poke-gate 0.3.0 → 0.3.2

package/bin/poke-gate.js

@@ -42,6 +42,9 @@ async function main() {
   } else if (args[0] === "download-macos") {
     const { downloadMacOSApp } = await import("../src/download-macos.js");
     await downloadMacOSApp();
+  } else if (args[0] === "take-screenshot") {
+    const { takeScreenshot } = await import("../src/take-screenshot.js");
+    await takeScreenshot();
   } else {
     const mode = parseMode();
     if (mode) {

package/clients/Poke macOS Gate/Poke macOS Gate/AccessibilityPermissionView.swift

@@ -4,7 +4,7 @@ struct AccessibilityPermissionView: View {
     @ObservedObject var service: GateService
 
     var body: some View {
-        let granted = service.hasSystemPermissionsGranted
+        let granted = service.isPermissionGranted(.accessibility)
 
         VStack(alignment: .leading, spacing: 10) {
             HStack(spacing: 8) {

package/clients/Poke macOS Gate/Poke macOS Gate/GateService.swift

@@ -1,6 +1,5 @@
 import Foundation
 import Combine
-import ScreenCaptureKit
 import AppKit
 import CoreGraphics
 import ApplicationServices
@@ -41,30 +40,35 @@ class GateService: ObservableObject {
 
     enum SystemPermission: String, CaseIterable, Identifiable {
         case accessibility
+        case screenRecording
 
         var id: String { rawValue }
 
         var title: String {
             switch self {
             case .accessibility: return "Accessibility"
+            case .screenRecording: return "Screen Recording"
             }
         }
 
         var subtitle: String {
             switch self {
             case .accessibility: return "Needed for keyboard, mouse, and automation-style control."
+            case .screenRecording: return "Needed for the take_screenshot tool."
             }
         }
 
         var settingsURL: String {
             switch self {
             case .accessibility: return "x-apple.systempreferences:com.apple.preference.security?Privacy_Accessibility"
+            case .screenRecording: return "x-apple.systempreferences:com.apple.preference.security?Privacy_ScreenCapture"
             }
         }
 
         var systemImageName: String {
             switch self {
             case .accessibility: return "figure.wave"
+            case .screenRecording: return "camera.viewfinder"
             }
         }
     }
@@ -239,68 +243,12 @@ class GateService: ObservableObject {
         case .accessibility:
             let options = [kAXTrustedCheckOptionPrompt.takeUnretainedValue(): true] as CFDictionary
             _ = AXIsProcessTrustedWithOptions(options)
+        case .screenRecording:
+            guard let url = URL(string: permission.settingsURL) else { return }
+            NSWorkspace.shared.open(url)
         }
     }
 
-    func captureAndSend() {
-        appendLog("Screenshot requested via deeplink.")
-
-        Task {
-            do {
-                let content = try await SCShareableContent.current
-                guard let display = content.displays.first else {
-                    appendLog("No display found for screenshot.")
-                    return
-                }
-
-                let filter = SCContentFilter(display: display, excludingWindows: [])
-                let config = SCStreamConfiguration()
-                config.width = display.width * 2
-                config.height = display.height * 2
-                config.capturesAudio = false
-
-                let image = try await SCScreenshotManager.captureImage(
-                    contentFilter: filter,
-                    configuration: config
-                )
-
-                let rep = NSBitmapImageRep(cgImage: image)
-                guard let pngData = rep.representation(using: .png, properties: [:]) else {
-                    appendLog("Failed to encode screenshot as PNG.")
-                    return
-                }
-
-                let tempPath = NSTemporaryDirectory() + "poke-gate-screenshot.png"
-                let tempURL = URL(fileURLWithPath: tempPath)
-                try pngData.write(to: tempURL)
-                appendLog("Screenshot saved to \(tempPath) (\(pngData.count) bytes)")
-
-                guard let token = loadPokeLoginToken() else {
-                    appendLog("Cannot send screenshot: not signed in to Poke.")
-                    return
-                }
-
-                let url = URL(string: "https://poke.com/api/v1/inbound/api-message")!
-                var request = URLRequest(url: url)
-                request.httpMethod = "POST"
-                request.setValue("Bearer \(token)", forHTTPHeaderField: "Authorization")
-                request.setValue("application/json", forHTTPHeaderField: "Content-Type")
-
-                let message = "Here's a screenshot of my screen right now. [Image attached as base64 PNG, \(pngData.count) bytes, \(display.width)x\(display.height)]"
-                let body: [String: Any] = ["message": message]
-                request.httpBody = try JSONSerialization.data(withJSONObject: body)
-
-                let (_, response) = try await URLSession.shared.data(for: request)
-                if let httpResp = response as? HTTPURLResponse, httpResp.statusCode == 200 {
-                    appendLog("Screenshot sent to Poke.")
-                } else {
-                    appendLog("Failed to send screenshot to Poke.")
-                }
-            } catch {
-                appendLog("Screenshot error: \(error.localizedDescription)")
-            }
-        }
-    }
 
     func autoStartIfNeeded() {
         guard !hasAutoStarted else { return }
@@ -608,7 +556,7 @@ class GateService: ObservableObject {
     private func killOrphanedProcesses() {
         let task = Process()
         task.executableURL = URL(fileURLWithPath: "/usr/bin/pkill")
-        task.arguments = ["-f", "poke-gate"]
+        task.arguments = ["-f", "node.*poke-gate.*app\\.js"]
         try? task.run()
         task.waitUntilExit()
     }
@@ -789,14 +737,10 @@ class GateService: ObservableObject {
         writeConfig(json)
     }
 
-    private func isPermissionGranted(_ permission: SystemPermission) -> Bool {
+    func isPermissionGranted(_ permission: SystemPermission) -> Bool {
         switch permission {
         case .accessibility:
             if AXIsProcessTrusted() { return true }
-            // AXIsProcessTrusted() can return false despite the toggle being ON
-            // in System Settings when the TCC entry's code signature doesn't match
-            // the running binary (ad-hoc signing, rebuild from Xcode, etc.).
-            // Probe the API directly as a fallback.
             let systemWide = AXUIElementCreateSystemWide()
             var value: AnyObject?
             let result = AXUIElementCopyAttributeValue(
@@ -805,6 +749,8 @@ class GateService: ObservableObject {
                 &value
             )
             return result == .success || result == .noValue || result == .attributeUnsupported
+        case .screenRecording:
+            return CGPreflightScreenCaptureAccess()
         }
     }
 

package/clients/Poke macOS Gate/Poke macOS Gate/Info.plist

@@ -6,16 +6,5 @@
 	<string>dev.fka.Poke-macOS-Gate</string>
 	<key>LSUIElement</key>
 	<true/>
-	<key>CFBundleURLTypes</key>
-	<array>
-		<dict>
-			<key>CFBundleURLName</key>
-			<string>dev.fka.Poke-macOS-Gate</string>
-			<key>CFBundleURLSchemes</key>
-			<array>
-				<string>poke-gate</string>
-			</array>
-		</dict>
-	</array>
 </dict>
 </plist>

package/clients/Poke macOS Gate/Poke macOS Gate/Poke_macOS_GateApp.swift

@@ -3,15 +3,6 @@ import ServiceManagement
 
 class AppDelegate: NSObject, NSApplicationDelegate {
     var service: GateService?
-
-    func application(_ application: NSApplication, open urls: [URL]) {
-        for url in urls {
-            guard url.scheme == "poke-gate" else { continue }
-            if url.host == "screenshot" {
-                service?.captureAndSend()
-            }
-        }
-    }
 }
 
 @main
@@ -122,8 +113,8 @@ struct PopoverContent: View {
             }
             .frame(width: 320)
             .padding(10)
-            .onChange(of: service.hasSystemPermissionsGranted) { _, granted in
-                if granted && pendingFullMode {
+            .onChange(of: service.systemPermissionStatuses) { _, _ in
+                if service.isPermissionGranted(.accessibility) && pendingFullMode {
                     pendingFullMode = false
                     service.setPermissionMode(.full)
                 }
@@ -436,7 +427,7 @@ struct PopoverContent: View {
     private func handleModeSelection(_ mode: GateService.PermissionMode) {
         guard mode != service.permissionMode else { return }
 
-        if mode == .full && !service.hasSystemPermissionsGranted {
+        if mode == .full && !service.isPermissionGranted(.accessibility) {
             pendingFullMode = true
             service.openSystemPermission(.accessibility)
         } else {

package/clients/Poke macOS Gate/Poke macOS Gate.xcodeproj/project.pbxproj

@@ -286,7 +286,7 @@
 					"@executable_path/../Frameworks",
 				);
 				MACOSX_DEPLOYMENT_TARGET = 15.0;
-				MARKETING_VERSION = 0.2.2;
+				MARKETING_VERSION = 0.3.1;
 				PRODUCT_BUNDLE_IDENTIFIER = "dev.fka.Poke-macOS-Gate";
 				PRODUCT_NAME = "$(TARGET_NAME)";
 				REGISTER_APP_GROUPS = YES;
@@ -322,7 +322,7 @@
 					"@executable_path/../Frameworks",
 				);
 				MACOSX_DEPLOYMENT_TARGET = 15.0;
-				MARKETING_VERSION = 0.2.2;
+				MARKETING_VERSION = 0.3.1;
 				PRODUCT_BUNDLE_IDENTIFIER = "dev.fka.Poke-macOS-Gate";
 				PRODUCT_NAME = "$(TARGET_NAME)";
 				REGISTER_APP_GROUPS = YES;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "poke-gate",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "Expose your machine to your Poke AI assistant via MCP tunnel",
   "type": "module",
   "bin": {

package/src/app.js

@@ -1,7 +1,8 @@
 import { startMcpServer, enableLogging, getPermissionMode } from "./mcp-server.js";
 import { startTunnel } from "./tunnel.js";
 import { startAgentScheduler, stopAgentScheduler } from "./agents.js";
-import { Poke, isLoggedIn, login, getToken } from "poke";
+import { sendToWebhook } from "./webhook.js";
+import { isLoggedIn, login, getToken } from "poke";
 import { execSync } from "node:child_process";
 
 const verbose = process.argv.includes("--verbose") || process.argv.includes("-v");
@@ -9,9 +10,10 @@ enableLogging(verbose);
 
 function killExistingInstances() {
   const myPid = process.pid;
+  const ppid = process.ppid;
   try {
-    const out = execSync("pgrep -f 'poke-gate'", { encoding: "utf-8" }).trim();
-    const pids = out.split("\n").map(Number).filter((p) => p && p !== myPid);
+    const out = execSync("pgrep -f 'node.*poke-gate.*app\\.js'", { encoding: "utf-8" }).trim();
+    const pids = out.split("\n").map(Number).filter((p) => p && p !== myPid && p !== ppid);
     for (const pid of pids) {
       try { process.kill(pid, "SIGTERM"); } catch {}
     }
@@ -66,7 +68,7 @@ async function connectWithRetry(mcpUrl, token) {
               reconnectWatchdog = null;
               log(`Tunnel connected (${data.connectionId})`);
               log("Ready — your Poke agent can now access this machine.");
-              notifyPoke(data.connectionId, token);
+              notifyPoke(data.connectionId);
               startAgentScheduler();
               break;
             case "disconnected":
@@ -152,11 +154,10 @@ function buildAccessModeMessage(mode) {
   }
 }
 
-async function notifyPoke(connectionId, token) {
+async function notifyPoke(connectionId) {
   try {
     const mode = getPermissionMode();
-    const poke = new Poke({ token });
-    await poke.sendMessage(
+    await sendToWebhook(
       `Hey! I've connected my computer to you via Poke Gate (tunnel: ${connectionId}). ` +
       `${buildAccessModeMessage(mode)} ` +
       `Just use the tools whenever I ask you to do something on my computer. ` +

package/src/mcp-server.js

@@ -779,23 +779,11 @@ function handleToolCall(name, args, context = {}) {
     case "take_screenshot": {
       logTool(name, cleanArgs);
 
-      return runCommand('open -Ra "Poke macOS Gate" 2>/dev/null', homedir()).then((appCheck) => {
-        if (appCheck.exitCode === 0) {
-          return runCommand('open "poke-gate://screenshot"', homedir()).then(() => {
-            return { content: [{ type: "text", text: "Screenshot captured and sent to Poke via the macOS app." }] };
-          });
+      return runCommand("npx -y poke-gate@latest take-screenshot", homedir(), { permissionMode: "full" }).then((result) => {
+        if (result.exitCode === 0) {
+          return { content: [{ type: "text", text: "Screenshot captured and sent to Poke." }] };
         }
-
-        const ts = new Date().toISOString().replace(/[:.]/g, "-");
-        const dest = cleanArgs.path
-          ? resolve(cleanArgs.path.replace(/^~/, homedir()))
-          : join(homedir(), "Desktop", `screenshot-${ts}.png`);
-        return runCommand(`/usr/sbin/screencapture -x "${dest}"`, homedir()).then((result) => {
-          if (result.exitCode === 0) {
-            return { content: [{ type: "text", text: `Screenshot saved to ${dest}` }] };
-          }
-          return { content: [{ type: "text", text: `Screenshot failed: ${result.stderr || "unknown error"}. Grant Screen Recording permission to Terminal or install the Poke macOS Gate app.` }], isError: true };
-        });
+        return { content: [{ type: "text", text: `Screenshot failed: ${result.stderr || result.stdout || "unknown error"}` }], isError: true };
       });
     }
 

package/src/take-screenshot.js

@@ -0,0 +1,42 @@
+import { execSync } from "node:child_process";
+import { readFileSync, unlinkSync } from "node:fs";
+import { join } from "node:path";
+import { tmpdir, platform } from "node:os";
+import { isLoggedIn, login } from "poke";
+import { sendToWebhook } from "./webhook.js";
+
+export async function takeScreenshot() {
+  if (platform() !== "darwin") {
+    console.error("Screenshots are only supported on macOS.");
+    process.exit(1);
+  }
+
+  if (!isLoggedIn()) {
+    console.log("Signing in to Poke...");
+    await login();
+  }
+
+  const dest = join(tmpdir(), `poke-gate-screenshot-${Date.now()}.png`);
+
+  console.log("Capturing screenshot...");
+  try {
+    execSync(`/usr/sbin/screencapture -x "${dest}"`, { stdio: "pipe" });
+  } catch {
+    console.error("Screenshot failed. Grant Screen Recording permission in System Settings > Privacy & Security > Screen Recording.");
+    process.exit(1);
+  }
+
+  const png = readFileSync(dest);
+  const base64 = png.toString("base64");
+
+  console.log(`Screenshot captured (${(png.length / 1024).toFixed(0)} KB). Sending to Poke...`);
+
+  try {
+    await sendToWebhook(
+      `Here is a screenshot of my screen right now. Reply me with the image.\n\n\`\`\`\ndata:image/png;base64,${base64}\n\`\`\``
+    );
+    console.log("Screenshot sent to Poke.");
+  } finally {
+    try { unlinkSync(dest); } catch {}
+  }
+}

package/src/tunnel.js

@@ -1,29 +1,11 @@
 import { PokeTunnel, getToken } from "poke";
-import { readFileSync, writeFileSync, mkdirSync } from "node:fs";
-import { join } from "node:path";
-import { homedir } from "node:os";
-
-const CONFIG_DIR = process.env.XDG_CONFIG_HOME || join(homedir(), ".config");
-const STATE_PATH = join(CONFIG_DIR, "poke-gate", "state.json");
+import { loadState, saveState } from "./webhook.js";
 
 function log(msg) {
   const ts = new Date().toISOString().slice(11, 19);
   console.log(`[${ts}] ${msg}`);
 }
 
-function loadState() {
-  try {
-    return JSON.parse(readFileSync(STATE_PATH, "utf-8"));
-  } catch {
-    return {};
-  }
-}
-
-function saveState(state) {
-  mkdirSync(join(CONFIG_DIR, "poke-gate"), { recursive: true });
-  writeFileSync(STATE_PATH, JSON.stringify(state, null, 2));
-}
-
 async function cleanupStaleConnections() {
   const token = getToken();
   if (!token) return;
@@ -49,7 +31,8 @@ async function cleanupStaleConnections() {
     } catch {}
   }
 
-  saveState({});
+  const { webhookUrl, webhookToken } = loadState();
+  saveState({ webhookUrl, webhookToken });
 }
 
 export async function startTunnel({ mcpUrl, onEvent }) {
@@ -64,7 +47,7 @@ export async function startTunnel({ mcpUrl, onEvent }) {
     url: mcpUrl,
     name: "poke-gate",
     token,
-    cleanupOnStop: false,
+    cleanupOnStop: true,
   });
 
   tunnel.on("connected", (info) => {
@@ -72,6 +55,7 @@ export async function startTunnel({ mcpUrl, onEvent }) {
     const history = state.connectionHistory || [];
     history.push(info.connectionId);
     saveState({
+      ...state,
       connectionId: info.connectionId,
       connectionHistory: history.slice(-10),
     });

package/src/webhook.js

@@ -0,0 +1,43 @@
+import { readFileSync, writeFileSync, mkdirSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+import { Poke, getToken } from "poke";
+
+const CONFIG_DIR = process.env.XDG_CONFIG_HOME || join(homedir(), ".config");
+const STATE_PATH = join(CONFIG_DIR, "poke-gate", "state.json");
+
+export function loadState() {
+  try {
+    return JSON.parse(readFileSync(STATE_PATH, "utf-8"));
+  } catch {
+    return {};
+  }
+}
+
+export function saveState(state) {
+  mkdirSync(join(CONFIG_DIR, "poke-gate"), { recursive: true });
+  writeFileSync(STATE_PATH, JSON.stringify(state, null, 2));
+}
+
+export async function getWebhook() {
+  const state = loadState();
+  if (state.webhookUrl && state.webhookToken) {
+    return { webhookUrl: state.webhookUrl, webhookToken: state.webhookToken };
+  }
+
+  const token = getToken();
+  if (!token) throw new Error("No Poke auth token available.");
+
+  const poke = new Poke({ token });
+  const result = await poke.createWebhook({ condition: "poke-gate", action: "poke-gate" });
+
+  const webhook = { webhookUrl: result.webhookUrl, webhookToken: result.webhookToken };
+  saveState({ ...state, ...webhook });
+  return webhook;
+}
+
+export async function sendToWebhook(message) {
+  const { webhookUrl, webhookToken } = await getWebhook();
+  const poke = new Poke({ token: getToken() });
+  return poke.sendWebhook({ webhookUrl, webhookToken, data: { message } });
+}