The v0.1 GUI's Connect button was broken in practice: the Tauri app launched
from /Applications runs as the desktop user, so `Command::new(aura).spawn()`
started aura without root. aura died in ms with EPERM at TUN creation, faster
than the 1.5 s status poller could catch — the UI just silently flipped back
to "disconnected" with no clue.
## Fix
* `cli_proc::spawn_client` now prepends `sudo -n` on Unix. After spawn it
blocks for 1.5 s and checks `try_wait`; if the child already exited, it
reads the stderr ring's last 20 lines and returns an anyhow Error with
that tail + a hint list of common causes. The Tauri command surfaces it
to the frontend's `error` state where the UI renders it as a multi-line
`<pre>` block instead of the previous single-line text.
* `ClientHandle::kill` no longer uses `Child::kill` (SIGKILL) on its sudo
parent — that would have left aura orphaned with the TUN lingering.
Sends SIGTERM to sudo, which sudo forwards to aura, giving the inner
`OsRouteGuard::Drop` 2 s to run cleanup. Falls back to SIGKILL only after
the grace period.
## One-click NOPASSWD installer
Two new Tauri commands plus a UI banner:
* `check_admin_access` — runs `sudo -n aura --help` and returns whether the
sudoers entry is in place. Used by the React side to decide whether to
show the banner.
* `install_sudoers_admin` — runs `osascript ... with administrator
privileges` which surfaces the native macOS auth dialog, then writes
`/etc/sudoers.d/aura-gui` scoped to `<aura> client *` only (not arbitrary
aura invocations), runs `visudo -c` for syntax validation, and reports
success or the syntax error.
The frontend shows a yellow "One-time setup needed" banner above the
profile list whenever `adminReady === false`. Clicking the button pops the
Mac password dialog once; from then on Connect is a single click with no
prompt.
## UI feedback
* "Connecting…" disabled state on the Connect button while spawn_client's
1.5 s wait is in progress
* Errors render as monospace `<pre>` so the multi-line stderr tail is
readable
* `.error` and `.admin-banner` CSS classes added to App.css
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
xah30
1635190797