@aglit-ai/cli 0.1.8 → 0.1.9

package/README.md

@@ -124,3 +124,5 @@ A separate Computer Use port range requires registering
 Google currently rejects this proposed callback with `redirect_uri_mismatch`.
 No port change has shipped; provider registration and native acceptance remain
 required before qualifying coexistence.
+
+Anywhere Access requires a two-factor security code by default; an explicit off preference is preserved. In CLI headless mode, incoming connection requests display the code in a native window without opening the full app. This requires a logged-in graphical desktop session; an SSH-only/server environment cannot display the prompt. Codes are not printed to the terminal.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aglit-ai/cli",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "Install and manage Aglit Computer Use",
   "license": "UNLICENSED",
   "type": "commonjs",

package/src/installation.cjs

@@ -205,6 +205,18 @@ function start() {
   // Do not let an operator's guest/development environment adopt another identity.
   for (const key of Object.keys(env)) if (key.startsWith('AGLIT_') || key.startsWith('VITE_') || ['NODE_ENV', 'ELECTRON_RUN_AS_NODE', 'SERVER_PORT', 'ELECTRON_BRIDGE_PORT'].includes(key)) delete env[key];
   Object.assign(env, { AGLIT_USER_DATA_PATH: profile, AGLIT_ELECTRON_USER_DATA_PATH: profile });
+  if (process.platform === 'darwin') {
+    // Launch Services makes the signed app responsible for its own TCC grants.
+    // Direct spawn from SSH/Terminal attributes screen/input access to the caller.
+    const bundle = path.dirname(path.dirname(path.dirname(installed.executable)));
+    if (!bundle.endsWith('.app')) { fs.closeSync(log); throw Error('Installed macOS application bundle required'); }
+    fs.closeSync(log);
+    run('/usr/bin/open', ['-n', '-g', '-a', bundle,
+      '--env', 'AGLIT_USER_DATA_PATH=' + profile, '--env', 'AGLIT_ELECTRON_USER_DATA_PATH=' + profile,
+      '--stdout', path.join(root, 'runtime.log'), '--stderr', path.join(root, 'runtime.log'),
+      '--args', '--computer-use'], { env });
+    return { launched: true };
+  }
   const child = spawn(installed.executable, ['--computer-use'], { detached: true, windowsHide: true, stdio: ['ignore', log, log], env });
   child.on('error', error => { process.stderr.write(`Computer Use failed to start: ${error.message}\n`); });
   child.unref(); fs.closeSync(log);