@jian-ai/remote-control 0.8.0 → 0.8.1

package/README.md

@@ -43,4 +43,6 @@ jian-remote configure --gateway https://gateway.example --token WORKER_TOKEN
 
 Worker and gateway must share the same major.minor. See [docs/remote.md](../../docs/remote.md).
 
-Requires Node.js 24+.
+Requires Node.js 24+. Published builds include a prebuilt macOS `computer-helper` for Computer
+Use (no Xcode on the worker Mac). From source, run `macos/build-helper.sh` on a Mac, or let the
+worker compile with `swiftc` when Command Line Tools are installed.

package/bin/computer-macos.mjs

@@ -75,22 +75,78 @@ export function capturePrimaryScreenshotBase64() {
   return { base64, widthPx, heightPx };
 }
 
-function helperPaths() {
-  const support = join(homedir(), 'Library', 'Application Support', 'Jian Remote');
+function helperPaths(home = homedir()) {
+  const support = join(home, 'Library', 'Application Support', 'Jian Remote');
   return {
     support,
     source: join(support, `${HELPER_NAME}.swift`),
     binary: join(support, HELPER_NAME),
+    stamp: join(support, `${HELPER_NAME}.sha256`),
+  };
+}
+
+/** Paths inside the installed npm package (or a checkout). */
+export function packageHelperPaths(
+  packageRoot = join(dirname(fileURLToPath(import.meta.url)), '..'),
+) {
+  return {
+    swift: join(packageRoot, 'macos', `${HELPER_NAME}.swift`),
+    binary: join(packageRoot, 'macos', HELPER_NAME),
   };
 }
 
 function packageSwiftPath() {
-  return join(dirname(fileURLToPath(import.meta.url)), '..', 'macos', `${HELPER_NAME}.swift`);
+  return packageHelperPaths().swift;
 }
 
+function packageBinaryPath() {
+  return packageHelperPaths().binary;
+}
+
+function stampForBytes(bytes) {
+  return createHash('sha256').update(bytes).digest('hex').slice(0, 16);
+}
+
+/** Drop download quarantine so a helper from npm can exec under the LaunchAgent. */
+function clearQuarantine(path) {
+  spawnSync('xattr', ['-d', 'com.apple.quarantine', path], { encoding: 'utf8' });
+}
+
+/**
+ * Prefer a Publish-built universal binary from the npm package; otherwise compile with swiftc.
+ * Stamp is over the installed artifact bytes so updates replace a stale helper.
+ */
 async function ensureHelperBinary() {
   const paths = helperPaths();
   await mkdir(paths.support, { recursive: true, mode: 0o755 });
+
+  let previous = '';
+  try {
+    previous = (await readFile(paths.stamp, 'utf8')).trim();
+  } catch {
+    previous = '';
+  }
+
+  const packagedBinary = packageBinaryPath();
+  if (existsSync(packagedBinary)) {
+    const bytes = await readFile(packagedBinary);
+    const hash = `bin:${stampForBytes(bytes)}`;
+    if (previous !== hash || !existsSync(paths.binary)) {
+      await copyFile(packagedBinary, paths.binary);
+      await chmod(paths.binary, 0o755);
+      clearQuarantine(paths.binary);
+      await writeFile(paths.stamp, `${hash}\n`, { mode: 0o644 });
+    }
+    // Keep source nearby for debugging / swiftc fallback after a partial install.
+    try {
+      const swift = packageSwiftPath();
+      if (existsSync(swift)) await copyFile(swift, paths.source);
+    } catch {
+      // optional
+    }
+    return paths.binary;
+  }
+
   let sourceText;
   try {
     sourceText = await readFile(packageSwiftPath(), 'utf8');
@@ -99,18 +155,11 @@ async function ensureHelperBinary() {
       sourceText = await readFile(paths.source, 'utf8');
     } catch {
       throw new Error(
-        'Computer-use helper source is missing. Reinstall or update @jian-ai/remote-control.',
+        'Computer-use helper is missing from this install. Reinstall or update @jian-ai/remote-control.',
       );
     }
   }
-  const hash = createHash('sha256').update(sourceText).digest('hex').slice(0, 16);
-  const stamp = join(paths.support, `${HELPER_NAME}.sha256`);
-  let previous = '';
-  try {
-    previous = (await readFile(stamp, 'utf8')).trim();
-  } catch {
-    previous = '';
-  }
+  const hash = `src:${stampForBytes(Buffer.from(sourceText, 'utf8'))}`;
   const needsBuild = previous !== hash || !existsSync(paths.binary);
   await writeFile(paths.source, sourceText, { mode: 0o644 });
   if (needsBuild) {
@@ -122,27 +171,44 @@ async function ensureHelperBinary() {
     if (compiled.status !== 0) {
       throw new Error(
         (compiled.stderr || compiled.stdout || 'swiftc failed').trim() ||
-          'Could not build the Jian computer-use helper. Install Xcode Command Line Tools.',
+          'Could not build the Jian computer-use helper. Published packages ship a prebuilt helper; for source builds install Xcode Command Line Tools, or reinstall @jian-ai/remote-control.',
       );
     }
     await chmod(paths.binary, 0o755);
-    await writeFile(stamp, `${hash}\n`, { mode: 0o644 });
+    clearQuarantine(paths.binary);
+    await writeFile(paths.stamp, `${hash}\n`, { mode: 0o644 });
   }
   return paths.binary;
 }
 
-/** Copy Swift sources next to the installed worker when present in the npm package. */
+/** Copy Swift source and any prebuilt helper next to the installed worker. */
 export async function materializeComputerHelperSources(configDir) {
   if (process.platform !== 'darwin') return;
   try {
-    const from = packageSwiftPath();
-    if (!existsSync(from)) return;
+    const pkg = packageHelperPaths();
+    if (!existsSync(pkg.swift) && !existsSync(pkg.binary)) return;
     const support = join(homedir(), 'Library', 'Application Support', 'Jian Remote');
     await mkdir(support, { recursive: true, mode: 0o755 });
-    await copyFile(from, join(support, `${HELPER_NAME}.swift`));
     const localMacos = join(configDir, 'macos');
     await mkdir(localMacos, { recursive: true, mode: 0o755 });
-    await copyFile(from, join(localMacos, `${HELPER_NAME}.swift`));
+    if (existsSync(pkg.swift)) {
+      await copyFile(pkg.swift, join(support, `${HELPER_NAME}.swift`));
+      await copyFile(pkg.swift, join(localMacos, `${HELPER_NAME}.swift`));
+    }
+    if (existsSync(pkg.binary)) {
+      const destSupport = join(support, HELPER_NAME);
+      const destLocal = join(localMacos, HELPER_NAME);
+      await copyFile(pkg.binary, destSupport);
+      await copyFile(pkg.binary, destLocal);
+      await chmod(destSupport, 0o755);
+      await chmod(destLocal, 0o755);
+      clearQuarantine(destSupport);
+      clearQuarantine(destLocal);
+      const bytes = await readFile(pkg.binary);
+      await writeFile(join(support, `${HELPER_NAME}.sha256`), `bin:${stampForBytes(bytes)}\n`, {
+        mode: 0o644,
+      });
+    }
   } catch {
     // Best-effort on install; computer session will surface a clear error.
   }

package/bin/jian-remote.mjs

@@ -21,7 +21,7 @@ const option = (name) => {
  * Stamped to the release tag on npm publish and when the gateway serves this script.
  * Compatibility with the gateway requires the same major.minor (see versionsCompatible).
  */
-export const PACKAGE_VERSION = '0.8.0';
+export const PACKAGE_VERSION = '0.8.1';
 
 /** Soft stdout/stderr caps while capturing a command (chars). Gateway schema matches these. */
 const STDOUT_CAP = 400_000;

package/macos/build-helper.sh

@@ -0,0 +1,46 @@
+#!/usr/bin/env bash
+# Build a universal (arm64 + x86_64) computer-helper for the npm package.
+# Run on macOS with Xcode CLT. Used by Publish CI and local packaging.
+set -euo pipefail
+
+ROOT="$(cd "$(dirname "$0")" && pwd)"
+SRC="$ROOT/computer-helper.swift"
+OUT="${1:-$ROOT/computer-helper}"
+MIN_OS="${MACOSX_DEPLOYMENT_TARGET:-13.0}"
+TMP="$(mktemp -d "${TMPDIR:-/tmp}/jian-computer-helper.XXXXXX")"
+cleanup() { rm -rf "$TMP"; }
+trap cleanup EXIT
+
+if [[ "$(uname -s)" != "Darwin" ]]; then
+  echo "build-helper.sh must run on macOS (swiftc + lipo)." >&2
+  exit 1
+fi
+if ! command -v swiftc >/dev/null 2>&1; then
+  echo "swiftc not found. Install Xcode Command Line Tools." >&2
+  exit 1
+fi
+if [[ ! -f "$SRC" ]]; then
+  echo "Missing source: $SRC" >&2
+  exit 1
+fi
+
+swiftc -O \
+  -target "arm64-apple-macosx${MIN_OS}" \
+  -framework AppKit -framework Carbon \
+  -o "$TMP/computer-helper-arm64" "$SRC"
+
+swiftc -O \
+  -target "x86_64-apple-macosx${MIN_OS}" \
+  -framework AppKit -framework Carbon \
+  -o "$TMP/computer-helper-x86_64" "$SRC"
+
+lipo -create -output "$OUT" "$TMP/computer-helper-arm64" "$TMP/computer-helper-x86_64"
+chmod 755 "$OUT"
+
+# Ad-hoc sign so Gatekeeper is quieter for LaunchAgent children; Developer ID overlays this in CI when secrets exist.
+if command -v codesign >/dev/null 2>&1; then
+  codesign --force -s - --identifier com.jian.remote.computer-helper "$OUT" 2>/dev/null || true
+fi
+
+echo "Built universal helper: $OUT"
+lipo -info "$OUT"

package/macos/computer-helper.swift

@@ -5,8 +5,9 @@
   Protocol: newline-delimited JSON on stdin → newline-delimited JSON on stdout (flush each).
   Errors go to stderr in English only.
 
-  Build (on a Mac with Xcode CLT):
-    swiftc -O -framework AppKit -framework Carbon -o computer-helper computer-helper.swift
+  Published npm packages ship a prebuilt universal binary (Publish CI). From source on a Mac:
+    ./build-helper.sh
+    # or: swiftc -O -framework AppKit -framework Carbon -o computer-helper computer-helper.swift
 
   Run as a child of the Node worker; keep stdin/stdout pipes open for the session.
 */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jian-ai/remote-control",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "Jian Remote Control worker — connect a computer to a Jian gateway over HTTPS",
   "type": "module",
   "bin": {