fonino 0.1.0 → 0.1.1

package/dist/cli/bin/fonino.mjs

@@ -7845,6 +7845,23 @@ function coveredByTask(g, risk, spec) {
   if (amount === void 0) return true;
   return g.cap !== void 0 && amount <= g.cap;
 }
+function forAssistants(r) {
+  if (!Array.isArray(r.content) || !r.content.some((c) => c.type === "image")) return r;
+  const content = [...r.content.filter((c) => c.type !== "image"), ...r.content.filter((c) => c.type === "image")];
+  const out = { ...r, content };
+  if (!("structuredContent" in r)) {
+    for (const c of content) {
+      if (c.type !== "text") continue;
+      try {
+        const v = JSON.parse(c.text.split("\nDo NOT")[0]);
+        if (v && typeof v === "object" && !Array.isArray(v)) out.structuredContent = v;
+      } catch {
+      }
+      break;
+    }
+  }
+  return out;
+}
 async function modelImage(pngPath) {
   const out = pathJoin(tmpdir7(), `fonino-${process.pid}-${randomUUID5().slice(0, 8)}.jpg`);
   try {
@@ -8725,7 +8742,7 @@ ${describeSpec(spec)}
               ms: Date.now() - t0,
               heldMs: heldSince && !result.isError ? Date.now() - Date.parse(heldSince) : void 0
             });
-            return result;
+            return forAssistants(result);
           };
           const c = { ...config, ...extra ?? {} };
           c._meta = { ...c._meta ?? {}, securitySchemes: SECURITY };
@@ -10479,7 +10496,7 @@ var init_serve = __esm({
 init_src2();
 init_src4();
 init_src();
-import { spawn as spawn5 } from "node:child_process";
+import { execFileSync as execFileSync3, spawn as spawn5 } from "node:child_process";
 import { copyFileSync as copyFileSync2, existsSync as existsSync20, mkdirSync as mkdirSync19, readdirSync as readdirSync6, readFileSync as readFileSync23, writeFileSync as writeFileSync20 } from "node:fs";
 import { homedir as homedir22 } from "node:os";
 import { randomBytes as randomBytes8 } from "node:crypto";
@@ -10893,13 +10910,24 @@ async function main() {
         const connected = (await listMuxDevices2()).filter((d) => d.connectionType === "USB").map((d) => d.udid);
         const stampFile = join28(process.env.AGENTPHONE_HOME ?? join28(homedir22(), ".agentphone"), "resign.json");
         const stamps = existsSync20(stampFile) ? JSON.parse(readFileSync23(stampFile, "utf8")) : {};
-        const udids = flags["if-stale"] ? connected.filter((u) => !stamps[u] || Date.now() - Date.parse(stamps[u]) > 3 * 864e5) : connected;
+        const profile = helperProfile(process.env.AGENTPHONE_WDA_BUILD ?? join28(fileURLToPath8(new URL("../../..", import.meta.url)), "vendor/wda-build"));
+        const stale = (u) => {
+          if (!stamps[u]) return true;
+          if (profile) return profile.expires - Date.now() < 3 * 864e5 || Date.parse(stamps[u]) < profile.created;
+          return Date.now() - Date.parse(stamps[u]) > 3 * 864e5;
+        };
+        const udids = flags["if-stale"] ? connected.filter(stale) : connected;
         if (!udids.length) return ok(connected.length ? "all connected iPhones were renewed recently" : "no iPhone connected");
         const repo = fileURLToPath8(new URL("../../..", import.meta.url));
         const code = await new Promise(
           (r) => spawn5("/bin/sh", [join28(repo, "scripts/wda.sh"), "setup", ...udids], {
             stdio: "inherit",
-            env: { ...process.env, AGENTPHONE_TEAM_ID: cfg.team, AGENTPHONE_BUNDLE: cfg.bundle ?? `com.fonino.${cfg.team.toLowerCase()}.helper` }
+            env: {
+              ...process.env,
+              AGENTPHONE_TEAM_ID: cfg.team,
+              AGENTPHONE_BUNDLE: cfg.bundle ?? `com.fonino.${cfg.team.toLowerCase()}.helper`,
+              ...cfg.ascKey ? { AGENTPHONE_ASC_KEY: cfg.ascKey.path, AGENTPHONE_ASC_KEY_ID: cfg.ascKey.id, AGENTPHONE_ASC_ISSUER: cfg.ascKey.issuer } : {}
+            }
           }).on("exit", (c) => r(c ?? 1))
         );
         if (code !== 0) throw new DeviceError("resign_failed", "Couldn't renew the helper's signature", "Open Xcode \u2192 Settings \u2192 Accounts and check your Apple ID is still signed in.");
@@ -11360,6 +11388,19 @@ async function agentCommand() {
   }
   rl.close();
 }
+function helperProfile(buildDir) {
+  try {
+    const products = join28(buildDir, "Build/Products/Debug-iphoneos");
+    const app = readdirSync6(products).find((f) => f.endsWith("-Runner.app"));
+    if (!app) return void 0;
+    const plist2 = execFileSync3("/usr/bin/security", ["cms", "-D", "-i", join28(products, app, "embedded.mobileprovision")], { stdio: ["ignore", "pipe", "ignore"] }).toString();
+    const date = (key) => Date.parse(plist2.match(new RegExp(`<key>${key}</key>\\s*<date>([^<]+)</date>`))?.[1] ?? "");
+    const created = date("CreationDate"), expires = date("ExpirationDate");
+    return Number.isFinite(created) && Number.isFinite(expires) ? { created, expires } : void 0;
+  } catch {
+    return void 0;
+  }
+}
 function listRuns(limit) {
   const dir = defaultRunsDir();
   const runs = existsSync20(dir) ? readdirSync6(dir).filter((f) => existsSync20(resolve(dir, f, "goal.json"))).sort().reverse().slice(0, limit) : [];

package/docs/setup.md

@@ -34,6 +34,11 @@ locked with Face ID ask for your Mac password, which AgentPhone will not enter.
 Signing: a free Apple ID ("Personal Team") works for testing but allows **3 devices** and its
 signing **expires after 7 days** (rerun step 4). A paid Apple Developer account ($99/yr) allows
 100 iPhones per membership year and 1‑year certificates, and can be shared by several Macs.
+With a paid account, add an App Store Connect API key (Users and Access → Integrations, role
+Developer or higher) to `~/.agentphone/setup.json` as
+`"ascKey": {"path": "/path/AuthKey_XXXX.p8", "id": "XXXX", "issuer": "<issuer id>"}`: the helper is
+then signed for a year without an Xcode sign-in, and `fonino wda resign --if-stale` only renews it
+near the end of that year instead of every few days.
 
 1. Install Xcode, open it once (install iOS components), accept the license, then
    `sudo xcode-select -s /Applications/Xcode.app/Contents/Developer` and sign in under

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fonino",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Let your AI agent use your real iPhone or Android phone, with your OK before anything is sent.",
   "license": "MIT",
   "homepage": "https://fonino.app",

package/scripts/wda.sh

@@ -36,6 +36,10 @@ case "${1:-}" in
     DESTS=""
     for u in "$@"; do DESTS="$DESTS -destination id=$u"; done
     [ -n "$DESTS" ] || DESTS="-destination generic/platform=iOS"
+    # With a paid team's App Store Connect API key, Xcode needs no signed-in account and the profile
+    # lasts a year; without one it uses Xcode's account (free Apple IDs: 7 days).
+    AUTH=""
+    [ -n "${AGENTPHONE_ASC_KEY:-}" ] && AUTH="-authenticationKeyPath $AGENTPHONE_ASC_KEY -authenticationKeyID $AGENTPHONE_ASC_KEY_ID -authenticationKeyIssuerID $AGENTPHONE_ASC_ISSUER"
     # shellcheck disable=SC2086
     xcodebuild build-for-testing \
       -project "$WDA_DIR/WebDriverAgent.xcodeproj" \
@@ -44,6 +48,7 @@ case "${1:-}" in
       -derivedDataPath "$DERIVED" \
       -allowProvisioningUpdates \
       -allowProvisioningDeviceRegistration \
+      $AUTH \
       DEVELOPMENT_TEAM="$AGENTPHONE_TEAM_ID" \
       PRODUCT_BUNDLE_IDENTIFIER="$BUNDLE" \
       CODE_SIGN_STYLE=Automatic