local-commander-agent 0.3.52 → 0.3.53

package/bin/network-package.mjs

@@ -1,38 +1,38 @@
-import fs from "node:fs/promises";
-import path from "node:path";
-import { createHash } from "node:crypto";
-
-const HASH=/^[a-f0-9]{64}$/;
-/** Signed bundles may be set up during install; an unsigned pilot only by an explicit owner command. */
-export function implicitSetupAllowed(manifest){return manifest?.signed===true;}
-const FILES=["JobHost.exe","libcronet.dll","sing-box.exe","wintun.dll","sing-box.LICENSE","wintun.LICENSE"];
-async function plainDirectory(directory) {
-  const stat=await fs.lstat(directory);
-  if(!stat.isDirectory()||stat.isSymbolicLink()||(await fs.realpath(directory)).toLowerCase()!==path.resolve(directory).toLowerCase())throw Error("NETWORK_BUNDLE_DIRECTORY_INVALID");
-}
-async function bytes(file,max) {
-  const stat=await fs.lstat(file);
-  if(!stat.isFile()||stat.isSymbolicLink()||stat.size<1||stat.size>max)throw Error("NETWORK_BUNDLE_FILE_INVALID");
-  return fs.readFile(file);
-}
-export async function inspectNetworkBundle(directory) {
-  try {await plainDirectory(directory);}catch(error){if(error.code==="ENOENT")return null;throw error;}
-  const manifest=JSON.parse((await bytes(path.join(directory,"manifest.json"),8192)).toString("utf8"));
-  if(manifest.schemaVersion!==1||manifest.configured!==true||!(manifest.signed===true||manifest.signing==="unsigned-pilot")||!HASH.test(manifest.bundleId)||!HASH.test(manifest.helperSha256)||
-    !manifest.files||typeof manifest.files!=="object"||Array.isArray(manifest.files)||Object.keys(manifest.files).sort().join()!==[...FILES].sort().join())throw Error("NETWORK_BUNDLE_NOT_DEPLOYABLE");
-  const names=[...FILES,"NetworkService.exe","manifest.json"];
-  if((await fs.readdir(directory)).sort().join()!==names.sort().join())throw Error("NETWORK_BUNDLE_ALLOWLIST_FAILED");
-  for(const name of [...FILES,"NetworkService.exe"]){const expected=name==="NetworkService.exe"?manifest.helperSha256:manifest.files[name];
-    if(!HASH.test(expected)||createHash("sha256").update(await bytes(path.join(directory,name),128*1024*1024)).digest("hex")!==expected)throw Error("NETWORK_BUNDLE_DIGEST_MISMATCH");}
-  return {bundleId:manifest.bundleId,files:names,manifest};
-}
-export async function copyNetworkBundle(source,destination) {
-  const bundle=await inspectNetworkBundle(source);if(!bundle)return false;
-  if(path.resolve(source).toLowerCase()===path.resolve(destination).toLowerCase())return true;
-  const exists=await fs.lstat(destination).catch(e=>{if(e.code!=="ENOENT")throw e;return null;});
-  if(exists){const previous=await inspectNetworkBundle(destination);if(previous?.bundleId===bundle.bundleId&&previous.manifest.helperSha256===bundle.manifest.helperSha256)return true;throw Error("NETWORK_BUNDLE_DESTINATION_CONFLICT");}
-  await fs.mkdir(destination,{recursive:false,mode:0o700});
-  try{for(const name of bundle.files)await fs.copyFile(path.join(source,name),path.join(destination,name),fs.constants.COPYFILE_EXCL);await inspectNetworkBundle(destination);}
-  catch(error){for(const name of bundle.files)await fs.rm(path.join(destination,name),{force:true}).catch(()=>{});await fs.rmdir(destination).catch(()=>{});throw error;}
-  return true;
-}
+import fs from "node:fs/promises";
+import path from "node:path";
+import { createHash } from "node:crypto";
+
+const HASH=/^[a-f0-9]{64}$/;
+/** Signed bundles may be set up during install; an unsigned pilot only by an explicit owner command. */
+export function implicitSetupAllowed(manifest){return manifest?.signed===true;}
+const FILES=["JobHost.exe","libcronet.dll","sing-box.exe","wintun.dll","sing-box.LICENSE","wintun.LICENSE"];
+async function plainDirectory(directory) {
+  const stat=await fs.lstat(directory);
+  if(!stat.isDirectory()||stat.isSymbolicLink()||(await fs.realpath(directory)).toLowerCase()!==path.resolve(directory).toLowerCase())throw Error("NETWORK_BUNDLE_DIRECTORY_INVALID");
+}
+async function bytes(file,max) {
+  const stat=await fs.lstat(file);
+  if(!stat.isFile()||stat.isSymbolicLink()||stat.size<1||stat.size>max)throw Error("NETWORK_BUNDLE_FILE_INVALID");
+  return fs.readFile(file);
+}
+export async function inspectNetworkBundle(directory) {
+  try {await plainDirectory(directory);}catch(error){if(error.code==="ENOENT")return null;throw error;}
+  const manifest=JSON.parse((await bytes(path.join(directory,"manifest.json"),8192)).toString("utf8"));
+  if(manifest.schemaVersion!==1||manifest.configured!==true||!(manifest.signed===true||manifest.signing==="unsigned-pilot")||!HASH.test(manifest.bundleId)||!HASH.test(manifest.helperSha256)||
+    !manifest.files||typeof manifest.files!=="object"||Array.isArray(manifest.files)||Object.keys(manifest.files).sort().join()!==[...FILES].sort().join())throw Error("NETWORK_BUNDLE_NOT_DEPLOYABLE");
+  const names=[...FILES,"NetworkService.exe","manifest.json"];
+  if((await fs.readdir(directory)).sort().join()!==names.sort().join())throw Error("NETWORK_BUNDLE_ALLOWLIST_FAILED");
+  for(const name of [...FILES,"NetworkService.exe"]){const expected=name==="NetworkService.exe"?manifest.helperSha256:manifest.files[name];
+    if(!HASH.test(expected)||createHash("sha256").update(await bytes(path.join(directory,name),128*1024*1024)).digest("hex")!==expected)throw Error("NETWORK_BUNDLE_DIGEST_MISMATCH");}
+  return {bundleId:manifest.bundleId,files:names,manifest};
+}
+export async function copyNetworkBundle(source,destination) {
+  const bundle=await inspectNetworkBundle(source);if(!bundle)return false;
+  if(path.resolve(source).toLowerCase()===path.resolve(destination).toLowerCase())return true;
+  const exists=await fs.lstat(destination).catch(e=>{if(e.code!=="ENOENT")throw e;return null;});
+  if(exists){const previous=await inspectNetworkBundle(destination);if(previous?.bundleId===bundle.bundleId&&previous.manifest.helperSha256===bundle.manifest.helperSha256)return true;throw Error("NETWORK_BUNDLE_DESTINATION_CONFLICT");}
+  await fs.mkdir(destination,{recursive:false,mode:0o700});
+  try{for(const name of bundle.files)await fs.copyFile(path.join(source,name),path.join(destination,name),fs.constants.COPYFILE_EXCL);await inspectNetworkBundle(destination);}
+  catch(error){for(const name of bundle.files)await fs.rm(path.join(destination,name),{force:true}).catch(()=>{});await fs.rmdir(destination).catch(()=>{});throw error;}
+  return true;
+}

package/bin/posix.mjs

@@ -1,84 +1,84 @@
-// macOS and Linux: the runtime ships in a per-platform package (an optional dependency, so npm installs only the
-// matching one). Its lifecycle accepts only a private, owner-only artifact directory, so the files are copied from the
-// npx cache into a fresh private directory and the lifecycle installs from there into its own versions directory.
-import { constants } from "node:fs";
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { spawnSync } from "node:child_process";
-import { createRequire } from "node:module";
-
-const PACKAGES = { "darwin-arm64": "local-commander-agent-darwin-arm64", "linux-x64": "local-commander-agent-linux-x64", "linux-arm64": "local-commander-agent-linux-arm64" };
-// npm command -> lifecycle command. The default (`npx local-commander-agent@latest`) is setup, as on Windows.
-const COMMANDS = { bootstrap: "setup", install: "setup", setup: "setup", update: "update", pair: "pair", access: "access", "configure-access": "access",
-  start: "start", stop: "stop", status: "status", rollback: "rollback", uninstall: "uninstall" };
-const EXECUTABLES = new Set(["node", "posix-host", "owner-store"]);
-
-function fail(code) { const error = new Error(code); error.code = code; throw error; }
-
-export function posixHelp() {
-  return [
-    "Local Commander",
-    "",
-    "  npx local-commander-agent@latest            set up this computer, pair it and choose access",
-    "  npx local-commander-agent@latest update     install this version, keeping pairing and access",
-    "  npx local-commander-agent@latest status|start|stop|pair|access|rollback",
-    "  npx local-commander-agent@latest uninstall [--purge-state]",
-    ""
-  ].join("\n");
-}
-
-// Owner opt-out for take_screenshot under Full Access (#486): a marker in the installed service agent's state folder
-// (the service runs without XDG_DATA_HOME). No runtime staging is needed; the agent checks it on each capture.
-async function screenshotCommand(args) {
-  const action = args[0] || "status";
-  if (args.length > 1 || !["status", "on", "off"].includes(action)) fail("ARGUMENT_INVALID");
-  if (typeof process.getuid === "function" && process.getuid() === 0) fail("POSIX_OWNER_REQUIRED");
-  const state = path.join(os.homedir(), process.platform === "darwin" ? "Library/Application Support" : ".local/share", "LocalCommander", "Agent");
-  const folder = await fs.lstat(state).catch(() => null);
-  if (!folder?.isDirectory() || folder.uid !== process.getuid()) fail("AGENT_NOT_INSTALLED");
-  const file = path.join(state, "screenshot-disabled-by-owner");
-  if (action === "off") await fs.open(file, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600)
-    .then(handle => handle.close(), error => { if (error?.code !== "EEXIST") throw error; });
-  if (action === "on") await fs.rm(file, { force: true });
-  const off = await fs.lstat(file).then(() => true, error => error?.code !== "ENOENT");
-  process.stdout.write(JSON.stringify({ screenshot: off ? "off" : "on" }) + "\n");
-}
-
-export async function runPosix(argv, version) {
-  const name = PACKAGES[process.platform + "-" + process.arch];
-  if (!name) fail(process.platform === "darwin" ? "MACOS_APPLE_SILICON_REQUIRED" : process.platform === "linux" ? "LINUX_X64_OR_ARM64_REQUIRED" : "PLATFORM_UNSUPPORTED");
-  const command = argv[0] || "bootstrap", args = argv.slice(1);
-  if (command === "-h" || command === "--help" || command === "help") { process.stdout.write(posixHelp()); return; }
-  if (command === "screenshot") { await screenshotCommand(args); return; }
-  const lifecycle = COMMANDS[command];
-  if (!lifecycle) fail("ARGUMENT_INVALID");
-  if (lifecycle === "uninstall" ? args.length > 1 || (args.length === 1 && args[0] !== "--purge-state") : args.length) fail("ARGUMENT_INVALID");
-  if (typeof process.getuid === "function" && process.getuid() === 0) fail("POSIX_OWNER_REQUIRED");
-
-  let packageJson;
-  try { packageJson = createRequire(import.meta.url).resolve(name + "/package.json"); } catch { fail("PLATFORM_PACKAGE_MISSING"); }
-  const meta = JSON.parse(await fs.readFile(packageJson, "utf8"));
-  if (meta.name !== name || meta.version !== version) fail("PLATFORM_PACKAGE_MISMATCH");
-  const source = path.join(path.dirname(packageJson), "runtime");
-  const manifest = JSON.parse(await fs.readFile(path.join(source, "manifest.json"), "utf8"));
-  const files = Object.keys(manifest?.files ?? {});
-  if (manifest?.platform !== process.platform || manifest?.arch !== process.arch || !files.length || files.some(file => !/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u.test(file))) fail("PLATFORM_PACKAGE_INVALID");
-
-  // Canonical parent: on macOS os.tmpdir() is under /var, a symlink to /private/var, and the lifecycle rejects aliases.
-  const stage = await fs.mkdtemp(path.join(await fs.realpath(os.tmpdir()), "local-commander-"));
-  try {
-    await fs.chmod(stage, 0o700);
-    for (const file of [...files, "manifest.json"]) {
-      const target = path.join(stage, file);
-      await fs.copyFile(path.join(source, file), target, constants.COPYFILE_EXCL);
-      await fs.chmod(target, EXECUTABLES.has(file) ? 0o700 : 0o600);
-    }
-    // The lifecycle verifies every file against the manifest, then copies them into its own versions directory.
-    const result = spawnSync(path.join(stage, "node"), [path.join(stage, "lifecycle.mjs"), lifecycle, ...args], { stdio: "inherit" });
-    if (result.error) throw result.error;
-    process.exitCode = result.status ?? 1;
-  } finally {
-    await fs.rm(stage, { recursive: true, force: true });
-  }
-}
+// macOS and Linux: the runtime ships in a per-platform package (an optional dependency, so npm installs only the
+// matching one). Its lifecycle accepts only a private, owner-only artifact directory, so the files are copied from the
+// npx cache into a fresh private directory and the lifecycle installs from there into its own versions directory.
+import { constants } from "node:fs";
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { spawnSync } from "node:child_process";
+import { createRequire } from "node:module";
+
+const PACKAGES = { "darwin-arm64": "local-commander-agent-darwin-arm64", "linux-x64": "local-commander-agent-linux-x64", "linux-arm64": "local-commander-agent-linux-arm64" };
+// npm command -> lifecycle command. The default (`npx local-commander-agent@latest`) is setup, as on Windows.
+const COMMANDS = { bootstrap: "setup", install: "setup", setup: "setup", update: "update", pair: "pair", access: "access", "configure-access": "access",
+  start: "start", stop: "stop", status: "status", rollback: "rollback", uninstall: "uninstall" };
+const EXECUTABLES = new Set(["node", "posix-host", "owner-store"]);
+
+function fail(code) { const error = new Error(code); error.code = code; throw error; }
+
+export function posixHelp() {
+  return [
+    "Local Commander",
+    "",
+    "  npx local-commander-agent@latest            set up this computer, pair it and choose access",
+    "  npx local-commander-agent@latest update     install this version, keeping pairing and access",
+    "  npx local-commander-agent@latest status|start|stop|pair|access|rollback",
+    "  npx local-commander-agent@latest uninstall [--purge-state]",
+    ""
+  ].join("\n");
+}
+
+// Owner opt-out for take_screenshot under Full Access (#486): a marker in the installed service agent's state folder
+// (the service runs without XDG_DATA_HOME). No runtime staging is needed; the agent checks it on each capture.
+async function screenshotCommand(args) {
+  const action = args[0] || "status";
+  if (args.length > 1 || !["status", "on", "off"].includes(action)) fail("ARGUMENT_INVALID");
+  if (typeof process.getuid === "function" && process.getuid() === 0) fail("POSIX_OWNER_REQUIRED");
+  const state = path.join(os.homedir(), process.platform === "darwin" ? "Library/Application Support" : ".local/share", "LocalCommander", "Agent");
+  const folder = await fs.lstat(state).catch(() => null);
+  if (!folder?.isDirectory() || folder.uid !== process.getuid()) fail("AGENT_NOT_INSTALLED");
+  const file = path.join(state, "screenshot-disabled-by-owner");
+  if (action === "off") await fs.open(file, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600)
+    .then(handle => handle.close(), error => { if (error?.code !== "EEXIST") throw error; });
+  if (action === "on") await fs.rm(file, { force: true });
+  const off = await fs.lstat(file).then(() => true, error => error?.code !== "ENOENT");
+  process.stdout.write(JSON.stringify({ screenshot: off ? "off" : "on" }) + "\n");
+}
+
+export async function runPosix(argv, version) {
+  const name = PACKAGES[process.platform + "-" + process.arch];
+  if (!name) fail(process.platform === "darwin" ? "MACOS_APPLE_SILICON_REQUIRED" : process.platform === "linux" ? "LINUX_X64_OR_ARM64_REQUIRED" : "PLATFORM_UNSUPPORTED");
+  const command = argv[0] || "bootstrap", args = argv.slice(1);
+  if (command === "-h" || command === "--help" || command === "help") { process.stdout.write(posixHelp()); return; }
+  if (command === "screenshot") { await screenshotCommand(args); return; }
+  const lifecycle = COMMANDS[command];
+  if (!lifecycle) fail("ARGUMENT_INVALID");
+  if (lifecycle === "uninstall" ? args.length > 1 || (args.length === 1 && args[0] !== "--purge-state") : args.length) fail("ARGUMENT_INVALID");
+  if (typeof process.getuid === "function" && process.getuid() === 0) fail("POSIX_OWNER_REQUIRED");
+
+  let packageJson;
+  try { packageJson = createRequire(import.meta.url).resolve(name + "/package.json"); } catch { fail("PLATFORM_PACKAGE_MISSING"); }
+  const meta = JSON.parse(await fs.readFile(packageJson, "utf8"));
+  if (meta.name !== name || meta.version !== version) fail("PLATFORM_PACKAGE_MISMATCH");
+  const source = path.join(path.dirname(packageJson), "runtime");
+  const manifest = JSON.parse(await fs.readFile(path.join(source, "manifest.json"), "utf8"));
+  const files = Object.keys(manifest?.files ?? {});
+  if (manifest?.platform !== process.platform || manifest?.arch !== process.arch || !files.length || files.some(file => !/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u.test(file))) fail("PLATFORM_PACKAGE_INVALID");
+
+  // Canonical parent: on macOS os.tmpdir() is under /var, a symlink to /private/var, and the lifecycle rejects aliases.
+  const stage = await fs.mkdtemp(path.join(await fs.realpath(os.tmpdir()), "local-commander-"));
+  try {
+    await fs.chmod(stage, 0o700);
+    for (const file of [...files, "manifest.json"]) {
+      const target = path.join(stage, file);
+      await fs.copyFile(path.join(source, file), target, constants.COPYFILE_EXCL);
+      await fs.chmod(target, EXECUTABLES.has(file) ? 0o700 : 0o600);
+    }
+    // The lifecycle verifies every file against the manifest, then copies them into its own versions directory.
+    const result = spawnSync(path.join(stage, "node"), [path.join(stage, "lifecycle.mjs"), lifecycle, ...args], { stdio: "inherit" });
+    if (result.error) throw result.error;
+    process.exitCode = result.status ?? 1;
+  } finally {
+    await fs.rm(stage, { recursive: true, force: true });
+  }
+}

package/package.json

@@ -1,57 +1,57 @@
-{
-  "name": "local-commander-agent",
-  "version": "0.3.52",
-  "description": "Computer companion for Local Commander: connect AI clients to local files, approved commands and localhost. Requires https://localcmd.app.",
-  "type": "module",
-  "bin": {
-    "localcommander": "bin/localcommander.mjs"
-  },
-  "os": [
-    "win32",
-    "darwin",
-    "linux"
-  ],
-  "cpu": [
-    "x64",
-    "arm64"
-  ],
-  "optionalDependencies": {
-    "local-commander-agent-darwin-arm64": "0.3.52",
-    "local-commander-agent-linux-arm64": "0.3.52",
-    "local-commander-agent-linux-x64": "0.3.52"
-  },
-  "engines": {
-    "node": ">=20.0.0"
-  },
-  "files": [
-    "bin/",
-    "runtime/",
-    "README.md",
-    "CHANGELOG.md"
-  ],
-  "scripts": {
-    "prepack": "node ../../scripts/build-npm-agent.mjs",
-    "prepublishOnly": "node ../../scripts/check-npm-publish-auth.mjs && node ../../scripts/verify-npm-agent.mjs"
-  },
-  "publishConfig": {
-    "access": "public"
-  },
-  "keywords": [
-    "mcp",
-    "local",
-    "agent",
-    "chatgpt",
-    "claude",
-    "windows",
-    "macos",
-    "linux"
-  ],
-  "localCommander": {
-    "controlPlaneOrigin": "https://localcmd.app"
-  },
-  "homepage": "https://localcmd.app",
-  "bugs": {
-    "url": "https://localcmd.app/support",
-    "email": "peter.mamrukov@localcmd.app"
-  }
-}
+{
+  "name": "local-commander-agent",
+  "version": "0.3.53",
+  "description": "Computer companion for Local Commander: connect AI clients to local files, approved commands and localhost. Requires https://localcmd.app.",
+  "type": "module",
+  "bin": {
+    "localcommander": "bin/localcommander.mjs"
+  },
+  "os": [
+    "win32",
+    "darwin",
+    "linux"
+  ],
+  "cpu": [
+    "x64",
+    "arm64"
+  ],
+  "optionalDependencies": {
+    "local-commander-agent-darwin-arm64": "0.3.53",
+    "local-commander-agent-linux-arm64": "0.3.53",
+    "local-commander-agent-linux-x64": "0.3.53"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "files": [
+    "bin/",
+    "runtime/",
+    "README.md",
+    "CHANGELOG.md"
+  ],
+  "scripts": {
+    "prepack": "node ../../scripts/build-npm-agent.mjs",
+    "prepublishOnly": "node ../../scripts/check-npm-publish-auth.mjs && node ../../scripts/verify-npm-agent.mjs"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "mcp",
+    "local",
+    "agent",
+    "chatgpt",
+    "claude",
+    "windows",
+    "macos",
+    "linux"
+  ],
+  "localCommander": {
+    "controlPlaneOrigin": "https://localcmd.app"
+  },
+  "homepage": "https://localcmd.app",
+  "bugs": {
+    "url": "https://localcmd.app/support",
+    "email": "peter.mamrukov@localcmd.app"
+  }
+}