I also did not check that kCGWindowIsOnscreen and kCGWindowAlpha bridge as Bool and Double on every macOS version. Nothing else needs to happen before merge.

@thymikee thymikee added the ready-for-human Valid work that needs human implementation, judgment, or maintainer merge label Oct 17, 2026
The helper owns each refusal's reason and remedy, so its details
envelope carries the hint and the TypeScript client needs no lookup
table, wrapper, or special case. Collapse the one-case WindowListRefusal
enum and the screenshot Result mapping into the throw sites that already
own them, and keep the front-window selection as one plain function.
Press, fill, and their window fallback use the non-throwing path;
requireAppWindowPoint has already refused an unreadable list there.

The front-window help sentence states the layer-0 rule and the alert
exclusion once.
@thymikee

Copy link
Copy Markdown
Member Author

Head 6d40fbc0f2 (applied the approved smaller design; fast-forward over 70acf8844c).

  • Hints moved into Swift: AppWindowScreenshotRefusal.error(bundleId:) builds reason, hint, and frontWindowId; frontWindow throws window-list-unreadable with its hint.
  • Removed from TS: MACOS_SCREENSHOT_REFUSAL_HINTS, withScreenshotRefusalHint, isMacOsScreenshotRefusalReason, the window-list-unreadable special case in runMacOsHelper, and the screenshot/window-list reason lists with their fixture entries (nothing branches on them). Removed the one-case WindowListRefusal enum; frontShareableWindow(candidates, front:windowID:) replaces frontCaptureWindow + the separate refusal mapper. Press/fill/actionWindow use the non-throwing path (requireAppWindowPoint refuses first); screenshot and scroll keep propagating the typed refusal. Help/doc front-window sentence stated once. Packaging (package.json files, Package.swift) stays for its own PR.
  • Size (npm pack --dry-run, same machine, base origin/main): unpacked 5,377,473 B / 624 files base vs 5,332,905 B / 611 files here; packed 1,619,366 B vs 1,604,387 B.
  • Receipt: pnpm check:affected --run --head 6d40fbc0f2 passed (exactCommit=true, receipt run-ggnrE5). Swift: build + 22 tests green.
  • Live (native backend, Screen Recording granted): TextEdit front-window capture OK; menu-bar-only app with its last window closed refuses via CLI with details.reason: "window-not-found" and details.hint: "Open or unminimize a window of the app on the current Space...". Sessions closed, state dir removed.

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 issue found across 9 files (changes from recent commits).

You’re at about 97% of the monthly reviewed-line limit. You may want to disable incremental reviews to conserve quota. Reviews will continue until that limit is exceeded. If you need help avoiding interruptions, please contact contact@cubic.dev.

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. When an issue isn't valid or won't be fixed in this PR, reply in its thread with the reason and then resolve the thread. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="apple/macos-helper/Sources/AgentDeviceMacOSHelper/BackgroundInteraction.swift">

<violation number="1" location="apple/macos-helper/Sources/AgentDeviceMacOSHelper/BackgroundInteraction.swift:370">
P2: `try?` here turns an unreadable window list into "no front window", so press and fill refuse with a generic `no-accessible-target` reason instead of `window-list-unreadable`. That contradicts the `frontWindow` doc comment. Let `actionWindow` throw again and propagate the error through `resolvePressTarget` and `fillInBackground`, or pass the window info read by `requireAppWindowPoint` into it.</violation>
</file>

Reply with feedback, questions, or to request a fix.

View guided diff | Turn on auto-fix | Re-trigger cubic

if let window = elementAttribute(hit, attribute: kAXWindowAttribute as String) { return window }
}
guard let front = frontWindowFrame(pid: app.processIdentifier) else { return nil }
guard let front = try? frontWindowFrame(pid: app.processIdentifier) else { return nil }

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2: try? here turns an unreadable window list into "no front window", so press and fill refuse with a generic no-accessible-target reason instead of window-list-unreadable. That contradicts the frontWindow doc comment. Let actionWindow throw again and propagate the error through resolvePressTarget and fillInBackground, or pass the window info read by requireAppWindowPoint into it.

Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. When an issue isn't valid or won't be fixed in this PR, reply in its thread with the reason and then resolve the thread. At apple/macos-helper/Sources/AgentDeviceMacOSHelper/BackgroundInteraction.swift, line 370:

<comment>`try?` here turns an unreadable window list into "no front window", so press and fill refuse with a generic `no-accessible-target` reason instead of `window-list-unreadable`. That contradicts the `frontWindow` doc comment. Let `actionWindow` throw again and propagate the error through `resolvePressTarget` and `fillInBackground`, or pass the window info read by `requireAppWindowPoint` into it.</comment>

<file context>
@@ -360,13 +360,14 @@ private func pressSearchChain(from hit: AXUIElement) -> [AXUIElement] {
     if let window = elementAttribute(hit, attribute: kAXWindowAttribute as String) { return window }
   }
-  guard let front = try frontWindowFrame(pid: app.processIdentifier) else { return nil }
+  guard let front = try? frontWindowFrame(pid: app.processIdentifier) else { return nil }
   return windows(of: AXUIElementCreateApplication(app.processIdentifier)).first { window in
     guard let rect = rectAttribute(window) else { return false }
</file context>

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not reachable as described: press and fill call requireAppWindowPoint before actionWindow (BackgroundInteraction.swift:98, 171), so an unreadable list already refused there (no-accessible-target, "the app's on-screen windows could not be read") before frontWindowFrame is asked. The try? only covers the race where the list turns unreadable between those two reads, and the approved design treats that as no fallback window. window-list-unreadable is owned by frontWindow and propagates through screenshot and scroll, which have no earlier read.

@thymikee

Copy link
Copy Markdown
Member Author

The code at 6d40fbc looks good, and I found nothing new to fix. The earlier review at 70acf88 was clean (#3761 (comment)). The delta since then removes the extra window-list definition and makes frontWindow throw window-list-unreadable on a nil list.

CI is still running. Smoke Tests, Repo Guards & Compatibility and Coverage are queued or in progress, with no failures so far. Repo Guards covers the deleted contracts fixture keys and the helper.test.ts vocabulary test, so that job matters for this delta. Smoke Tests do not exercise the native macOS helper route. There are no conflicts.

I did not re-run the live macOS evidence, and I did not check that the helper was rebuilt from this head, as the PR body says. I did not run the Swift tests. The helper.test.ts pass-through test uses a hand-written envelope, so it shows that TS forwards details, not that Swift emits them.

Two cubic-dev-ai threads are fixed at this head, so please resolve them. #3761 (comment) is fixed because requireAppWindowPoint now reads appWindowInfo() (BackgroundInteraction.swift:309), which leaves one CGWindowListCopyWindowInfo definition (:511). #3761 (comment) is fixed because frontWindow throws window-list-unreadable on a nil list (BackgroundInteraction.swift:519-528) and no longer falls back to ?? []. One more cubic-dev-ai thread does not apply, so please resolve it too. press and fill already refuse an unreadable list as no-accessible-target in requireAppWindowPoint (BackgroundInteraction.swift:308-311), before actionWindow runs. The try? at :370 only covers a read that fails within milliseconds after that, and it yields a refusal, never a wrong target. This matches main and the reason contract you chose last round. #3761 (comment)

Before merge, the pending Smoke Tests, Repo Guards & Compatibility and Coverage jobs need to finish green.

@thymikee

Copy link
Copy Markdown
Member Author

The delta since 70acf88 holds up. At 6d40fbc the code is still in good shape: captures now refuse when the window or panel identity is unknown, and I found no new problems. CI is green, with all 20 checks passing, and there are no conflicts. The Swift hint pins in assertRefusal and assertUnreadableList look right from the diff. They would fail if Swift dropped a hint, because the TS fallback that supplied hints is gone.

I did not reproduce the live macOS native run or run the Swift tests. The PR body reports the live run at 6d40fbc: TextEdit captures, plus a window-not-found refusal that carries its hint. The capture-excluded and not-shareable refusals are covered by fixtures only. The author's live run therefore supplies the evidence that a real capture succeeds and that a real refusal carries its hint. No further run is needed from me.

One question on simplicity. The app's front window (OnScreenWindow, frontWindowLayer, appWindowInfo, frontWindow and its window-list-unreadable refusal) is now shared by screenshot capture and point actions. Should it move out of BackgroundInteraction.swift into its own module, such as AppFrontWindow.swift, so AppWindowScreenshot.swift does not depend on the interaction file? And should requireAppWindowPoint use the same window-list-unreadable refusal? Today one condition, an unreadable WindowServer list, reports two typed reasons: no-accessible-target for press and fill, and window-list-unreadable for screenshot and scroll.

The cubic-dev-ai P2 thread at #3761 (comment) does not apply, so you can resolve it. Press and fill call requireAppWindowPoint first, and it refuses on an unreadable list at BackgroundInteraction.swift:309. The try? at :370 only covers a list that becomes unreadable between the two reads, and the merge-base actionWindow already treated a nil frame as no window.

Nothing else blocks this PR. Please answer the simplicity question above, or say why the current split is better, before it goes to human review.

@thymikee thymikee removed the ready-for-human Valid work that needs human implementation, judgment, or maintainer merge label Oct 17, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant