pi-web-ui 0.6.2 → 0.8.0

package/dist/server/terminals.js

@@ -192,6 +192,28 @@ function brokenSpawnHelper() {
     }
     return "";
 }
+// ---------------------------------------------------------------------------
+// macOS TCC camera/mic warning (launchd-spawned servers)
+// ---------------------------------------------------------------------------
+// TCC attributes camera/mic access to the process chain's "responsible
+// process". When pi-web-ui runs as a launchd LaunchAgent (node ← launchd),
+// the responsible process is node itself — a bare CLI binary with no app
+// bundle / Info.plist / NSCameraUsageDescription — so TCC silently denies
+// camera access (no prompt, nothing to tick in System Settings) and
+// ffmpeg-style grabbers hang on frame capture. The identical command works
+// from a terminal app that already holds the camera grant. Detect the
+// "no GUI ancestor" case (ppid === 1 on macOS) and warn in the terminal.
+const TCC_HINT = [
+    "\x1b[33m[提示] 本终端由后台服务（launchd）启动，macOS 隐私权限（相机/麦克风/屏幕录制等）对此类进程不可用。\x1b[0m",
+    "\x1b[90m  · 需要隐私权限的命令会被系统静默拒绝：不弹授权窗，系统设置里也无法勾选，表现多为卡死或无输出。",
+    "  · 这类任务请在你自己已授权的前台终端里运行。",
+    "  · 本终端内可运行不需要隐私权限的命令（如文件处理、网络请求、远程设备流）。",
+    "  · 若改在前台终端里运行 pi-web-ui，本提示即不再出现。\x1b[0m",
+].join("\r\n") + "\r\n";
+/** True when this server was spawned by launchd (or orphaned) on macOS — no GUI app in the ancestry, so camera/mic TCC grants are unavailable. */
+function launchdSpawnedOnMac() {
+    return process.platform === "darwin" && process.ppid === 1;
+}
 /**
  * Owns one or more PTYs for a client. All output is forwarded as
  * `terminal_output` messages through the provided emit (broadcast to every
@@ -202,6 +224,7 @@ export class TerminalManager {
     emit;
     terms = new Map();
     seq = 0;
+    tccHintShown = false;
     constructor(emit) {
         this.emit = emit;
     }
@@ -209,7 +232,16 @@ export class TerminalManager {
     create(id, cwd, cols, rows, fallbackCwd) {
         if (this.terms.has(id))
             return;
-        this.spawnShell(id, cwd || fallbackCwd, cols, rows, `终端 ${++this.seq}`);
+        if (this.spawnShell(id, cwd || fallbackCwd, cols, rows, `终端 ${++this.seq}`)) {
+            this.maybeEmitTccHint(id);
+        }
+    }
+    /** Warn about unavailable camera/mic TCC grants in a fresh terminal, once per client. */
+    maybeEmitTccHint(id) {
+        if (this.tccHintShown || !launchdSpawnedOnMac())
+            return;
+        this.tccHintShown = true;
+        this.writeOut(id, TCC_HINT);
     }
     /**
      * Start a shell in the command's directory and run the command in it.
@@ -247,6 +279,7 @@ export class TerminalManager {
         // (the PTY input buffer holds it until the shell is ready).
         this.writeOut(id, "\x1b[2J\x1b[3J\x1b[H");
         this.writeOut(id, `\x1b[90m> ${command}\x1b[0m  \x1b[90m(${dir})\x1b[0m\r\n`);
+        this.maybeEmitTccHint(id);
         if (command)
             this.input(id, command + "\r");
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-web-ui",
-  "version": "0.6.2",
+  "version": "0.8.0",
   "description": "Web chat interface for the pi coding agent, powered by the pi SDK (@earendil-works/pi-coding-agent) — one-command run, Docker/systemd/launchd deployable",
   "license": "MIT",
   "type": "module",