local-commander-agent 0.3.45 → 0.3.46

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Change history
 
+## 0.3.46 - 2026-10-22
+
+- Simpler setup on macOS and Linux: the approval page opens in your browser by itself, and on a Mac access is one click in a window (Full Access, or Choose Folder). Linux asks one question in the terminal: press Enter for Full Access or type a folder.
+- Fixed: on macOS, updates keep access to the agent's key in the Keychain.
+- Includes everything in 0.3.45.
+
 ## 0.3.45 - 2026-10-22
 
 - New: macOS 14 or later on Apple Silicon, and Linux x64 or arm64 with a systemd user session. Run the same `npx local-commander-agent@latest` in Terminal; npm downloads only the runtime for your computer. Setup pairs the computer, asks what may be used in the terminal, and runs the agent as a background service that starts when you sign in.

package/README.md

@@ -19,7 +19,7 @@ Use **Windows 11 x64**, **macOS 14 or later on Apple Silicon**, or **Linux with
    ```
 
 2. The installer opens a browser. Sign in to [Local Commander](https://localcmd.app), check the displayed pairing code, and approve this computer. Approve only a pairing you just started yourself.
-3. Choose access in the local dialog (a window on Windows, a terminal prompt on macOS and Linux):
+3. Choose access in the local window (on Windows and macOS; Linux asks one question in the terminal):
    - **Full access - all connected drives (default):** approve the available drive letters, file reads/writes, installed commands and localhost services at once. There is no folder picker or separate approval for Node.
    - **Selected folders:** choose one folder in the folder picker. It starts read/write; more folders and write permission can be added later.
 

package/bin/posix.mjs

@@ -1,66 +1,66 @@
-// macOS and Linux: the runtime ships in a per-platform package (an optional dependency, so npm installs only the
-// matching one). Its lifecycle accepts only a private, owner-only artifact directory, so the files are copied from the
-// npx cache into a fresh private directory and the lifecycle installs from there into its own versions directory.
-import { constants } from "node:fs";
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { spawnSync } from "node:child_process";
-import { createRequire } from "node:module";
-
-const PACKAGES = { "darwin-arm64": "local-commander-agent-darwin-arm64", "linux-x64": "local-commander-agent-linux-x64", "linux-arm64": "local-commander-agent-linux-arm64" };
-// npm command -> lifecycle command. The default (`npx local-commander-agent@latest`) is setup, as on Windows.
-const COMMANDS = { bootstrap: "setup", install: "setup", setup: "setup", update: "update", pair: "pair", access: "access", "configure-access": "access",
-  start: "start", stop: "stop", status: "status", rollback: "rollback", uninstall: "uninstall" };
-const EXECUTABLES = new Set(["node", "posix-host", "owner-store"]);
-
-function fail(code) { const error = new Error(code); error.code = code; throw error; }
-
-export function posixHelp() {
-  return [
-    "Local Commander",
-    "",
-    "  npx local-commander-agent@latest            set up this computer, pair it and choose access",
-    "  npx local-commander-agent@latest update     install this version, keeping pairing and access",
-    "  npx local-commander-agent@latest status|start|stop|pair|access|rollback",
-    "  npx local-commander-agent@latest uninstall [--purge-state]",
-    ""
-  ].join("\n");
-}
-
-export async function runPosix(argv, version) {
-  const name = PACKAGES[process.platform + "-" + process.arch];
-  if (!name) fail(process.platform === "darwin" ? "MACOS_APPLE_SILICON_REQUIRED" : process.platform === "linux" ? "LINUX_X64_OR_ARM64_REQUIRED" : "PLATFORM_UNSUPPORTED");
-  const command = argv[0] || "bootstrap", args = argv.slice(1);
-  if (command === "-h" || command === "--help" || command === "help") { process.stdout.write(posixHelp()); return; }
-  const lifecycle = COMMANDS[command];
-  if (!lifecycle) fail("ARGUMENT_INVALID");
-  if (lifecycle === "uninstall" ? args.length > 1 || (args.length === 1 && args[0] !== "--purge-state") : args.length) fail("ARGUMENT_INVALID");
-  if (typeof process.getuid === "function" && process.getuid() === 0) fail("POSIX_OWNER_REQUIRED");
-
-  let packageJson;
-  try { packageJson = createRequire(import.meta.url).resolve(name + "/package.json"); } catch { fail("PLATFORM_PACKAGE_MISSING"); }
-  const meta = JSON.parse(await fs.readFile(packageJson, "utf8"));
-  if (meta.name !== name || meta.version !== version) fail("PLATFORM_PACKAGE_MISMATCH");
-  const source = path.join(path.dirname(packageJson), "runtime");
-  const manifest = JSON.parse(await fs.readFile(path.join(source, "manifest.json"), "utf8"));
-  const files = Object.keys(manifest?.files ?? {});
-  if (manifest?.platform !== process.platform || manifest?.arch !== process.arch || !files.length || files.some(file => !/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u.test(file))) fail("PLATFORM_PACKAGE_INVALID");
-
-  // Canonical parent: on macOS os.tmpdir() is under /var, a symlink to /private/var, and the lifecycle rejects aliases.
-  const stage = await fs.mkdtemp(path.join(await fs.realpath(os.tmpdir()), "local-commander-"));
-  try {
-    await fs.chmod(stage, 0o700);
-    for (const file of [...files, "manifest.json"]) {
-      const target = path.join(stage, file);
-      await fs.copyFile(path.join(source, file), target, constants.COPYFILE_EXCL);
-      await fs.chmod(target, EXECUTABLES.has(file) ? 0o700 : 0o600);
-    }
-    // The lifecycle verifies every file against the manifest, then copies them into its own versions directory.
-    const result = spawnSync(path.join(stage, "node"), [path.join(stage, "lifecycle.mjs"), lifecycle, ...args], { stdio: "inherit" });
-    if (result.error) throw result.error;
-    process.exitCode = result.status ?? 1;
-  } finally {
-    await fs.rm(stage, { recursive: true, force: true });
-  }
-}
+// macOS and Linux: the runtime ships in a per-platform package (an optional dependency, so npm installs only the
+// matching one). Its lifecycle accepts only a private, owner-only artifact directory, so the files are copied from the
+// npx cache into a fresh private directory and the lifecycle installs from there into its own versions directory.
+import { constants } from "node:fs";
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { spawnSync } from "node:child_process";
+import { createRequire } from "node:module";
+
+const PACKAGES = { "darwin-arm64": "local-commander-agent-darwin-arm64", "linux-x64": "local-commander-agent-linux-x64", "linux-arm64": "local-commander-agent-linux-arm64" };
+// npm command -> lifecycle command. The default (`npx local-commander-agent@latest`) is setup, as on Windows.
+const COMMANDS = { bootstrap: "setup", install: "setup", setup: "setup", update: "update", pair: "pair", access: "access", "configure-access": "access",
+  start: "start", stop: "stop", status: "status", rollback: "rollback", uninstall: "uninstall" };
+const EXECUTABLES = new Set(["node", "posix-host", "owner-store"]);
+
+function fail(code) { const error = new Error(code); error.code = code; throw error; }
+
+export function posixHelp() {
+  return [
+    "Local Commander",
+    "",
+    "  npx local-commander-agent@latest            set up this computer, pair it and choose access",
+    "  npx local-commander-agent@latest update     install this version, keeping pairing and access",
+    "  npx local-commander-agent@latest status|start|stop|pair|access|rollback",
+    "  npx local-commander-agent@latest uninstall [--purge-state]",
+    ""
+  ].join("\n");
+}
+
+export async function runPosix(argv, version) {
+  const name = PACKAGES[process.platform + "-" + process.arch];
+  if (!name) fail(process.platform === "darwin" ? "MACOS_APPLE_SILICON_REQUIRED" : process.platform === "linux" ? "LINUX_X64_OR_ARM64_REQUIRED" : "PLATFORM_UNSUPPORTED");
+  const command = argv[0] || "bootstrap", args = argv.slice(1);
+  if (command === "-h" || command === "--help" || command === "help") { process.stdout.write(posixHelp()); return; }
+  const lifecycle = COMMANDS[command];
+  if (!lifecycle) fail("ARGUMENT_INVALID");
+  if (lifecycle === "uninstall" ? args.length > 1 || (args.length === 1 && args[0] !== "--purge-state") : args.length) fail("ARGUMENT_INVALID");
+  if (typeof process.getuid === "function" && process.getuid() === 0) fail("POSIX_OWNER_REQUIRED");
+
+  let packageJson;
+  try { packageJson = createRequire(import.meta.url).resolve(name + "/package.json"); } catch { fail("PLATFORM_PACKAGE_MISSING"); }
+  const meta = JSON.parse(await fs.readFile(packageJson, "utf8"));
+  if (meta.name !== name || meta.version !== version) fail("PLATFORM_PACKAGE_MISMATCH");
+  const source = path.join(path.dirname(packageJson), "runtime");
+  const manifest = JSON.parse(await fs.readFile(path.join(source, "manifest.json"), "utf8"));
+  const files = Object.keys(manifest?.files ?? {});
+  if (manifest?.platform !== process.platform || manifest?.arch !== process.arch || !files.length || files.some(file => !/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u.test(file))) fail("PLATFORM_PACKAGE_INVALID");
+
+  // Canonical parent: on macOS os.tmpdir() is under /var, a symlink to /private/var, and the lifecycle rejects aliases.
+  const stage = await fs.mkdtemp(path.join(await fs.realpath(os.tmpdir()), "local-commander-"));
+  try {
+    await fs.chmod(stage, 0o700);
+    for (const file of [...files, "manifest.json"]) {
+      const target = path.join(stage, file);
+      await fs.copyFile(path.join(source, file), target, constants.COPYFILE_EXCL);
+      await fs.chmod(target, EXECUTABLES.has(file) ? 0o700 : 0o600);
+    }
+    // The lifecycle verifies every file against the manifest, then copies them into its own versions directory.
+    const result = spawnSync(path.join(stage, "node"), [path.join(stage, "lifecycle.mjs"), lifecycle, ...args], { stdio: "inherit" });
+    if (result.error) throw result.error;
+    process.exitCode = result.status ?? 1;
+  } finally {
+    await fs.rm(stage, { recursive: true, force: true });
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "local-commander-agent",
-  "version": "0.3.45",
+  "version": "0.3.46",
   "description": "Computer companion for Local Commander: connect AI clients to local files, approved commands and localhost. Requires https://localcmd.app.",
   "type": "module",
   "bin": {
@@ -16,9 +16,9 @@
     "arm64"
   ],
   "optionalDependencies": {
-    "local-commander-agent-darwin-arm64": "0.3.45",
-    "local-commander-agent-linux-arm64": "0.3.45",
-    "local-commander-agent-linux-x64": "0.3.45"
+    "local-commander-agent-darwin-arm64": "0.3.46",
+    "local-commander-agent-linux-arm64": "0.3.46",
+    "local-commander-agent-linux-x64": "0.3.46"
   },
   "engines": {
     "node": ">=20.0.0"