@lattices/cli 0.4.10 → 0.4.12

package/{app → apps/mac}/Sources/Core/Pi/PiProviderSetupCallout.swift

@@ -18,7 +18,7 @@ struct PiProviderSetupCallout: View {
 
             Text(session.isAuthenticating
                 ? "Finish the setup above. As soon as that one step is done, the chat box unlocks."
-                : "Next step: connect \(session.currentProvider.name). You only have to do this once.")
+                : "Chat is optional. Connect \(session.currentProvider.name) when you want the in-app assistant.")
                 .font(Typo.mono(compact ? 10 : 11))
                 .foregroundColor(Palette.textDim)
                 .fixedSize(horizontal: false, vertical: true)
@@ -32,18 +32,18 @@ struct PiProviderSetupCallout: View {
                 PiAuthNextStepCard(session: session, compact: compact)
             } else {
                 Text(session.currentProvider.authMode == .oauth
-                    ? "The setup panel above is already open, so you can connect right now."
-                    : "Paste your key in the setup panel above, save it once, and you are done.")
+                    ? "This opens the provider flow in your browser."
+                    : "Open setup when you are ready to paste and save a key.")
                     .font(Typo.mono(compact ? 9 : 10))
                     .foregroundColor(Palette.textMuted)
             }
 
             if session.currentProvider.authMode == .oauth && !session.isAuthenticating {
                 primaryActionButton(
-                    "CONNECT \(session.currentProvider.name.uppercased())",
+                    "SET UP \(session.currentProvider.name.uppercased())",
                     tint: Palette.running
                 ) {
-                    session.startSelectedAuthFlow()
+                    session.toggleAuthPanel()
                 }
             }
         }

package/{app → apps/mac}/Sources/Core/Pi/PiWorkspaceView.swift

@@ -19,14 +19,6 @@ struct PiWorkspaceView: View {
                 .fill(Palette.border)
                 .frame(height: 0.5)
 
-            if session.hasPiBinary && session.isAuthPanelVisible {
-                authPanel
-
-                Rectangle()
-                    .fill(Palette.border)
-                    .frame(height: 0.5)
-            }
-
             transcript
 
             Rectangle()
@@ -36,14 +28,7 @@ struct PiWorkspaceView: View {
             if session.hasPiBinary && !session.needsProviderSetup {
                 composer
             } else if session.needsProviderSetup {
-                if session.isAuthPanelVisible {
-                    setupLockedPanel
-                } else {
-                    PiProviderSetupCallout(session: session, compact: false)
-                        .padding(.horizontal, 16)
-                        .padding(.vertical, 14)
-                        .background(Palette.surface.opacity(0.22))
-                }
+                providerSettingsPrompt
             } else {
                 PiInstallCallout(session: session, compact: false)
                     .padding(.horizontal, 16)
@@ -70,7 +55,7 @@ struct PiWorkspaceView: View {
                         .fill(session.hasPiBinary ? Palette.running : Palette.kill)
                         .frame(width: 7, height: 7)
 
-                    Text("WORKSPACE CHAT")
+                    Text("WORKSPACE ASSISTANT")
                         .font(Typo.geistMonoBold(11))
                         .foregroundColor(Palette.text)
 
@@ -89,8 +74,8 @@ struct PiWorkspaceView: View {
                         ? session.authStepDescription
                         : (session.needsProviderSetup
                             ? "Next step: connect a provider to unlock chat."
-                            : "Full conversation surface for longer prompts, auth, and provider switching."))
-                    : "Install Pi to unlock longer prompts, provider auth, and the full in-app assistant surface.")
+                            : "Full conversation surface for settings, longer prompts, planning, debugging, and second opinions."))
+                    : "Settings chat is ready here. Install the provider runtime to unlock longer prompts and provider-backed chat.")
                     .font(Typo.mono(10))
                     .foregroundColor(Palette.textDim)
             }
@@ -98,13 +83,7 @@ struct PiWorkspaceView: View {
             Spacer()
 
             HStack(spacing: 6) {
-                capsuleLabel(session.currentProvider.name.uppercased(), tint: Palette.textDim)
-
-                if session.hasPiBinary && !session.needsProviderSetup {
-                    actionChip(session.isAuthPanelVisible ? "AUTH -" : "AUTH +") {
-                        session.toggleAuthPanel()
-                    }
-                }
+                settingsGearButton
 
                 if session.hasConversationHistory {
                     actionChip("RESET") {
@@ -117,6 +96,51 @@ struct PiWorkspaceView: View {
         .padding(.vertical, 14)
     }
 
+    private var settingsGearButton: some View {
+        Button {
+            SettingsWindowController.shared.showAssistant()
+        } label: {
+            Image(systemName: "gearshape")
+                .font(.system(size: 11, weight: .semibold))
+                .foregroundColor(Palette.textMuted)
+                .frame(width: 26, height: 24)
+                .background(
+                    Capsule()
+                        .fill(Color.white.opacity(0.03))
+                        .overlay(Capsule().strokeBorder(Palette.border, lineWidth: 0.5))
+                )
+        }
+        .buttonStyle(.plain)
+    }
+
+    private var providerSettingsPrompt: some View {
+        HStack(alignment: .center, spacing: 10) {
+            Circle()
+                .fill(Palette.detach)
+                .frame(width: 7, height: 7)
+
+            VStack(alignment: .leading, spacing: 3) {
+                Text("CONNECT A PROVIDER")
+                    .font(Typo.geistMonoBold(10))
+                    .foregroundColor(Palette.text)
+
+                Text("Choose OpenAI, Groq, OpenRouter, or MiniMax in Settings to unlock provider-backed chat.")
+                    .font(Typo.mono(10))
+                    .foregroundColor(Palette.textDim)
+                    .fixedSize(horizontal: false, vertical: true)
+            }
+
+            Spacer()
+
+            actionChip("SETTINGS", tint: Palette.running) {
+                SettingsWindowController.shared.showAssistant()
+            }
+        }
+        .padding(.horizontal, 16)
+        .padding(.vertical, 14)
+        .background(Palette.surface.opacity(0.22))
+    }
+
     private var authPanel: some View {
         VStack(alignment: .leading, spacing: 12) {
             if session.isAuthenticating {
@@ -184,29 +208,54 @@ struct PiWorkspaceView: View {
                     .fixedSize(horizontal: false, vertical: true)
 
                 if session.currentProvider.authMode == .apiKey {
-                    HStack(spacing: 8) {
-                        SecureField(session.currentProvider.tokenPlaceholder, text: $session.authToken)
-                            .textFieldStyle(.plain)
-                            .font(Typo.mono(11))
-                            .foregroundColor(Palette.text)
-                            .focused($authFieldFocused)
-                            .onSubmit {
-                                session.saveSelectedToken()
-                            }
+                    if session.hasSelectedCredential && !session.isEditingStoredCredential {
+                        HStack(spacing: 8) {
+                            Circle()
+                                .fill(Palette.running)
+                                .frame(width: 6, height: 6)
 
-                        actionChip("SAVE KEY") {
-                            session.saveSelectedToken()
-                        }
+                            Text("\(session.currentProvider.name) credential saved")
+                                .font(Typo.mono(10))
+                                .foregroundColor(Palette.textDim)
+
+                            Spacer()
+
+                            actionChip("REPLACE") {
+                                session.beginReplacingSelectedCredential()
+                            }
 
-                        if session.hasSelectedCredential {
                             actionChip("CLEAR") {
                                 session.removeSelectedCredential()
                             }
                         }
+                        .padding(.horizontal, 12)
+                        .padding(.vertical, 10)
+                        .background(authCardBackground(tint: Palette.running))
+                    } else {
+                        HStack(spacing: 8) {
+                            SecureField(session.currentProvider.tokenPlaceholder, text: $session.authToken)
+                                .textFieldStyle(.plain)
+                                .font(Typo.mono(11))
+                                .foregroundColor(Palette.text)
+                                .focused($authFieldFocused)
+                                .onSubmit {
+                                    session.saveSelectedToken()
+                                }
+
+                            actionChip("SAVE KEY") {
+                                session.saveSelectedToken()
+                            }
+
+                            if session.hasSelectedCredential {
+                                actionChip("CANCEL") {
+                                    session.cancelReplacingSelectedCredential()
+                                }
+                            }
+                        }
+                        .padding(.horizontal, 12)
+                        .padding(.vertical, 10)
+                        .background(authCardBackground(tint: Palette.running))
                     }
-                    .padding(.horizontal, 12)
-                    .padding(.vertical, 10)
-                    .background(authCardBackground(tint: Palette.running))
                 } else {
                     HStack(spacing: 8) {
                         actionChip("CONNECT") {
@@ -343,7 +392,7 @@ struct PiWorkspaceView: View {
                     .font(Typo.geistMonoBold(12))
                     .foregroundColor(Palette.running)
 
-                TextField("Ask Pi something heavier...", text: $session.draft, axis: .vertical)
+                TextField("Ask about settings or planning...", text: $session.draft, axis: .vertical)
                     .textFieldStyle(.plain)
                     .font(Typo.mono(12))
                     .foregroundColor(Palette.text)
@@ -395,7 +444,7 @@ struct PiWorkspaceView: View {
         switch role {
         case .system: return "system"
         case .user: return "you"
-        case .assistant: return "pi"
+        case .assistant: return "assistant"
         }
     }
 

package/apps/mac/Sources/Core/System/Capability.swift

@@ -0,0 +1,79 @@
+import AppKit
+import Foundation
+
+/// An OS permission Lattices can ask for. The Permissions Assistant introduces
+/// these and only requests the underlying grant when the user explicitly opts
+/// in. Product configuration like Pi/provider auth is intentionally excluded —
+/// that lives in the Chat/Pi surface, not here.
+enum Capability: String, CaseIterable, Identifiable {
+    case windowControl   // macOS Accessibility — tiling, focus, snap
+    case screenSearch    // macOS Screen Recording — OCR / on-screen text search
+
+    var id: String { rawValue }
+
+    var title: String {
+        switch self {
+        case .windowControl: return "Tiling & focus"
+        case .screenSearch:  return "Screen text search"
+        }
+    }
+
+    var iconName: String {
+        switch self {
+        case .windowControl: return "rectangle.3.group"
+        case .screenSearch:  return "text.viewfinder"
+        }
+    }
+
+    var requirementLabel: String {
+        switch self {
+        case .windowControl: return "Accessibility"
+        case .screenSearch:  return "Screen & System Audio Recording"
+        }
+    }
+
+    var pitch: String {
+        switch self {
+        case .windowControl:
+            return "Move, resize, snap, and arrange windows from the menu bar, command palette, and gestures."
+        case .screenSearch:
+            return "Index on-screen text with OCR so the omni search can jump to any window by what it shows."
+        }
+    }
+
+    var why: String {
+        switch self {
+        case .windowControl:
+            return "macOS Accessibility lets Lattices read window titles and move or resize windows. No keystrokes are recorded."
+        case .screenSearch:
+            return "Screen Recording lets Lattices read pixels to OCR what is on-screen. Captures stay on this Mac."
+        }
+    }
+
+    /// Optional one-liner shown when the capability is on, summarising current behavior.
+    var whenGrantedDetail: String {
+        switch self {
+        case .windowControl: return "Lattices can move and tile windows."
+        case .screenSearch:  return "OCR can index visible windows for omni search."
+        }
+    }
+
+    /// Live status — read directly from the system, never cached.
+    var isGranted: Bool {
+        switch self {
+        case .windowControl: return PermissionChecker.shared.accessibility
+        case .screenSearch:  return PermissionChecker.shared.screenRecording
+        }
+    }
+
+    /// All capabilities that are not yet granted.
+    static var missing: [Capability] {
+        Capability.allCases.filter { !$0.isGranted }
+    }
+
+    /// Capabilities that are missing AND have not been dismissed-for-now.
+    static var visiblyMissing: [Capability] {
+        let dismissed = Preferences.shared.dismissedCapabilities
+        return missing.filter { !dismissed.contains($0.rawValue) }
+    }
+}

package/{app → apps/mac}/Sources/Core/System/PermissionChecker.swift

@@ -14,12 +14,20 @@ final class PermissionChecker: ObservableObject {
 
     var allGranted: Bool { accessibility && screenRecording }
 
+    var isSimulatingMissingPermissions: Bool {
+        CommandLine.arguments.contains("--simulate-missing-permissions")
+            || UserDefaults.standard.bool(forKey: "permissions.simulateMissing")
+    }
+
     /// Check current permission state without prompting.
-    func check() {
+    func check(pollIfMissing: Bool = false) {
         let diag = DiagnosticLog.shared
 
-        let ax = AXIsProcessTrusted()
-        let sr = CGPreflightScreenCaptureAccess()
+        let realAX = AXIsProcessTrusted()
+        let realSR = CGPreflightScreenCaptureAccess()
+        let simulating = isSimulatingMissingPermissions
+        let ax = simulating ? false : realAX
+        let sr = simulating ? false : realSR
 
         // First check: log identity info only
         if !hasLoggedInitial {
@@ -29,8 +37,11 @@ final class PermissionChecker: ObservableObject {
             let pid = ProcessInfo.processInfo.processIdentifier
             diag.info("PermissionChecker: bundleId=\(bundleId) pid=\(pid)")
             diag.info("PermissionChecker: exec=\(execPath)")
-            diag.info("AXIsProcessTrusted() → \(ax)")
-            diag.info("CGPreflightScreenCaptureAccess() → \(sr)")
+            diag.info("AXIsProcessTrusted() → \(realAX)")
+            diag.info("CGPreflightScreenCaptureAccess() → \(realSR)")
+            if simulating {
+                diag.warn("PermissionChecker: simulating missing permissions for UX preview")
+            }
         }
 
         // Log on state changes
@@ -41,11 +52,11 @@ final class PermissionChecker: ObservableObject {
         accessibility = ax
         screenRecording = sr
 
-        // If not all granted, start polling so we detect changes while user is in Settings.
-        // Once all granted, stop polling.
+        // Only poll after an intentional permission request. A passive launch-time
+        // check should not keep nudging macOS privacy state in the background.
         if allGranted {
             stopPolling()
-        } else {
+        } else if pollIfMissing {
             startPolling()
         }
     }
@@ -54,6 +65,11 @@ final class PermissionChecker: ObservableObject {
     /// which adds lattices to the Accessibility list and asks the user to toggle it on.
     func requestAccessibility() {
         let diag = DiagnosticLog.shared
+        if isSimulatingMissingPermissions {
+            diag.warn("requestAccessibility: skipped because missing-permission simulation is enabled")
+            accessibility = false
+            return
+        }
         let beforeCheck = AXIsProcessTrusted()
         diag.info("requestAccessibility: before=\(beforeCheck), prompting…")
         let opts = [kAXTrustedCheckOptionPrompt.takeUnretainedValue(): true] as CFDictionary
@@ -71,6 +87,11 @@ final class PermissionChecker: ObservableObject {
     /// which adds lattices to the Screen Recording list. The user toggles it on in Settings.
     func requestScreenRecording() {
         let diag = DiagnosticLog.shared
+        if isSimulatingMissingPermissions {
+            diag.warn("requestScreenRecording: skipped because missing-permission simulation is enabled")
+            screenRecording = false
+            return
+        }
         let beforeCheck = CGPreflightScreenCaptureAccess()
         diag.info("requestScreenRecording: before=\(beforeCheck), probing…")
 
@@ -131,6 +152,20 @@ final class PermissionChecker: ObservableObject {
         }
     }
 
+    /// Opens System Settings → Privacy & Security → Automation.
+    func openAutomationSettings() {
+        if let url = URL(string: "x-apple.systempreferences:com.apple.preference.security?Privacy_Automation") {
+            NSWorkspace.shared.open(url)
+        }
+    }
+
+    /// Opens System Settings → Privacy & Security → Input Monitoring.
+    func openInputMonitoringSettings() {
+        if let url = URL(string: "x-apple.systempreferences:com.apple.preference.security?Privacy_ListenEvent") {
+            NSWorkspace.shared.open(url)
+        }
+    }
+
     @available(macOS 15.0, *)
     private func probeScreenCaptureShareableContent() async -> String {
         await withCheckedContinuation { continuation in