@pulso/companion 0.1.8 → 0.2.0

package/dist/index.js

@@ -3,9 +3,9 @@
 // src/index.ts
 import WebSocket from "ws";
 import { exec, execSync } from "child_process";
-import { readFileSync, writeFileSync, existsSync } from "fs";
+import { readFileSync, writeFileSync, existsSync, readdirSync, statSync, copyFileSync, renameSync } from "fs";
 import { homedir } from "os";
-import { resolve } from "path";
+import { join, resolve, basename, extname } from "path";
 var API_URL = process.env.PULSO_API_URL ?? process.argv.find((_, i, a) => a[i - 1] === "--api") ?? "https://pulso-api.vulk.workers.dev";
 var TOKEN = process.env.PULSO_TOKEN ?? process.argv.find((_, i, a) => a[i - 1] === "--token") ?? "";
 if (!TOKEN) {
@@ -55,6 +55,122 @@ function runSwift(code, timeout = 1e4) {
     child.stdin?.end();
   });
 }
+var SETUP_DONE_FILE = join(HOME, ".pulso-companion-setup");
+async function setupPermissions() {
+  const isFirstRun = !existsSync(SETUP_DONE_FILE);
+  console.log(isFirstRun ? "\u{1F510} First run \u2014 setting up permissions...\n" : "\u{1F510} Checking permissions...\n");
+  const status = {};
+  const browserDefaults = [
+    ["Google Chrome", "com.google.Chrome", "AllowJavaScriptAppleEvents"],
+    ["Safari", "com.apple.Safari", "AllowJavaScriptFromAppleEvents"],
+    ["Arc", "company.thebrowser.Browser", "AllowJavaScriptAppleEvents"],
+    ["Microsoft Edge", "com.microsoft.edgemac", "AllowJavaScriptAppleEvents"]
+  ];
+  for (const [name, domain, key] of browserDefaults) {
+    try {
+      execSync(`defaults write ${domain} ${key} -bool true 2>/dev/null`, { timeout: 3e3 });
+      if (name === "Google Chrome" || name === "Safari") status[`${name} JS`] = "\u2705";
+    } catch {
+      if (name === "Google Chrome" || name === "Safari") status[`${name} JS`] = "\u26A0\uFE0F";
+    }
+  }
+  for (const [browserName, processName] of [["Google Chrome", "Google Chrome"], ["Safari", "Safari"]]) {
+    try {
+      const running = execSync(`pgrep -x "${processName}" 2>/dev/null`, { timeout: 2e3 }).toString().trim();
+      if (!running) continue;
+      const enableJsScript = browserName === "Google Chrome" ? `tell application "System Events"
+            tell process "Google Chrome"
+              -- Find the Developer submenu (localized name varies)
+              set viewMenu to menu bar item -3 of menu bar 1
+              set viewMenuItems to name of every menu item of menu 1 of viewMenu
+              set devMenuItem to last menu item of menu 1 of viewMenu
+              set devItems to name of every menu item of menu 1 of devMenuItem
+              -- The JS Apple Events item is always the last one in Developer menu
+              set jsItem to last menu item of menu 1 of devMenuItem
+              set markChar to value of attribute "AXMenuItemMarkChar" of jsItem
+              if markChar is missing value then
+                click jsItem
+                delay 1
+                -- Accept any confirmation dialog
+                try
+                  click button 1 of sheet 1 of window 1
+                end try
+                return "enabled"
+              else
+                return "already_enabled"
+              end if
+            end tell
+          end tell` : `return "skip_safari"`;
+      const result = execSync(`osascript -e '${enableJsScript.replace(/'/g, "'\\''")}' 2>/dev/null`, { timeout: 1e4 }).toString().trim();
+      if (result === "enabled") {
+        console.log(`   \u2705 ${browserName}: JavaScript from Apple Events enabled via menu`);
+      }
+    } catch {
+    }
+  }
+  try {
+    execSync(`osascript -e 'tell application "System Events" to name of first process' 2>/dev/null`, { timeout: 5e3 });
+    status["Accessibility"] = "\u2705";
+  } catch (err) {
+    const msg = err.message || "";
+    if (msg.includes("not allowed") || msg.includes("assistive") || msg.includes("-1719")) {
+      status["Accessibility"] = "\u26A0\uFE0F";
+      if (isFirstRun) {
+        console.log("   \u26A0\uFE0F  Accessibility: macOS should show a permission dialog.");
+        console.log("      If not, go to: System Settings \u2192 Privacy & Security \u2192 Accessibility");
+        console.log("      Add your terminal app (Terminal, iTerm, Warp, etc.)\n");
+      }
+    } else {
+      status["Accessibility"] = "\u2705";
+    }
+  }
+  try {
+    const testPath = `/tmp/.pulso-perm-test-${Date.now()}.png`;
+    execSync(`screencapture -x ${testPath} 2>/dev/null`, { timeout: 8e3 });
+    if (existsSync(testPath)) {
+      const stat = readFileSync(testPath);
+      execSync(`rm -f ${testPath}`);
+      if (stat.length > 100) {
+        status["Screen Recording"] = "\u2705";
+      } else {
+        status["Screen Recording"] = "\u26A0\uFE0F";
+        if (isFirstRun) {
+          console.log("   \u26A0\uFE0F  Screen Recording: macOS should show a permission dialog.");
+          console.log("      If not, go to: System Settings \u2192 Privacy & Security \u2192 Screen Recording");
+          console.log("      Add your terminal app\n");
+        }
+      }
+    } else {
+      status["Screen Recording"] = "\u274C";
+    }
+  } catch {
+    status["Screen Recording"] = "\u26A0\uFE0F";
+    if (isFirstRun) {
+      console.log("   \u26A0\uFE0F  Screen Recording: permission needed for screenshots.");
+      console.log("      Go to: System Settings \u2192 Privacy & Security \u2192 Screen Recording\n");
+    }
+  }
+  console.log("   Permission Status:");
+  for (const [name, icon] of Object.entries(status)) {
+    const note = icon === "\u2705" ? "enabled" : icon === "\u26A0\uFE0F" ? "needs approval" : "not available";
+    console.log(`   ${icon} ${name}: ${note}`);
+  }
+  console.log("");
+  if (isFirstRun) {
+    try {
+      writeFileSync(SETUP_DONE_FILE, (/* @__PURE__ */ new Date()).toISOString(), "utf-8");
+    } catch {
+    }
+  }
+  const needsManual = status["Accessibility"] === "\u26A0\uFE0F" || status["Screen Recording"] === "\u26A0\uFE0F";
+  if (isFirstRun && needsManual) {
+    console.log("   Opening System Settings for you to approve permissions...\n");
+    try {
+      execSync('open "x-apple.systempreferences:com.apple.preference.security?Privacy_Accessibility"', { timeout: 3e3 });
+    } catch {
+    }
+  }
+}
 var UA = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36";
 var searchCache = /* @__PURE__ */ new Map();
 var CACHE_TTL = 7 * 24 * 3600 * 1e3;
@@ -761,6 +877,433 @@ print("\\(x),\\(y)")`;
         const result = await runShell(`shortcuts run "${name.replace(/"/g, '\\"')}" ${inputFlag}`, 3e4);
         return { success: true, data: { shortcut: name, output: result || "Shortcut executed" } };
       }
+      // ── Shell Execution ─────────────────────────────────────
+      case "sys_shell": {
+        const cmd = params.command;
+        if (!cmd) return { success: false, error: "Missing command" };
+        const blocked = ["rm -rf /", "mkfs", "dd if=", "> /dev/", ":(){ :|:& };:"];
+        if (blocked.some((b) => cmd.includes(b))) return { success: false, error: "Command blocked for safety" };
+        const timeout = Number(params.timeout) || 15e3;
+        try {
+          const output = await runShell(cmd, timeout);
+          return { success: true, data: { command: cmd, output: output.slice(0, 1e4), truncated: output.length > 1e4 } };
+        } catch (err) {
+          return { success: false, error: `Shell error: ${err.message.slice(0, 2e3)}` };
+        }
+      }
+      // ── Calendar ────────────────────────────────────────────
+      case "sys_calendar_list": {
+        const days = Number(params.days) || 7;
+        const startDate = /* @__PURE__ */ new Date();
+        const endDate = new Date(Date.now() + days * 864e5);
+        const fmt = (d) => `date "${d.getFullYear()}-${String(d.getMonth() + 1).padStart(2, "0")}-${String(d.getDate()).padStart(2, "0")}"`;
+        const script = `
+          set output to ""
+          tell application "Calendar"
+            repeat with cal in calendars
+              set calName to name of cal
+              set evts to (every event of cal whose start date >= (current date) and start date < ((current date) + ${days} * days))
+              repeat with e in evts
+                set output to output & calName & " | " & summary of e & " | " & (start date of e as string) & " | " & (end date of e as string) & linefeed
+              end repeat
+            end repeat
+          end tell
+          return output`;
+        const raw = await runAppleScript(script);
+        const events = raw.split("\n").filter(Boolean).map((line) => {
+          const [cal, summary, start, end] = line.split(" | ");
+          return { calendar: cal?.trim(), summary: summary?.trim(), start: start?.trim(), end: end?.trim() };
+        });
+        return { success: true, data: { events, count: events.length, daysAhead: days } };
+      }
+      case "sys_calendar_create": {
+        const summary = params.summary || params.title;
+        const startStr = params.start;
+        const endStr = params.end;
+        const calendar = params.calendar || "";
+        const notes = params.notes || "";
+        if (!summary || !startStr) return { success: false, error: "Missing summary or start time" };
+        const calTarget = calendar ? `calendar "${calendar.replace(/"/g, '\\"')}"` : "default calendar";
+        const endPart = endStr ? `set end date of newEvent to date "${endStr}"` : "";
+        const notesPart = notes ? `set description of newEvent to "${notes.replace(/"/g, '\\"')}"` : "";
+        await runAppleScript(`
+          tell application "Calendar"
+            tell ${calTarget}
+              set newEvent to make new event with properties {summary:"${summary.replace(/"/g, '\\"')}", start date:date "${startStr}"}
+              ${endPart}
+              ${notesPart}
+            end tell
+          end tell`);
+        return { success: true, data: { created: summary, start: startStr, end: endStr || "auto" } };
+      }
+      // ── Reminders ───────────────────────────────────────────
+      case "sys_reminder_list": {
+        const listName = params.list || "";
+        const script = listName ? `tell application "Reminders" to set rems to reminders of list "${listName.replace(/"/g, '\\"')}" whose completed is false
+             set output to ""
+             repeat with r in rems
+               set output to output & name of r & " | " & (due date of r as string) & linefeed
+             end repeat
+             return output` : `tell application "Reminders"
+               set output to ""
+               repeat with l in lists
+                 set rems to reminders of l whose completed is false
+                 repeat with r in rems
+                   set output to output & name of l & " | " & name of r & " | " & (due date of r as string) & linefeed
+                 end repeat
+               end repeat
+               return output
+             end tell`;
+        try {
+          const raw = await runAppleScript(script);
+          const reminders = raw.split("\n").filter(Boolean).map((line) => {
+            const parts = line.split(" | ");
+            return parts.length === 3 ? { list: parts[0]?.trim(), name: parts[1]?.trim(), due: parts[2]?.trim() } : { name: parts[0]?.trim(), due: parts[1]?.trim() };
+          });
+          return { success: true, data: { reminders, count: reminders.length } };
+        } catch {
+          return { success: true, data: { reminders: [], count: 0, note: "No reminders or Reminders app not accessible" } };
+        }
+      }
+      case "sys_reminder_create": {
+        const reminderName = params.name;
+        const dueDate = params.due;
+        const listName2 = params.list || "Reminders";
+        if (!reminderName) return { success: false, error: "Missing reminder name" };
+        const duePart = dueDate ? `, due date:date "${dueDate}"` : "";
+        await runAppleScript(`
+          tell application "Reminders"
+            tell list "${listName2.replace(/"/g, '\\"')}"
+              make new reminder with properties {name:"${reminderName.replace(/"/g, '\\"')}"${duePart}}
+            end tell
+          end tell`);
+        return { success: true, data: { created: reminderName, due: dueDate || "none", list: listName2 } };
+      }
+      // ── iMessage ────────────────────────────────────────────
+      case "sys_imessage_send": {
+        const to2 = params.to;
+        const msg = params.message;
+        if (!to2 || !msg) return { success: false, error: "Missing 'to' (phone/email) or 'message'" };
+        await runAppleScript(`
+          tell application "Messages"
+            set targetService to 1st account whose service type = iMessage
+            set targetBuddy to participant "${to2.replace(/"/g, '\\"')}" of targetService
+            send "${msg.replace(/"/g, '\\"')}" to targetBuddy
+          end tell`);
+        return { success: true, data: { sent: true, to: to2, message: msg.slice(0, 100) } };
+      }
+      // ── System Info ─────────────────────────────────────────
+      case "sys_system_info": {
+        const info = {};
+        try {
+          info.battery = (await runShell("pmset -g batt | grep -Eo '\\d+%'")).trim();
+        } catch {
+          info.battery = "N/A";
+        }
+        try {
+          info.wifi = (await runShell("networksetup -getairportnetwork en0 2>/dev/null | cut -d: -f2")).trim();
+        } catch {
+          info.wifi = "N/A";
+        }
+        try {
+          info.ip_local = (await runShell("ipconfig getifaddr en0 2>/dev/null || echo 'N/A'")).trim();
+        } catch {
+          info.ip_local = "N/A";
+        }
+        try {
+          info.ip_public = (await runShell("curl -s --max-time 3 ifconfig.me")).trim();
+        } catch {
+          info.ip_public = "N/A";
+        }
+        try {
+          info.disk = (await runShell(`df -h / | tail -1 | awk '{print $3 " used / " $2 " total (" $5 " used)"}'`)).trim();
+        } catch {
+          info.disk = "N/A";
+        }
+        try {
+          info.memory = (await runShell("vm_stat | head -5")).trim();
+        } catch {
+          info.memory = "N/A";
+        }
+        try {
+          info.uptime = (await runShell("uptime | sed 's/.*up /up /' | sed 's/,.*//'")).trim();
+        } catch {
+          info.uptime = "N/A";
+        }
+        try {
+          info.hostname = (await runShell("hostname")).trim();
+        } catch {
+          info.hostname = "N/A";
+        }
+        try {
+          info.os = (await runShell("sw_vers -productVersion")).trim();
+        } catch {
+          info.os = "N/A";
+        }
+        try {
+          info.cpu = (await runShell("sysctl -n machdep.cpu.brand_string")).trim();
+        } catch {
+          info.cpu = "N/A";
+        }
+        return { success: true, data: info };
+      }
+      // ── Volume Control ──────────────────────────────────────
+      case "sys_volume": {
+        const level = params.level;
+        if (level !== void 0) {
+          const vol = Math.max(0, Math.min(100, Number(level)));
+          await runAppleScript(`set volume output volume ${vol}`);
+          return { success: true, data: { volume: vol } };
+        }
+        const raw2 = await runAppleScript("output volume of (get volume settings)");
+        return { success: true, data: { volume: Number(raw2) || 0 } };
+      }
+      // ── Brightness ──────────────────────────────────────────
+      case "sys_brightness": {
+        const level2 = params.level;
+        if (level2 !== void 0) {
+          const br = Math.max(0, Math.min(1, Number(level2)));
+          await runShell(`brightness ${br} 2>/dev/null || osascript -e 'tell application "System Events" to tell appearance preferences to set dark mode to ${br < 0.3}'`);
+          return { success: true, data: { brightness: br } };
+        }
+        try {
+          const raw3 = await runShell("brightness -l 2>/dev/null | grep brightness | head -1 | awk '{print $NF}'");
+          return { success: true, data: { brightness: parseFloat(raw3) || 0.5 } };
+        } catch {
+          return { success: true, data: { brightness: "unknown", note: "Install 'brightness' via brew for control" } };
+        }
+      }
+      // ── Do Not Disturb ──────────────────────────────────────
+      case "sys_dnd": {
+        const enabled = params.enabled;
+        if (enabled !== void 0) {
+          try {
+            await runShell(`shortcuts run "Toggle Do Not Disturb" 2>/dev/null || osascript -e 'do shell script "defaults write com.apple.ncprefs dnd_prefs -data 0"'`);
+            return { success: true, data: { dnd: enabled, note: "DND toggled" } };
+          } catch {
+            return { success: true, data: { dnd: enabled, note: "Set DND manually in Control Center" } };
+          }
+        }
+        return { success: true, data: { note: "Pass enabled: true/false to toggle DND" } };
+      }
+      // ── File Management ─────────────────────────────────────
+      case "sys_file_list": {
+        const dirPath = params.path || "Desktop";
+        const fullDir = safePath(dirPath);
+        if (!fullDir) return { success: false, error: `Access denied: ${dirPath}` };
+        if (!existsSync(fullDir)) return { success: false, error: `Directory not found: ${dirPath}` };
+        const entries = readdirSync(fullDir).map((name) => {
+          try {
+            const st = statSync(join(fullDir, name));
+            return { name, type: st.isDirectory() ? "dir" : "file", size: st.size, modified: st.mtime.toISOString() };
+          } catch {
+            return { name, type: "unknown", size: 0, modified: "" };
+          }
+        });
+        return { success: true, data: { path: dirPath, entries, count: entries.length } };
+      }
+      case "sys_file_move": {
+        const src = params.from;
+        const dst = params.to;
+        if (!src || !dst) return { success: false, error: "Missing from/to paths" };
+        const fullSrc = safePath(src);
+        const fullDst = safePath(dst);
+        if (!fullSrc || !fullDst) return { success: false, error: "Access denied" };
+        if (!existsSync(fullSrc)) return { success: false, error: `Source not found: ${src}` };
+        renameSync(fullSrc, fullDst);
+        return { success: true, data: { moved: src, to: dst } };
+      }
+      case "sys_file_copy": {
+        const src2 = params.from;
+        const dst2 = params.to;
+        if (!src2 || !dst2) return { success: false, error: "Missing from/to paths" };
+        const fullSrc2 = safePath(src2);
+        const fullDst2 = safePath(dst2);
+        if (!fullSrc2 || !fullDst2) return { success: false, error: "Access denied" };
+        if (!existsSync(fullSrc2)) return { success: false, error: `Source not found: ${src2}` };
+        copyFileSync(fullSrc2, fullDst2);
+        return { success: true, data: { copied: src2, to: dst2 } };
+      }
+      case "sys_file_delete": {
+        const target = params.path;
+        if (!target) return { success: false, error: "Missing path" };
+        const fullTarget = safePath(target);
+        if (!fullTarget) return { success: false, error: "Access denied" };
+        if (!existsSync(fullTarget)) return { success: false, error: `Not found: ${target}` };
+        await runShell(`osascript -e 'tell application "Finder" to delete POSIX file "${fullTarget}"'`);
+        return { success: true, data: { deleted: target, method: "moved_to_trash" } };
+      }
+      case "sys_file_info": {
+        const fPath = params.path;
+        if (!fPath) return { success: false, error: "Missing path" };
+        const fullF = safePath(fPath);
+        if (!fullF) return { success: false, error: "Access denied" };
+        if (!existsSync(fullF)) return { success: false, error: `Not found: ${fPath}` };
+        const st = statSync(fullF);
+        return {
+          success: true,
+          data: {
+            path: fPath,
+            name: basename(fullF),
+            extension: extname(fullF),
+            size: st.size,
+            sizeHuman: st.size > 1048576 ? `${(st.size / 1048576).toFixed(1)} MB` : `${(st.size / 1024).toFixed(1)} KB`,
+            isDirectory: st.isDirectory(),
+            created: st.birthtime.toISOString(),
+            modified: st.mtime.toISOString()
+          }
+        };
+      }
+      // ── Download ────────────────────────────────────────────
+      case "sys_download": {
+        const dlUrl = params.url;
+        const dlDest = params.path || `Downloads/${basename(new URL(dlUrl).pathname) || "download"}`;
+        if (!dlUrl) return { success: false, error: "Missing URL" };
+        const fullDl = safePath(dlDest);
+        if (!fullDl) return { success: false, error: "Access denied" };
+        await runShell(`curl -sL -o "${fullDl}" "${dlUrl.replace(/"/g, '\\"')}"`, 6e4);
+        const size = existsSync(fullDl) ? statSync(fullDl).size : 0;
+        return { success: true, data: { downloaded: dlUrl, saved: dlDest, size } };
+      }
+      // ── Window Management ───────────────────────────────────
+      case "sys_window_list": {
+        const raw4 = await runAppleScript(`
+          tell application "System Events"
+            set output to ""
+            repeat with proc in (every process whose visible is true)
+              set procName to name of proc
+              repeat with w in windows of proc
+                set output to output & procName & " | " & (name of w) & " | " & (position of w as string) & " | " & (size of w as string) & linefeed
+              end repeat
+            end repeat
+            return output
+          end tell`);
+        const windows = raw4.split("\n").filter(Boolean).map((line) => {
+          const [app, title, pos, sz] = line.split(" | ");
+          return { app: app?.trim(), title: title?.trim(), position: pos?.trim(), size: sz?.trim() };
+        });
+        return { success: true, data: { windows, count: windows.length } };
+      }
+      case "sys_window_focus": {
+        const appName = params.app;
+        if (!appName) return { success: false, error: "Missing app name" };
+        await runAppleScript(`
+          tell application "${appName.replace(/"/g, '\\"')}"
+            activate
+            set frontmost to true
+          end tell`);
+        return { success: true, data: { focused: appName } };
+      }
+      case "sys_window_resize": {
+        const app2 = params.app;
+        const x = params.x;
+        const y = params.y;
+        const w = params.width;
+        const h = params.height;
+        if (!app2) return { success: false, error: "Missing app name" };
+        const posPart = x !== void 0 && y !== void 0 ? `set position of window 1 to {${x}, ${y}}` : "";
+        const sizePart = w !== void 0 && h !== void 0 ? `set size of window 1 to {${w}, ${h}}` : "";
+        if (!posPart && !sizePart) return { success: false, error: "Provide x,y for position and/or width,height for size" };
+        await runAppleScript(`
+          tell application "System Events"
+            tell process "${app2.replace(/"/g, '\\"')}"
+              ${posPart}
+              ${sizePart}
+            end tell
+          end tell`);
+        return { success: true, data: { app: app2, position: posPart ? { x, y } : "unchanged", size: sizePart ? { width: w, height: h } : "unchanged" } };
+      }
+      // ── Apple Notes ─────────────────────────────────────────
+      case "sys_notes_list": {
+        const limit = Number(params.limit) || 10;
+        const raw5 = await runAppleScript(`
+          tell application "Notes"
+            set output to ""
+            set noteList to notes 1 thru ${limit}
+            repeat with n in noteList
+              set output to output & id of n & " | " & name of n & " | " & (modification date of n as string) & linefeed
+            end repeat
+            return output
+          end tell`);
+        const notes = raw5.split("\n").filter(Boolean).map((line) => {
+          const [id, name, date] = line.split(" | ");
+          return { id: id?.trim(), name: name?.trim(), modified: date?.trim() };
+        });
+        return { success: true, data: { notes, count: notes.length } };
+      }
+      case "sys_notes_create": {
+        const noteTitle = params.title || "Untitled";
+        const noteBody = params.body || "";
+        const folder = params.folder || "Notes";
+        await runAppleScript(`
+          tell application "Notes"
+            tell folder "${folder.replace(/"/g, '\\"')}"
+              make new note with properties {name:"${noteTitle.replace(/"/g, '\\"')}", body:"${noteBody.replace(/"/g, '\\"').replace(/\n/g, "\\n")}"}
+            end tell
+          end tell`);
+        return { success: true, data: { created: noteTitle, folder } };
+      }
+      // ── Contacts ────────────────────────────────────────────
+      case "sys_contacts_search": {
+        const query2 = params.query;
+        if (!query2) return { success: false, error: "Missing search query" };
+        const raw6 = await runAppleScript(`
+          tell application "Contacts"
+            set matches to every person whose name contains "${query2.replace(/"/g, '\\"')}"
+            set output to ""
+            repeat with p in matches
+              set pName to name of p
+              set pEmail to ""
+              set pPhone to ""
+              try
+                set pEmail to value of first email of p
+              end try
+              try
+                set pPhone to value of first phone of p
+              end try
+              set output to output & pName & " | " & pEmail & " | " & pPhone & linefeed
+            end repeat
+            return output
+          end tell`);
+        const contacts = raw6.split("\n").filter(Boolean).map((line) => {
+          const [name, email, phone] = line.split(" | ");
+          return { name: name?.trim(), email: email?.trim(), phone: phone?.trim() };
+        });
+        return { success: true, data: { contacts, count: contacts.length, query: query2 } };
+      }
+      // ── OCR (Vision framework) ──────────────────────────────
+      case "sys_ocr": {
+        const imgPath = params.path;
+        if (!imgPath) return { success: false, error: "Missing image path" };
+        const fullImg = imgPath.startsWith("/tmp/") ? imgPath : safePath(imgPath);
+        if (!fullImg) return { success: false, error: "Access denied" };
+        if (!existsSync(fullImg)) return { success: false, error: `Image not found: ${imgPath}` };
+        const swiftOcr = `
+import Foundation
+import Vision
+
+let url = URL(fileURLWithPath: "${fullImg}")
+guard let imgData = try? Data(contentsOf: url),
+      let img = NSImage(data: imgData),
+      let cgImg = img.cgImage(forProposedRect: nil, context: nil, hints: nil) else {
+    print("ERROR: Cannot load image")
+    Foundation.exit(1)
+}
+let request = VNRecognizeTextRequest()
+request.recognitionLevel = .accurate
+request.recognitionLanguages = ["en", "pt", "es", "fr", "de", "it"]
+let handler = VNImageRequestHandler(cgImage: cgImg)
+try handler.perform([request])
+let results = request.results ?? []
+let text = results.compactMap { $0.topCandidates(1).first?.string }.joined(separator: "\\n")
+print(text)`;
+        try {
+          const ocrText = await runSwift(swiftOcr, 3e4);
+          return { success: true, data: { text: ocrText.slice(0, 1e4), length: ocrText.length, path: imgPath } };
+        } catch (err) {
+          return { success: false, error: `OCR failed: ${err.message}` };
+        }
+      }
       default:
         return { success: false, error: `Unknown command: ${command}` };
     }
@@ -849,10 +1392,14 @@ function scheduleReconnect() {
 }
 console.log("");
 console.log("  \u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557");
-console.log("  \u2551    \u{1FAC0} Pulso Mac Companion v0.1.8     \u2551");
+console.log("  \u2551    \u{1FAC0} Pulso Mac Companion v0.1.9     \u2551");
 console.log("  \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D");
 console.log("");
-connect();
+setupPermissions().then(() => {
+  connect();
+}).catch(() => {
+  connect();
+});
 process.on("SIGINT", () => {
   console.log("\n\u{1F44B} Shutting down Pulso Companion...");
   ws?.close(1e3, "User shutdown");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pulso/companion",
-  "version": "0.1.8",
+  "version": "0.2.0",
   "type": "module",
   "description": "Pulso Companion — gives your AI agent real control over your computer",
   "bin": {