poke-gate 0.2.0 → 0.2.1

package/clients/Poke macOS Gate/Poke macOS Gate/GateService.swift

@@ -32,9 +32,9 @@ class GateService: ObservableObject {
 
         var subtitle: String {
             switch self {
-            case .full: return "All tools are available, subject to chat approval."
-            case .limited: return "Safe tools and curated command families only."
-            case .sandbox: return "Broader command support, but strictly limited by macOS sandbox-exec policies."
+            case .full: return "All tools enabled. Risky actions require chat approval."
+            case .limited: return "Read-only tools and safe commands (ls, cat, grep, curl…). File writes and screenshots disabled."
+            case .sandbox: return "Commands like brew, node, python, ffmpeg allowed. Writes restricted to ~/Downloads and /tmp."
             }
         }
     }
@@ -108,10 +108,26 @@ class GateService: ObservableObject {
     private var activeTerminalPreviewId: UUID?
     private var permissionPollingTimer: Timer?
 
+    private var appActiveObserver: NSObjectProtocol?
+
     init() {
         self.permissionMode = Self.loadPermissionModeStatic()
         self.hasCompletedSetup = Self.loadHasCompletedSetupStatic()
         refreshSystemPermissions()
+
+        appActiveObserver = NotificationCenter.default.addObserver(
+            forName: NSApplication.didBecomeActiveNotification,
+            object: nil,
+            queue: .main
+        ) { [weak self] _ in
+            self?.refreshSystemPermissions()
+        }
+    }
+
+    deinit {
+        if let observer = appActiveObserver {
+            NotificationCenter.default.removeObserver(observer)
+        }
     }
 
     var hasSystemPermissionsGranted: Bool {
@@ -177,20 +193,24 @@ class GateService: ObservableObject {
         }
 
         let requested = missingSystemPermissions.map { $0.title }.joined(separator: ", ")
-        appendLog("Opening macOS settings for: \(requested).")
+        appendLog("Requesting macOS permissions: \(requested).")
 
         for permission in missingSystemPermissions {
-            guard let url = URL(string: permission.settingsURL) else { continue }
-            NSWorkspace.shared.open(url)
+            openSystemPermission(permission)
         }
-
-        appendLog("Opened Privacy settings for missing permissions.")
     }
 
     func refreshSystemPermissions() {
+        let previous = systemPermissionStatuses
         systemPermissionStatuses = SystemPermission.allCases.map { permission in
             SystemPermissionStatus(permission: permission, isGranted: isPermissionGranted(permission))
         }
+        for status in systemPermissionStatuses {
+            let was = previous.first(where: { $0.permission == status.permission })
+            if was == nil || was?.isGranted != status.isGranted {
+                appendLog("\(status.permission.title): \(status.isGranted ? "granted" : "not granted")")
+            }
+        }
     }
 
     func startPermissionPolling() {
@@ -208,8 +228,11 @@ class GateService: ObservableObject {
     }
 
     func openSystemPermission(_ permission: SystemPermission) {
-        guard let url = URL(string: permission.settingsURL) else { return }
-        NSWorkspace.shared.open(url)
+        switch permission {
+        case .accessibility:
+            let options = [kAXTrustedCheckOptionPrompt.takeUnretainedValue(): true] as CFDictionary
+            _ = AXIsProcessTrustedWithOptions(options)
+        }
     }
 
     func captureAndSend() {
@@ -637,7 +660,19 @@ class GateService: ObservableObject {
     private func isPermissionGranted(_ permission: SystemPermission) -> Bool {
         switch permission {
         case .accessibility:
-            return AXIsProcessTrusted()
+            if AXIsProcessTrusted() { return true }
+            // AXIsProcessTrusted() can return false despite the toggle being ON
+            // in System Settings when the TCC entry's code signature doesn't match
+            // the running binary (ad-hoc signing, rebuild from Xcode, etc.).
+            // Probe the API directly as a fallback.
+            let systemWide = AXUIElementCreateSystemWide()
+            var value: AnyObject?
+            let result = AXUIElementCopyAttributeValue(
+                systemWide,
+                kAXFocusedApplicationAttribute as CFString,
+                &value
+            )
+            return result == .success || result == .noValue || result == .attributeUnsupported
         }
     }
 

package/clients/Poke macOS Gate/Poke macOS Gate/Poke_macOS_GateApp.swift

@@ -176,11 +176,7 @@ struct PopoverContent: View {
         VStack(alignment: .leading, spacing: 6) {
             sectionTitle("Recent activity")
 
-            if service.terminalPreviews.isEmpty {
-                Text("No activity yet")
-                    .font(.caption)
-                    .foregroundStyle(.secondary)
-            } else {
+            if !service.terminalPreviews.isEmpty {
                 ForEach(Array(service.terminalPreviews.suffix(4).enumerated()), id: \.element.id) { _, entry in
                     HStack(spacing: 6) {
                         Circle()
@@ -193,6 +189,18 @@ struct PopoverContent: View {
                             .truncationMode(.tail)
                     }
                 }
+            } else if !service.logs.isEmpty {
+                ForEach(Array(service.logs.suffix(4).enumerated()), id: \.offset) { _, log in
+                    Text(log)
+                        .font(.system(size: 9, design: .monospaced))
+                        .foregroundStyle(.tertiary)
+                        .lineLimit(1)
+                        .truncationMode(.tail)
+                }
+            } else {
+                Text("No activity yet")
+                    .font(.caption)
+                    .foregroundStyle(.secondary)
             }
         }
         .frame(maxWidth: .infinity, alignment: .leading)
@@ -228,6 +236,11 @@ struct PopoverContent: View {
                 }
             }
 
+            Text(activeModeDescription)
+                .font(.caption2)
+                .foregroundStyle(.secondary)
+                .fixedSize(horizontal: false, vertical: true)
+
             if service.permissionMode == .full || pendingFullMode {
                 AccessibilityPermissionView(service: service)
             }
@@ -237,6 +250,18 @@ struct PopoverContent: View {
         .macPanelStyle(.neutral, cornerRadius: 12)
     }
 
+    private var activeModeDescription: String {
+        let mode = pendingFullMode ? GateService.PermissionMode.full : service.permissionMode
+        switch mode {
+        case .full:
+            return "All tools enabled. Risky actions require chat approval."
+        case .limited:
+            return "Read-only tools and safe commands only (ls, cat, grep, curl…). File writes and screenshots are disabled."
+        case .sandbox:
+            return "Broader commands (brew, node, python, ffmpeg…) but file writes restricted to ~/Downloads and /tmp via macOS sandbox."
+        }
+    }
+
     private var actionsSection: some View {
         HStack(spacing: 12) {
             ActionButton(icon: "text.alignleft", label: "Logs") {

package/clients/Poke macOS Gate/Poke macOS Gate/SettingsView.swift

@@ -44,6 +44,8 @@ struct SettingsView: View {
         }
         .padding(20)
         .frame(width: 430)
+        .onAppear { service.startPermissionPolling() }
+        .onDisappear { service.stopPermissionPolling() }
     }
 
     private var authenticationSection: some View {

package/clients/Poke macOS Gate/Poke macOS Gate.xcodeproj/project.pbxproj

@@ -174,7 +174,7 @@
 				COPY_PHASE_STRIP = NO;
 				DEAD_CODE_STRIPPING = YES;
 				DEBUG_INFORMATION_FORMAT = dwarf;
-				DEVELOPMENT_TEAM = RJA7656U34;
+				DEVELOPMENT_TEAM = "";
 				ENABLE_STRICT_OBJC_MSGSEND = YES;
 				ENABLE_TESTABILITY = YES;
 				ENABLE_USER_SCRIPT_SANDBOXING = YES;
@@ -240,7 +240,7 @@
 				COPY_PHASE_STRIP = NO;
 				DEAD_CODE_STRIPPING = YES;
 				DEBUG_INFORMATION_FORMAT = "dwarf-with-dsym";
-				DEVELOPMENT_TEAM = RJA7656U34;
+				DEVELOPMENT_TEAM = "";
 				ENABLE_NS_ASSERTIONS = NO;
 				ENABLE_STRICT_OBJC_MSGSEND = YES;
 				ENABLE_USER_SCRIPT_SANDBOXING = YES;
@@ -272,7 +272,7 @@
 				COMBINE_HIDPI_IMAGES = YES;
 				CURRENT_PROJECT_VERSION = 1;
 				DEAD_CODE_STRIPPING = YES;
-				DEVELOPMENT_TEAM = RJA7656U34;
+				DEVELOPMENT_TEAM = "";
 				ENABLE_APP_SANDBOX = NO;
 				ENABLE_HARDENED_RUNTIME = NO;
 				ENABLE_PREVIEWS = YES;
@@ -286,7 +286,7 @@
 					"@executable_path/../Frameworks",
 				);
 				MACOSX_DEPLOYMENT_TARGET = 15.0;
-				MARKETING_VERSION = 0.1.8;
+				MARKETING_VERSION = 0.2.0;
 				PRODUCT_BUNDLE_IDENTIFIER = "dev.fka.Poke-macOS-Gate";
 				PRODUCT_NAME = "$(TARGET_NAME)";
 				REGISTER_APP_GROUPS = YES;
@@ -322,7 +322,7 @@
 					"@executable_path/../Frameworks",
 				);
 				MACOSX_DEPLOYMENT_TARGET = 15.0;
-				MARKETING_VERSION = 0.1.9;
+				MARKETING_VERSION = 0.2.0;
 				PRODUCT_BUNDLE_IDENTIFIER = "dev.fka.Poke-macOS-Gate";
 				PRODUCT_NAME = "$(TARGET_NAME)";
 				REGISTER_APP_GROUPS = YES;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "poke-gate",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Expose your machine to your Poke AI assistant via MCP tunnel",
   "type": "module",
   "bin": {

package/src/app.js

@@ -115,14 +115,38 @@ async function main() {
   await connectWithRetry(mcpUrl, token);
 }
 
+function buildAccessModeMessage(mode) {
+  switch (mode) {
+    case "limited":
+      return (
+        "Access mode: Limited. " +
+        "You can read files, list directories, and run safe read-only commands (ls, cat, grep, curl, jq…). " +
+        "You cannot write files, take screenshots, or run other commands."
+      );
+    case "sandbox":
+      return (
+        "Access mode: Sandbox. " +
+        "You can read files, list directories, and run commands like brew, node, python, ffmpeg, curl, and more. " +
+        "File writes are restricted to ~/Downloads and /tmp by macOS sandbox. Screenshots are disabled."
+      );
+    default:
+      return (
+        "Access mode: Full. " +
+        "You can run any shell command, read and write files, list directories, take screenshots, and check system info. " +
+        "Risky actions (commands, file writes, screenshots) require user approval in chat before execution."
+      );
+  }
+}
+
 async function notifyPoke(connectionId, token) {
   try {
+    const mode = getPermissionMode();
     const poke = new Poke({ token });
     await poke.sendMessage(
       `Hey! I've connected my computer to you via Poke Gate (tunnel: ${connectionId}). ` +
-      `You can now run commands, read and write files, list directories, take screenshots, and check system info on my machine. ` +
-      `Just use the tools whenever I ask you to do something on my computer.` +
-      `Now reply me with "now I am connected to your computer" but everytime write those replies in most creativev fun way.`
+      `${buildAccessModeMessage(mode)} ` +
+      `Just use the tools whenever I ask you to do something on my computer. ` +
+      `Now reply me with "now I am connected to your computer" but everytime write those replies in most creative fun way.`
     );
     log("Notified Poke agent about connection.");
   } catch (err) {