@agentconnect.md/computer 2.6.0-rc.95 → 2.6.0

package/README.md

@@ -138,35 +138,45 @@ enough: the switch must be on. Without it, clicks and keys are silently dropped,
 moves still work. Cmd shortcuts are allowed on macOS; only lock screen, log out, and force quit are
 refused. ffmpeg is a pinned static 6.0 build (eugeneware/ffmpeg-static b6.1.1).
 
-### macOS app mode (prototype): the app holds the permissions, not Terminal
+### macOS: the app holds the permissions, not Terminal
 
-`pnpm bundle:macos` builds `AgentConnect Computer.app` (`md.agentconnect.computer`): the daemon as a
-Node single executable app on the official, pinned Node.js, ad-hoc signed. Install it and run
-`setup` from the app's binary. This works from Terminal or over SSH:
+`agentconnect computer install` puts `AgentConnect Computer.app` (`md.agentconnect.computer`) in
+`~/Applications` next to the daemon. The app is a signed copy of the official, pinned Node.js; the
+daemon itself stays in the version store and runs inside it. Run the install from Terminal on the
+Mac, or over SSH while someone is logged in to its desktop:
 
 ```sh
-ditto -x -k AgentConnect-Computer-macos-arm64.zip ~/Applications/
-~/Applications/"AgentConnect Computer.app"/Contents/MacOS/agentconnect-computer setup
+npx -y @agentconnect.md/cli@latest computer install --register <token> --cp-url <exchange URL>
 ```
 
 - `setup` installs a per-user LaunchAgent (`~/Library/LaunchAgents/md.agentconnect.computer.plist`,
-  Aqua session, starts at login, restarts on crash) and starts it. launchd starts the app itself,
-  so macOS attributes Accessibility and Screen Recording to **AgentConnect Computer**. Cua Driver
-  and ffmpeg run as its children and inherit the grants. The app raises the dialogs itself.
-  `setup` opens the System Settings panes, waits, and restarts the service until a new Screen
-  Recording grant takes effect. Then it runs `doctor` inside the service.
+  Aqua session, starts at login, restarts on crash) that runs
+  `<app>/Contents/MacOS/agentconnect-computer ~/.agentconnect/computer/current/dist/agentconnect-computer.mjs run`.
+  launchd starts the app itself, so macOS attributes Accessibility and Screen Recording to
+  **AgentConnect Computer**. Cua Driver and ffmpeg run as its children and inherit the grants. The
+  app raises the dialogs on the Mac's screen; `setup` opens the System Settings panes, waits, and
+  restarts the service until a new Screen Recording grant takes effect. Then it runs `doctor`
+  inside the service.
+- `agentconnect computer upgrade` only moves `current`, so the grants stay. The app is replaced
+  only when a version pins a different one (a new app build, such as a Node update).
 - `doctor` asks the running service to run the checks as its own child (`/control/doctor`, loopback
-  only), so the result reflects the app's grants. `--here` checks the calling process instead.
-- `service start | stop | restart | status | uninstall` manage the LaunchAgent. The log is
-  `~/.agentconnect/computer/daemon.log`.
-- Ad-hoc signing ties the grants to this exact build: each rebuild must be granted again.
-  Distribution needs a Developer ID signature plus notarization (`CODESIGN_IDENTITY=...`; the
-  hardened runtime then needs the JIT entitlements for Node). Unsigned zips downloaded through a
-  browser are quarantined and blocked by Gatekeeper.
+  only), so the result reflects the app's grants. It tells a grant that is listed but switched off
+  from one never asked for, and from one the app lost (fix:
+  `tccutil reset Accessibility md.agentconnect.computer`, then `setup`).
+- `agentconnect computer uninstall` removes the LaunchAgent and the app; `--purge` also resets the
+  app's grants.
+- Until a release publishes the app packages, `install` says that this version pins no app, and
+  the grants go to the terminal that runs the daemon.
+- `pnpm bundle:macos` builds the app package into `bundle/computer-darwin-<arch>/` (on a Mac;
+  `TARGET_ARCH=x64` cross-builds). It is ad-hoc signed by default, which ties grants to that build;
+  `CODESIGN_IDENTITY` (Developer ID) and `NOTARY_KEYCHAIN_PROFILE` sign and notarize it for release.
+- The release builds the app on a macOS runner once the repository variable
+  `PUBLISH_COMPUTER_MACOS_APP` is `true`. It republishes an arch's app only when
+  `build-macos-app.mjs` changed, and the computer package pins each app exactly.
 
 ## Run on Linux
 
-**Install** (what the console's **Computers → Add Computer** shows for Linux): run it in a terminal
+**Install** (what the console's **Computers → Add Computer** shows for every desktop OS): run it in a terminal
 inside the desktop session, as the desktop user, not root. It needs Node.js ≥ 24.12 (the official
 tarball or your distribution's package).
 
@@ -251,8 +261,8 @@ off; `BROWSER_URL` opens a page). `docker stop` stops the daemon, closes the bro
 code 0. `/home/computer` is a volume: the Computer key, config, audit log, and the browser profile survive a new
 container. A `HEALTHCHECK` runs `doctor --json --daemon` inside the running daemon.
 
-Register it as a Computer: create a token in the console under **Computers → Add Computer** (pick **Docker** for
-this command), then
+Register it as a Computer: create a token in the console under **Computers → Add Computer** (its **Docker** tab
+shows this command), then
 
 ```sh
 docker run -d --name computer --hostname computer-1 --shm-size=1g --restart unless-stopped \

package/dist/agentconnect-computer.mjs

@@ -31457,9 +31457,9 @@ var require_websocket_server = __commonJS({
 });
 
 // src/cli.ts
-import { existsSync as existsSync6, rmSync as rmSync7, writeFileSync as writeFileSync9 } from "node:fs";
+import { existsSync as existsSync6, rmSync as rmSync7, writeFileSync as writeFileSync10 } from "node:fs";
 import { hostname as hostname5, networkInterfaces as networkInterfaces2 } from "node:os";
-import { basename as basename2, join as join11 } from "node:path";
+import { basename as basename2, join as join12 } from "node:path";
 import { createInterface as createInterface2 } from "node:readline";
 import { parseArgs } from "node:util";
 
@@ -84773,9 +84773,8 @@ async function startLocalControls(options) {
 // src/self.ts
 import { execFile } from "node:child_process";
 import { resolve } from "node:path";
-import { isSea } from "node:sea";
 function runSelf(args, timeoutMs) {
-  const argv = isSea() ? args : [process.argv[1], ...args];
+  const argv = [process.argv[1], ...args];
   return new Promise((resolve2, reject) => {
     execFile(
       process.execPath,
@@ -84795,7 +84794,7 @@ var managedEntry = () => process.env[SERVICE_ENTRY_ENV]?.trim() || void 0;
 var serviceEntry = () => managedEntry() ?? resolve(process.argv[1]);
 
 // src/version.ts
-var COMPUTER_DAEMON_VERSION = true ? "2.6.0-rc.95" : JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")).version;
+var COMPUTER_DAEMON_VERSION = true ? "2.6.0" : JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")).version;
 
 // src/http-server.ts
 var CONTROL_HEADER = "x-agentconnect-computer";
@@ -108628,6 +108627,39 @@ function displaySleepMinutes() {
   return match ? Number(match[1]) : void 0;
 }
 
+// src/macos-grants.ts
+import { readFileSync as readFileSync3, writeFileSync as writeFileSync6 } from "node:fs";
+import { join as join7 } from "node:path";
+var APP_ID = "md.agentconnect.computer";
+var TCC_SERVICE = { accessibility: "Accessibility", screenRecording: "ScreenCapture" };
+var grantRecordPath = (dir) => join7(dir, "macos-grants.json");
+function readGrantRecord(dir) {
+  try {
+    const record2 = JSON.parse(readFileSync3(grantRecordPath(dir), "utf8"));
+    return { asked: record2.asked ?? {}, held: record2.held ?? {} };
+  } catch {
+    return { asked: {}, held: {} };
+  }
+}
+function recordGrants(dir, state, asked, now = /* @__PURE__ */ new Date()) {
+  const record2 = readGrantRecord(dir);
+  const at = now.toISOString();
+  for (const grant of ["accessibility", "screenRecording"]) {
+    if (state[grant]) record2.held[grant] ??= at;
+    else if (asked) record2.asked[grant] ??= at;
+  }
+  try {
+    writeFileSync6(grantRecordPath(dir), `${JSON.stringify(record2, null, 2)}
+`, { mode: 384 });
+  } catch {
+  }
+  return record2;
+}
+function grantLoss(record2, grant) {
+  if (record2.held[grant]) return "lost";
+  return record2.asked[grant] ? "listed-off" : "never-asked";
+}
+
 // src/cp/authority.ts
 var RELAY_TOKEN_TTL_MS = 6e4;
 var ChannelAuthority = class {
@@ -109526,8 +109558,8 @@ function createRelayedMcpHandler(deps) {
 }
 
 // src/cp/registration.ts
-import { chmodSync, closeSync, mkdirSync as mkdirSync6, openSync, readFileSync as readFileSync3, renameSync as renameSync4, rmSync as rmSync4, writeFileSync as writeFileSync6 } from "node:fs";
-import { join as join7 } from "node:path";
+import { chmodSync, closeSync, mkdirSync as mkdirSync6, openSync, readFileSync as readFileSync4, renameSync as renameSync4, rmSync as rmSync4, writeFileSync as writeFileSync7 } from "node:fs";
+import { join as join8 } from "node:path";
 var Registration = external_exports.object({
   cpUrl: external_exports.string().url(),
   channelUrl: external_exports.string().url(),
@@ -109543,11 +109575,11 @@ var Registration = external_exports.object({
   revokedAt: external_exports.string().datetime().optional(),
   revokedReason: external_exports.string().optional()
 });
-var registrationPath = (dir = dataDir()) => join7(dir, "computer-key.json");
+var registrationPath = (dir = dataDir()) => join8(dir, "computer-key.json");
 function loadRegistration(dir = dataDir()) {
   let raw;
   try {
-    raw = readFileSync3(registrationPath(dir), "utf8");
+    raw = readFileSync4(registrationPath(dir), "utf8");
   } catch (error62) {
     if (error62.code === "ENOENT") return void 0;
     throw error62;
@@ -109564,7 +109596,7 @@ function saveRegistration(registration, dir = dataDir()) {
   rmSync4(tmp, { force: true });
   const fd = openSync(tmp, "wx", 384);
   try {
-    writeFileSync6(fd, body);
+    writeFileSync7(fd, body);
   } finally {
     closeSync(fd);
   }
@@ -109629,7 +109661,7 @@ async function registerOrKeep(dir, cpUrl, register3) {
 
 // src/cp/report.ts
 import { spawnSync as spawnSync5 } from "node:child_process";
-import { existsSync as existsSync3, readdirSync, readFileSync as readFileSync4 } from "node:fs";
+import { existsSync as existsSync3, readdirSync, readFileSync as readFileSync5 } from "node:fs";
 import { release as release2 } from "node:os";
 var MAX_CHECKS = 64;
 var MAX_TEXT = 1e3;
@@ -109637,7 +109669,7 @@ var computerOs = (platform = process.platform) => platform === "darwin" ? "macos
 function osVersion(platform = process.platform) {
   if (platform === "linux") {
     try {
-      const pretty = /^PRETTY_NAME="?([^"\n]+)"?$/m.exec(readFileSync4("/etc/os-release", "utf8"))?.[1];
+      const pretty = /^PRETTY_NAME="?([^"\n]+)"?$/m.exec(readFileSync5("/etc/os-release", "utf8"))?.[1];
       if (pretty) return pretty.slice(0, 120);
     } catch {
     }
@@ -109654,7 +109686,7 @@ function xvfbServes(display) {
   try {
     for (const pid of readdirSync("/proc")) {
       if (!/^\d+$/.test(pid)) continue;
-      const argv = readFileSync4(`/proc/${pid}/cmdline`, "utf8").split("\0");
+      const argv = readFileSync5(`/proc/${pid}/cmdline`, "utf8").split("\0");
       if (/(^|\/)Xvfb$/.test(argv[0] ?? "") && argv.includes(`:${number4}`)) return true;
     }
   } catch {
@@ -109726,12 +109758,12 @@ function capabilitiesFrom(checks, display, options = {}) {
 
 // src/cp/env-registration.ts
 import { createHash as createHash6 } from "node:crypto";
-import { readFileSync as readFileSync5 } from "node:fs";
+import { readFileSync as readFileSync6 } from "node:fs";
 var REGISTER_TOKEN_ENV = "AGENTCONNECT_REGISTER_TOKEN";
 var REGISTER_TOKEN_FILE_ENV = "AGENTCONNECT_REGISTER_TOKEN_FILE";
 var CP_URL_ENV = "AGENTCONNECT_CP_URL";
 var COMPUTER_NAME_ENV = "AGENTCONNECT_COMPUTER_NAME";
-function registrationFromEnv(env = process.env, read = (path) => readFileSync5(path, "utf8")) {
+function registrationFromEnv(env = process.env, read = (path) => readFileSync6(path, "utf8")) {
   let token = env[REGISTER_TOKEN_ENV]?.trim() ?? "";
   const file2 = env[REGISTER_TOKEN_FILE_ENV]?.trim();
   if (!token && file2) {
@@ -110104,11 +110136,11 @@ function scheduleDoctor(options) {
 
 // src/service-linux.ts
 import { execFile as execFile2, spawnSync as spawnSync6 } from "node:child_process";
-import { copyFileSync, mkdirSync as mkdirSync7, rmSync as rmSync5, writeFileSync as writeFileSync7 } from "node:fs";
+import { copyFileSync, mkdirSync as mkdirSync7, rmSync as rmSync5, writeFileSync as writeFileSync8 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
-import { join as join8 } from "node:path";
+import { join as join9 } from "node:path";
 var UNIT = "agentconnect-computer.service";
-var unitPath = () => join8(process.env.XDG_CONFIG_HOME ?? join8(homedir3(), ".config"), "systemd", "user", UNIT);
+var unitPath = () => join9(process.env.XDG_CONFIG_HOME ?? join9(homedir3(), ".config"), "systemd", "user", UNIT);
 var SESSION_VARS = [
   "DISPLAY",
   "XAUTHORITY",
@@ -110121,7 +110153,7 @@ var SESSION_VARS = [
 var SESSION_ENV = "AGENTCONNECT_COMPUTER_SESSION";
 var SESSION_DISPLAY_VARS = ["DISPLAY", "XAUTHORITY", "WAYLAND_DISPLAY", SESSION_ENV];
 var EXIT_NEW_SESSION = 75;
-var autostartPath = () => join8(process.env.XDG_CONFIG_HOME ?? join8(homedir3(), ".config"), "autostart", "agentconnect-computer.desktop");
+var autostartPath = () => join9(process.env.XDG_CONFIG_HOME ?? join9(homedir3(), ".config"), "autostart", "agentconnect-computer.desktop");
 function systemctl(...args) {
   const result = spawnSync6("systemctl", ["--user", ...args], { encoding: "utf8" });
   return { ok: result.status === 0, output: `${result.stdout ?? ""}${result.stderr ?? ""}`.trim() };
@@ -110164,15 +110196,15 @@ X-GNOME-Autostart-enabled=true
 function installService(dataDir2, script, managed = false) {
   let target = script;
   if (!managed) {
-    const app = join8(dataDir2, "app");
+    const app = join9(dataDir2, "app");
     mkdirSync7(app, { recursive: true });
-    target = join8(app, "agentconnect-computer.mjs");
+    target = join9(app, "agentconnect-computer.mjs");
     if (script !== target) copyFileSync(script, target);
   }
-  mkdirSync7(join8(unitPath(), ".."), { recursive: true });
-  writeFileSync7(unitPath(), unitFile(process.execPath, target));
-  mkdirSync7(join8(autostartPath(), ".."), { recursive: true });
-  writeFileSync7(autostartPath(), autostartEntry());
+  mkdirSync7(join9(unitPath(), ".."), { recursive: true });
+  writeFileSync8(unitPath(), unitFile(process.execPath, target));
+  mkdirSync7(join9(autostartPath(), ".."), { recursive: true });
+  writeFileSync8(autostartPath(), autostartEntry());
   systemctl("daemon-reload");
   const enabled = systemctl("enable", UNIT);
   if (!enabled.ok) throw new Error(`systemctl --user enable failed: ${enabled.output}`);
@@ -110309,25 +110341,25 @@ function watchSession(options) {
 
 // src/service-macos.ts
 import { spawnSync as spawnSync7 } from "node:child_process";
-import { existsSync as existsSync4, mkdirSync as mkdirSync8, rmSync as rmSync6, writeFileSync as writeFileSync8 } from "node:fs";
+import { existsSync as existsSync4, mkdirSync as mkdirSync8, rmSync as rmSync6, writeFileSync as writeFileSync9 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
-import { join as join9 } from "node:path";
+import { join as join10 } from "node:path";
 var SERVICE_LABEL = "md.agentconnect.computer";
-var plistPath = () => join9(homedir4(), "Library", "LaunchAgents", `${SERVICE_LABEL}.plist`);
+var plistPath = () => join10(homedir4(), "Library", "LaunchAgents", `${SERVICE_LABEL}.plist`);
 var domain2 = () => `gui/${process.getuid()}`;
 var xml = (value) => value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 function launchctl(...args) {
   const result = spawnSync7("launchctl", args, { encoding: "utf8" });
   return { ok: result.status === 0, output: `${result.stdout ?? ""}${result.stderr ?? ""}`.trim() };
 }
-function installService2(executable, logPath) {
-  mkdirSync8(join9(homedir4(), "Library", "LaunchAgents"), { recursive: true });
-  const plist = `<?xml version="1.0" encoding="UTF-8"?>
+var guiSession = () => launchctl("print", domain2()).ok;
+function servicePlist(program, logPath) {
+  return `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
 <dict>
   <key>Label</key><string>${SERVICE_LABEL}</string>
-  <key>ProgramArguments</key><array><string>${xml(executable)}</string><string>run</string></array>
+  <key>ProgramArguments</key><array>${[...program, "run"].map((arg) => `<string>${xml(arg)}</string>`).join("")}</array>
   <key>AssociatedBundleIdentifiers</key><array><string>${SERVICE_LABEL}</string></array>
   <key>LimitLoadToSessionType</key><string>Aqua</string>
   <key>ProcessType</key><string>Interactive</string>
@@ -110335,15 +110367,22 @@ function installService2(executable, logPath) {
   <key>KeepAlive</key><dict><key>SuccessfulExit</key><false/></dict>
   <key>StandardOutPath</key><string>${xml(logPath)}</string>
   <key>StandardErrorPath</key><string>${xml(logPath)}</string>
+  <key>EnvironmentVariables</key><dict><key>NODE_OPTIONS</key><string></string></dict>
 </dict>
 </plist>
 `;
+}
+function installService2(program, logPath) {
+  mkdirSync8(join10(homedir4(), "Library", "LaunchAgents"), { recursive: true });
   stopService2();
-  writeFileSync8(plistPath(), plist);
+  writeFileSync9(plistPath(), servicePlist(program, logPath));
+  if (!guiSession()) return false;
   startService2();
+  return true;
 }
 function startService2() {
   if (serviceStatus2().loaded) return;
+  if (!guiSession()) throw new Error("nobody is logged in to this Mac's desktop: the service starts at the next login");
   const result = launchctl("bootstrap", domain2(), plistPath());
   if (!result.ok) throw new Error(`launchctl bootstrap failed: ${result.output}`);
 }
@@ -110373,7 +110412,7 @@ function serviceStatus2() {
 // src/setup.ts
 import { spawn as spawn5, spawnSync as spawnSync8 } from "node:child_process";
 import { existsSync as existsSync5 } from "node:fs";
-import { basename, dirname as dirname2, isAbsolute, join as join10 } from "node:path";
+import { basename, dirname as dirname2, isAbsolute, join as join11 } from "node:path";
 import { createInterface } from "node:readline";
 var localizeChecks = (checks, command = selfCommand()) => {
   const rename = (text) => text.replace(/(?<![\w/.-])agentconnect-computer(?= |$)/g, command);
@@ -110479,7 +110518,10 @@ async function doctor(ctx, captureTimeoutMs = 15e3) {
         status: "ok",
         detail: `${driver.version ?? CUA_DRIVER_VERSION}: ${size.content.find((block) => block.text)?.text ?? "started"}`
       });
-      if (process.platform === "darwin") checks.push(...macPermissionChecks(await macPermissions(driver)));
+      if (process.platform === "darwin")
+        checks.push(
+          ...macPermissionChecks(await macPermissions(driver), appBundlePath() ? readGrantRecord(ctx.dir) : void 0)
+        );
       const shot = await driver.call("get_desktop_state", { max_image_dimension: 320 }).then(() => void 0).catch((error62) => error62.message);
       checks.push(
         shot ? { name: "screenshot", status: "fail", detail: shot.slice(0, 160), fix: permissionFix() } : { name: "screenshot", status: "ok", detail: "desktop capture works" }
@@ -110572,22 +110614,40 @@ function sessionCheck() {
   };
 }
 var permissionFix = () => process.platform === "darwin" ? `grant ${hostApp()} the macOS permissions: ${selfCommand()} setup` : void 0;
-function macPermissionChecks(state) {
-  const app = hostApp();
-  const reopen = appBundlePath() ? `then: ${selfCommand()} service restart` : "then Cmd+Q and reopen";
-  return [
-    state.accessibility ? { name: "accessibility", status: "ok", detail: `granted to ${app}` } : {
-      name: "accessibility",
-      status: "fail",
-      detail: `not granted to ${app}: clicks and keys are silently dropped`,
-      fix: `Privacy & Security > Accessibility (macOS 27: Device Control and Data Access): switch it on, ${reopen}`
-    },
-    state.screenRecording ? { name: "screen recording", status: "ok", detail: `granted to ${app}` } : {
-      name: "screen recording",
+var PANE = {
+  accessibility: "Privacy & Security > Accessibility (macOS 27: Device Control and Data Access)",
+  screenRecording: "Privacy & Security > Screen & System Audio Recording"
+};
+function macPermissionChecks(state, record2, app = hostApp()) {
+  const inApp = Boolean(record2);
+  const reopen = inApp ? `then: ${selfCommand()} service restart` : "then Cmd+Q and reopen";
+  const check2 = (grant, name, effect) => {
+    if (state[grant]) return { name, status: "ok", detail: `granted to ${app}` };
+    const loss = record2 ? grantLoss(record2, grant) : "never-asked";
+    if (loss === "lost")
+      return {
+        name,
+        status: "fail",
+        detail: `was granted to ${app} but is not in effect: switched off, or held by an earlier build of the app${effect}`,
+        fix: `run: tccutil reset ${TCC_SERVICE[grant]} ${APP_ID}, then: ${selfCommand()} setup`
+      };
+    if (loss === "listed-off")
+      return {
+        name,
+        status: "fail",
+        detail: `${app} is listed in ${PANE[grant]} but switched off${effect}`,
+        fix: `switch ${app} on there (listed is not enough), ${reopen}`
+      };
+    return {
+      name,
       status: "fail",
-      detail: `not granted to ${app}`,
-      fix: `Privacy & Security > Screen & System Audio Recording: switch it on, ${reopen}`
-    }
+      detail: `not granted to ${app}${effect}`,
+      fix: inApp ? `run: ${selfCommand()} setup` : `${PANE[grant]}: switch it on, ${reopen}`
+    };
+  };
+  return [
+    check2("accessibility", "accessibility", ": clicks and keys are silently dropped while pointer moves still work"),
+    check2("screenRecording", "screen recording", "")
   ];
 }
 function displayCheck(config2) {
@@ -110751,7 +110811,7 @@ async function setupLinux(ctx) {
   if (gnomeWayland()) {
     const state = gnomeHelperState();
     if (state === "missing") {
-      const installer = join10(dirname2(ctx.driverCommand), "wayland-helper", "install.sh");
+      const installer = join11(dirname2(ctx.driverCommand), "wayland-helper", "install.sh");
       const result = spawnSync8(installer, [], { encoding: "utf8" });
       ctx.log(
         result.status === 0 ? `Installed the ${GNOME_HELPER} GNOME extension.` : `Extension install failed: ${result.stderr}`
@@ -110783,6 +110843,9 @@ async function setupMac(ctx) {
     return;
   }
   const app = hostApp();
+  ctx.log(
+    `macOS grants these permissions to ${app}, which runs this command; \`agentconnect computer install\` installs the AgentConnect Computer app to hold them instead.`
+  );
   const driver = new CuaDriver({ command: ctx.driverCommand, callTimeoutMs: 18e4 });
   try {
     let state = await macPermissions(driver);
@@ -111024,7 +111087,9 @@ async function main() {
         callTimeoutMs: values.prompt ? 18e4 : 2e4
       });
       try {
-        console.log(JSON.stringify(await macPermissions(driver, Boolean(values.prompt))));
+        const state = await macPermissions(driver, Boolean(values.prompt));
+        if (appBundlePath()) recordGrants(dir, state, Boolean(values.prompt));
+        console.log(JSON.stringify(state));
       } finally {
         await driver.close();
       }
@@ -111053,7 +111118,7 @@ function printClientSetup(config2, client, token, tokenFile) {
   let shown = token;
   if (tokenFile) {
     rmSync7(tokenFile, { force: true });
-    writeFileSync9(tokenFile, `${token}
+    writeFileSync10(tokenFile, `${token}
 `, { mode: 384, flag: "wx" });
     shown = "<token>";
     console.log(`
@@ -111111,7 +111176,7 @@ function buildComputer(dir, config2, onStatus, refusal, report, screenshots, nam
   const computer = new Computer({
     driver,
     config: config2,
-    audit: auditSinks(fileAuditSink(join11(dir, "audit.log")), ...report ? [report] : []),
+    audit: auditSinks(fileAuditSink(join12(dir, "audit.log")), ...report ? [report] : []),
     log: log39,
     ...onStatus ? { onStatus } : {},
     ...refusal ? { refusal } : {},
@@ -111335,7 +111400,7 @@ async function run2(dir, initial, clientName) {
     const issued = issueClientToken(config2, clientName);
     config2 = issued.config;
     saveConfig(config2, dir);
-    printClientSetup(config2, clientName, issued.token, process.stdout.isTTY ? void 0 : join11(dir, "client-token"));
+    printClientSetup(config2, clientName, issued.token, process.stdout.isTTY ? void 0 : join12(dir, "client-token"));
   }
   if (!config2.driverPath && !existsSync6(installedDriverPath(dir))) await installDriver(dir);
   const setTitle = (status) => {
@@ -111391,6 +111456,7 @@ async function run2(dir, initial, clientName) {
   if (process.platform === "darwin") await warnMissingMacPermissions(driver);
   if (process.platform === "darwin" && appBundlePath() && !process.stdin.isTTY) {
     const state = await macPermissions(driver).catch(() => void 0);
+    if (state) recordGrants(dir, state, false);
     if (state && (!state.accessibility || !state.screenRecording)) {
       void runSelf(["permissions", "--json", "--prompt"], 2e5).catch(() => void 0);
     }
@@ -111528,17 +111594,18 @@ async function waitForDaemon(config2, timeoutMs) {
   }
   return false;
 }
+var macServiceProgram = () => [process.execPath, serviceEntry()];
 async function setupMacApp(dir, config2) {
   const app = basename2(appBundlePath());
-  if (!appBundlePath().startsWith("/Applications/") && !appBundlePath().includes("/Applications/")) {
-    console.log(
-      `Note: the service runs ${process.execPath}; move ${app} to /Applications first if you plan to keep it.`
+  if (!installService2(macServiceProgram(), join12(dir, "daemon.log"))) {
+    throw new Error(
+      `installed LaunchAgent ${plistPath()}, but nobody is logged in to this Mac's desktop: log in (in person or through Screen Sharing) to answer the permission prompts, then run: ${selfCommand()} setup`
     );
   }
-  installService2(process.execPath, join11(dir, "daemon.log"));
   console.log(`Installed LaunchAgent ${plistPath()} and started ${app}.`);
+  if (overSsh()) console.log(`The permission prompts appear on the Mac's own screen; answer them there.`);
   if (!await waitForDaemon(config2, 6e4))
-    throw new Error(`the service did not come up; see ${join11(dir, "daemon.log")}`);
+    throw new Error(`the service did not come up; see ${join12(dir, "daemon.log")}`);
   const grants = async (prompt) => await (await controlFetch(config2, `/control/permissions${prompt ? "?prompt=1" : ""}`, 21e4)).json();
   let state = await grants(false);
   const initiallyMissingScreen = !state.screenRecording;
@@ -111594,7 +111661,7 @@ function serviceCommand(dir, config2, action) {
     if (!appBundlePath())
       throw new Error("run this from the AgentConnect Computer.app binary (\u2026/Contents/MacOS/agentconnect-computer)");
   }
-  if (action === "install") installService2(process.execPath, join11(dir, "daemon.log"));
+  if (action === "install") installService2(macServiceProgram(), join12(dir, "daemon.log"));
   else if (action === "uninstall") uninstallService2();
   else if (action === "start") startService2();
   else if (action === "stop") stopService2();
@@ -111603,7 +111670,7 @@ function serviceCommand(dir, config2, action) {
   const status = serviceStatus2();
   console.log(
     JSON.stringify(
-      { ...status, plist: plistPath(), log: join11(dir, "daemon.log"), port: config2.port, app: hostApp() },
+      { ...status, plist: plistPath(), log: join12(dir, "daemon.log"), port: config2.port, app: hostApp() },
       null,
       2
     )

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentconnect.md/computer",
-  "version": "2.6.0-rc.95",
+  "version": "2.6.0",
   "description": "AgentConnect computer daemon: drives a desktop through Cua Driver and serves the computer_* tools over MCP; installed and upgraded by agentconnect computer",
   "license": "Apache-2.0",
   "repository": {
@@ -22,7 +22,6 @@
     "@types/ws": "^8.18.2",
     "esbuild": "0.28.2",
     "json": "^11.0.0",
-    "postject": "1.0.0-alpha.6",
     "tsx": "^4.23.15",
     "typescript": "^6.0.3",
     "vitest": "^5.0.5"
@@ -39,6 +38,7 @@
   "publishConfig": {
     "access": "public"
   },
+  "optionalDependencies": {},
   "scripts": {
     "build": "pnpm --filter \"{.}...\" build:package",
     "build:package": "node scripts/bundle.mjs --dist",