@vashp2029/glovebox 0.3.0 → 0.3.1

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.3.1 (2026-11-03)
+
+- Fix: the drawn agent cursor now glides to every action. Its animation never
+  moved the window, so it froze after the first action, and launching the helper
+  hidden could keep it from appearing at all.
+- Add a demo to the README.
+
 ## 0.3.0 (2026-11-03)
 
 - First npm release, as `@vashp2029/glovebox`. CI runs the unit tests on every

package/README.md

@@ -8,7 +8,7 @@
 **Computer use for coding agents on macOS: one JavaScript call per step,
 accessibility diffs instead of screenshots, and your screen stays yours.**
 
-<!-- demo: docs/demo.gif goes here once recorded -->
+![Someone browses Wikipedia in Safari while an agent works Calculator and types the result into TextEdit in the background](https://raw.githubusercontent.com/vpatel9202/glovebox/main/media/demo.gif)
 
 ```js
 const calc = await gb.getApp("Calculator");
@@ -164,8 +164,10 @@ OpenAI's actual runtime and already have the ChatGPT app (lcu).
 The first time a session touches an app, you get a dialog: Allow for This
 Session, Always Allow, or Deny. Terminals, password managers, System Settings,
 and a few others are blocked unless you run `glovebox allow <bundle id>`; the
-list is in [SECURITY.md](SECURITY.md#blocked-apps). Switching to another app
-stops a running script (Escape too, with Input Monitoring). Every action is
+list is in [SECURITY.md](SECURITY.md#blocked-apps). A script that had to bring
+an app forward stops if you switch away. Scripts running in the background keep
+going while you use other apps, and Escape stops any script if you grant Input
+Monitoring. Every action is
 logged to `~/.glovebox/actions.log`.
 
 An approved app is approved for everything in it: allowing a browser lets the

package/SECURITY.md

@@ -14,10 +14,12 @@ computer. Treat it with the same care as giving someone remote control.
   (see the list below). An agent with terminal access could otherwise use the
   GUI to run commands its sandbox would not allow. An app on the `deny` list
   is refused even if it is also allowed.
-- **Taking over stops a script.** If you switch to another app while a
-  script is driving one, the script stops instead of taking focus back. With
-  the optional Input Monitoring permission, pressing Escape also stops it
-  (glovebox marks its own key events, so its own Escapes do not count).
+- **Taking over stops a script.** If a script had to bring an app forward and
+  you switch away, the script stops instead of taking focus back. A script
+  working in the background keeps running while you use other apps, so switching
+  apps does not stop it. With the optional Input Monitoring permission, pressing
+  Escape stops any script (glovebox marks its own key events, so its own Escapes
+  do not count).
 - **Menu-bar item.** While an agent is connected, Glovebox Helper shows a
   menu-bar item listing each session and its approved apps. Stop Running
   Scripts stops every running script. Revoke Session Approvals clears the

package/docs/api.md

@@ -119,10 +119,11 @@ windows).
 
 The first time a session touches an app, the user sees a dialog: Allow for
 This Session, Always Allow, or Deny. Terminals, password managers, and System
-Settings are blocked unless the user runs `glovebox allow <app>`. If the user
-switches to another app while a script runs, the script stops with a
-"Stopped: ..." message. Escape stops it too, but only when the user has
-granted Input Monitoring. Do not continue GUI work until the user asks.
+Settings are blocked unless the user runs `glovebox allow <app>`. If a script
+brought an app forward and the user switches away, the script stops with a
+"Stopped: ..." message. Background scripts keep running while the user works in
+other apps. Escape stops any script, but only when the user has granted Input
+Monitoring. Do not continue GUI work until the user asks.
 On the foreground route a script brings an app forward at most once per call.
 Every action is appended to `~/.glovebox/actions.log` (typed text is logged
 as a length only).
@@ -134,6 +135,9 @@ as a length only).
   word you type can land in its field. Keep the time the menu is open short: open
   it and pick the item in one script, with no read in between. A dedicated
   `app.select(popup, item)` is planned.
+- **Window controls during background typing.** A target window can show active
+  window controls while it receives background keys, even though your app stays
+  frontmost and keeps your keyboard.
 - **One-node trees.** Remote desktops such as Citrix expose a single accessibility
   node, so work there runs on screenshots and pixel clicks.
 

package/docs/design.md

@@ -158,8 +158,8 @@ Computer use can click anything, so approval is part of the product:
   Editor, Automator, and the helper itself are blocked by default and never
   offered in a dialog. Only an explicit `glovebox allow` unlocks one. The
   full list is in `SECURITY.md`.
-- Switching to another app stops the running script. A script brings an app
-  forward at most once per call; if the app is no longer in front later in
+- Switching away stops a script on the foreground route; background scripts
+  keep running. A script brings an app forward at most once per call; if the app is no longer in front later in
   the same call, the user took over, and the script stops rather than taking
   focus back. (An earlier version re-activated before every key and fought
   the user for focus.)

package/native/macos/GloveboxHelper.swift

@@ -20,7 +20,7 @@ import Foundation
 import ScreenCaptureKit
 import UniformTypeIdentifiers
 
-let helperVersion = "0.2.0"
+let helperVersion = "0.3.1"
 // Marks events we synthesize so the Escape watcher ignores them.
 let syntheticMarker: Int64 = 0x676C_6F76
 
@@ -1078,26 +1078,33 @@ final class AgentCursor {
     // Blocks until the move animation finishes so the action lines up with it.
     func move(to point: CGPoint, above windowId: Int?) {
         guard enabled else { return }
+        var from = NSPoint.zero
+        var target = NSPoint.zero
         var duration: TimeInterval = 0
         DispatchQueue.main.sync {
             let w = self.window ?? self.makeWindow()
             self.window = w
             guard let primary = NSScreen.screens.first else { return }
             // AppKit frames are bottom-left origin; the arrow tip is the frame's top-left.
-            let target = NSPoint(x: point.x - 4, y: primary.frame.height - point.y - self.size.height + 3)
-            let from = w.isVisible ? w.frame.origin : target
+            target = NSPoint(x: point.x - 4, y: primary.frame.height - point.y - self.size.height + 3)
+            from = w.isVisible ? w.frame.origin : target
             let distance = hypot(target.x - from.x, target.y - from.y)
             duration = w.isVisible ? min(0.45, 0.12 + Double(distance) / 2400) : 0
             if let id = windowId { w.order(.above, relativeTo: id) } else { w.orderFrontRegardless() }
-            NSAnimationContext.runAnimationGroup { ctx in
-                ctx.duration = duration
-                ctx.timingFunction = CAMediaTimingFunction(name: .easeInEaseOut)
-                w.animator().setFrameOrigin(target)
-            }
+            if duration == 0 { w.setFrameOrigin(target) }
             self.hideTimer?.invalidate()
             self.hideTimer = Timer.scheduledTimer(withTimeInterval: 4, repeats: false) { _ in self.hide() }
         }
-        if duration > 0 { usleep(useconds_t(duration * 1_000_000)) }
+        guard duration > 0 else { return }
+        // Stepped by hand: an animator() frame move left the window where it was.
+        let steps = max(1, Int(duration * 60))
+        for step in 1...steps {
+            let t = Double(step) / Double(steps)
+            let eased = t * t * (3 - 2 * t)
+            let next = NSPoint(x: from.x + (target.x - from.x) * eased, y: from.y + (target.y - from.y) * eased)
+            DispatchQueue.main.sync { self.window?.setFrameOrigin(next) }
+            usleep(useconds_t(duration / Double(steps) * 1_000_000))
+        }
     }
 
     func hide() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vashp2029/glovebox",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Computer use for coding agents on macOS: one JavaScript call per step, accessibility diffs instead of screenshots, input in the background. MCP and CLI.",
   "type": "module",
   "license": "MIT",

package/src/config.mjs

@@ -4,7 +4,7 @@ import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 
-export const VERSION = "0.3.0";
+export const VERSION = "0.3.1";
 
 export function homeDir() {
   return process.env.GLOVEBOX_HOME || path.join(os.homedir(), ".glovebox");

package/src/macos-helper.mjs

@@ -135,7 +135,7 @@ export async function build({ log = () => {} } = {}) {
 
 // Starts the helper through LaunchServices so it is its own responsible process.
 export async function launch({ requestPermissions = false } = {}) {
-  const args = ["-g", "-j", "-a", appPath()];
+  const args = ["-g", "-a", appPath()]; // Not -j: a hidden app cannot show the agent cursor.
   for (const name of ["GLOVEBOX_HOME", "GLOVEBOX_APPROVAL", "GLOVEBOX_SOCKET"]) {
     if (process.env[name]) args.push("--env", `${name}=${process.env[name]}`);
   }