@commonlyai/cli 0.1.204 → 0.1.206

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@commonlyai/cli",
-  "version": "0.1.204",
+  "version": "0.1.206",
   "license": "Apache-2.0",
   "description": "The Commonly CLI — connect agents, manage pods, iterate fast",
   "type": "module",

package/src/commands/agent.js

@@ -1,4 +1,6 @@
 import { createOwnKeyResolver, createMachineReportClient } from '../lib/own-key-launch.js';
+import { foregroundDaemonHint } from '../lib/daemon-hint.js';
+import { loadDaemonRecord } from '../lib/daemon-store.js';
 import { WALKED_HARNESSES } from '../lib/runtime-inventory.js';
 import { createRuntimeReporter } from '../lib/runtime-observation.js';
 /**
@@ -3551,6 +3553,9 @@ export const performDetach = async ({
  * kernel's own timestamps without conversion.
  */
 const stamp = () => new Date().toISOString();
+// An unreadable daemon record still means a daemon was registered here; the
+// hint only chooses between the two steps, so it must not throw on it.
+const hasDaemonRecord = () => { try { return Boolean(loadDaemonRecord()); } catch { return true; } };
 
 /**
  * Map `agent run`'s cascade flags onto resolveCascadeSettings' override keys.
@@ -4044,7 +4049,7 @@ Docs:
       });
 
       console.log(`${stamp()} [${name}] polling ${record.instanceUrl} for events (ctrl+c to stop)`);
-      console.log(`${stamp()} [${name}] foreground mode; to background and keep it across logins, run: commonly daemon install`);
+      console.log(`${stamp()} [${name}] ${foregroundDaemonHint({ daemonRegistered: hasDaemonRecord() })}`);
 
       const { stop } = performRun({
         instanceUrl: record.instanceUrl,

package/src/lib/daemon-hint.js

@@ -0,0 +1,6 @@
+// The hint a foreground `commonly agent run` prints for keeping the agent
+// running. The daemon supervises only the agents placed on this computer, so
+// the hint depends on whether a daemon is registered here at all.
+export const foregroundDaemonHint = ({ daemonRegistered }) => (daemonRegistered
+  ? 'foreground mode; this stops when the terminal closes. To keep it running, add the agent to this computer in the web app: Agents → Bring your own → On my computer'
+  : 'foreground mode; this stops when the terminal closes. To keep it running, add this computer with: commonly daemon register && commonly daemon install, then add the agent to it in the web app: Agents → Bring your own → On my computer');

package/src/lib/sandbox/seatbelt.js

@@ -45,7 +45,8 @@ const PLATFORM_BASELINE = String.raw`
     (path "/dev/null")
     (vnode-type CHARACTER-DEVICE)))
 
-; Loader + standard system resources.
+; Loader + standard system resources. Node opens this one macOS OpenSSL config
+; file at startup; the macOS adapter job's Node was denied it without this rule.
 (allow file-read* file-test-existence
   (subpath "/Library/Apple")
   (subpath "/Library/Filesystems/NetFSPlugins")
@@ -54,8 +55,8 @@ const PLATFORM_BASELINE = String.raw`
   (subpath "/private/var/db/timezone")
   (subpath "/usr/lib")
   (subpath "/usr/share")
+  (literal "/System/Library/OpenSSL/openssl.cnf")
   (subpath "/Library/Preferences")
-  (subpath "/Library/Keychains")
   (subpath "/var/db")
   (subpath "/private/var/db"))
 (allow file-read* file-test-existence