@aglit-ai/cli 0.1.17089 → 0.1.17101

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aglit-ai/cli",
-  "version": "0.1.17089",
+  "version": "0.1.17101",
   "description": "Install and manage Aglit Computer Use",
   "license": "UNLICENSED",
   "type": "commonjs",

package/src/installation.cjs

@@ -215,6 +215,7 @@ function start() {
     fs.closeSync(log);
     run('/usr/bin/open', ['-n', '-g', '-a', bundle,
       '--env', 'AGLIT_USER_DATA_PATH=' + profile, '--env', 'AGLIT_ELECTRON_USER_DATA_PATH=' + profile,
+      ...(env.PATH ? ['--env', 'PATH=' + env.PATH] : []),
       '--stdout', path.join(root, 'runtime.log'), '--stderr', path.join(root, 'runtime.log'),
       '--args', '--computer-use'], { env });
     return { launched: true };

package/src/mac-audio.cjs

@@ -0,0 +1,38 @@
+'use strict';
+const fs = require('node:fs');
+const { spawnSync } = require('node:child_process');
+const driver = '/Library/Audio/Plug-Ins/HAL/BlackHole2ch.driver';
+const signingRequirement = '=identifier "audio.existential.BlackHole2ch" and anchor apple generic and certificate leaf[subject.OU] = "Q5C99V536K"';
+function run(file, args, options = {}) {
+  const result = spawnSync(file, args, { encoding: 'utf8', timeout: 20000, shell: false, ...options });
+  if (result.error || result.status !== 0) throw Error('macOS audio setup failed; existing audio configuration was preserved.');
+  return result.stdout || '';
+}
+function status() {
+  if (process.platform !== 'darwin') return { supported: false, installed: false };
+  if (!fs.existsSync(driver)) return { supported: true, installed: false };
+  const stat = fs.lstatSync(driver);
+  if (!stat.isDirectory() || stat.isSymbolicLink() || stat.uid !== 0) throw Error('Existing BlackHole driver needs review; it will not be replaced.');
+  run('/usr/bin/codesign', ['--verify', '--deep', '--strict', '-R', signingRequirement, driver]);
+  const version = run('/usr/libexec/PlistBuddy', ['-c', 'Print :CFBundleShortVersionString', driver + '/Contents/Info.plist']).trim();
+  const devices = run('/usr/sbin/system_profiler', ['SPAudioDataType', '-json', '-timeout', '10']);
+  return { supported: true, installed: true, version, restartRequired: !devices.includes('"BlackHole 2ch"') };
+}
+function setup({ interactive = false } = {}) {
+  const current = status();
+  if (!current.supported || current.installed) return current;
+  // Preserve other variants: the vendor installer may alter all BlackHole bundles.
+  if (fs.readdirSync('/Library/Audio/Plug-Ins/HAL').some(name => /^BlackHole.*ch\.driver$/.test(name)))
+    throw Error('Another BlackHole variant is installed. Select it in the remote app instead of replacing it.');
+  if (!interactive) return { ...current, actionRequired: 'Run aglit init in an interactive terminal to install BlackHole 2ch.' };
+  const brew = ['/opt/homebrew/bin/brew', '/usr/local/bin/brew'].find(file => fs.existsSync(file));
+  if (!brew) return { ...current, actionRequired: 'Install Homebrew, then rerun aglit init. See https://brew.sh/.' };
+  // Homebrew verifies the official cask package. Administrator approval stays in
+  // the user's terminal. Never restart CoreAudio or change their default devices.
+  run(brew, ['install', '--cask', 'homebrew/cask/blackhole-2ch'], { stdio: 'inherit', timeout: 180000,
+    env: { ...process.env, HOMEBREW_NO_AUTO_UPDATE: '1', HOMEBREW_NO_INSTALL_CLEANUP: '1' } });
+  const installed = status();
+  if (!installed.installed) throw Error('BlackHole installation did not produce a verified driver.');
+  return installed;
+}
+module.exports = { status, setup };

package/src/updates.cjs

@@ -320,13 +320,29 @@ function removeHold(runtime) {
     hold.sha256 === runtime.sha256 && hold.sourceCommit === runtime.sourceCommit && hold.root === installation.root && hold.profile === installation.profile, 'Candidate activation hold changed');
   fs.unlinkSync(file);
 }
-async function acceptCandidate(config, pid, version) {
+async function acceptCandidate(config, pid, runtime, original) {
+  const version = runtime.version;
   // The native contract makes this action idempotent for one running occurrence.
   // Retry only this explicit acknowledgement, never general mutation commands.
   let result;
   for (let attempt = 0; attempt < 2; attempt++) {
     try { result = await control(config, 'update-accept'); break; }
-    catch (error) { if (attempt === 1) throw error; await delay(250); }
+    catch (error) {
+      if (attempt === 1) {
+        // Published runtimes before this native acknowledgement can finish a
+        // signed-out migration only. An active account still requires its native
+        // continuity acknowledgement; never accept a lost or changed identity.
+        if (error.message !== 'Unknown Computer Use command or field' || original.email !== null || original.enabled !== false) throw error;
+        const observed = await control(config, 'status');
+        need(observed.pid === pid && observed.connected === false && continuity(observed, original, runtime), 'Signed-out migration continuity differs');
+        const hold = privateJson(path.join(installation.root, 'update-activation.json'));
+        need(JSON.stringify(hold) === JSON.stringify(activationHold(runtime, original)), 'Signed-out migration hold differs');
+        installation.verifyRuntime(runtime.executable, runtime);
+        removeHold(runtime);
+        return {accepted: true, pid, version, legacySignedOut: true};
+      }
+      await delay(250);
+    }
   }
   need(result?.accepted === true && result.pid === pid && result.version === version, 'Updated runtime did not accept its continuity hold');
   return result;
@@ -352,7 +368,7 @@ async function recoverActivation(ownedLock = false) {
         await delay(1000);
       } while (Date.now() < deadline && !runtimeStopped(current));
       if (measured) {
-        if (fs.existsSync(holdFile)) { await acceptCandidate(config, measured.pid, tx.runtime.version); }
+        if (fs.existsSync(holdFile)) { await acceptCandidate(config, measured.pid, tx.runtime, tx.original); }
         fs.unlinkSync(file); const pending = path.join(installation.root, 'pending-update.json'); if (fs.existsSync(pending)) fs.unlinkSync(pending);
         return {recovered: true, accepted: true, runtimePid: measured.pid};
       }
@@ -471,7 +487,7 @@ async function update({check = false, channel} = {}) {
         } catch { /* Allow the replacement account/provider settings to restore. */ }
       } while (live(launched.pid) && Date.now() < deadline);
       need(replacement, 'Updated Desktop continuity did not match before its readiness deadline'); cancelled();
-      await acceptCandidate(config, launched.pid, runtime.version);
+      await acceptCandidate(config, launched.pid, runtime, original);
       accepted = true;
       let windowRestored = true;
       if ((retiring?.mode || original.mode) === 'headed') { try { await control(config, 'window', {mode: 'headed'}); } catch { windowRestored = false; } }