fix: replace sidecar with npx agentlytics spawn, add --no-open flag and xattr note

Author: f

README.md

@@ -56,6 +56,11 @@ Download the native desktop app (no Node.js required):
 
 Built with [Tauri](https://tauri.app) — lightweight, fast, runs entirely on your machine.
 
+> **macOS:** If the app won't open, clear the quarantine flag first:
+> ```bash
+> xattr -cr /Applications/Agentlytics.app
+> ```
+
 ```
 $ npx agentlytics
 

docs/index.html

@@ -472,7 +472,11 @@ <h3 class="text-white font-semibold text-sm mb-1">Linux</h3>
         </a>
       </div>
 
-      <p class="text-center mt-8 text-xs text-gray-500">Or install via CLI: <code class="text-indigo-400/80">npx agentlytics</code> &mdash; no download needed.</p>
+      <div class="mt-8 max-w-lg mx-auto rounded-lg border border-amber-500/20 bg-amber-500/5 p-4 text-center">
+        <p class="text-xs text-amber-400/90 mb-2"><strong>macOS users:</strong> If the app won't open, run this first:</p>
+        <code class="font-mono text-xs text-white">xattr -cr /Applications/Agentlytics.app</code>
+      </div>
+      <p class="text-center mt-4 text-xs text-gray-500">Or install via CLI: <code class="text-indigo-400/80">npx agentlytics</code> &mdash; no download needed.</p>
     </div>
   </section>
 

index.js

@@ -10,6 +10,7 @@ const HOME = os.homedir();
 const PORT = process.env.PORT || 4637;
 const noCache = process.argv.includes('--no-cache');
 const collectOnly = process.argv.includes('--collect');
+const noOpen = process.argv.includes('--no-open');
 
 // ── ASCII banner ─────────────────────────────────────────
 const c1 = chalk.hex('#818cf8'), c2 = chalk.hex('#f472b6'), c3 = chalk.hex('#34d399'), c4 = chalk.hex('#fbbf24');
@@ -174,8 +175,10 @@ const BOT_STYLES = [
     console.log('');
     console.log(chalk.dim('  Press Ctrl+C to stop\n'));
 
-    // Auto-open browser
-    const open = require('open');
-    open(url).catch(() => {});
+    // Auto-open browser (skip when launched by Tauri)
+    if (!noOpen) {
+      const open = require('open');
+      open(url).catch(() => {});
+    }
   });
 })();

src-tauri/capabilities/default.json

@@ -11,8 +11,8 @@
       "allow": [
         {
           "args": true,
-          "name": "binaries/node-backend",
-          "sidecar": true
+          "cmd": "npx",
+          "name": "npx"
         }
       ]
     }

src-tauri/src/lib.rs

@@ -7,17 +7,17 @@ pub fn run() {
         .plugin(tauri_plugin_shell::init())
         .plugin(tauri_plugin_opener::init())
         .setup(|app| {
-            // Spawn the Node.js backend as a sidecar
-            let sidecar_command = app
+            // Spawn `npx agentlytics` in the background
+            let command = app
                 .shell()
-                .sidecar("node-backend")
-                .expect("failed to create sidecar command");
+                .command("npx")
+                .args(["agentlytics", "--no-open"]);
 
-            let (mut rx, _child) = sidecar_command
+            let (mut rx, _child) = command
                 .spawn()
-                .expect("Failed to spawn node backend sidecar");
+                .expect("Failed to spawn npx agentlytics");
 
-            // Log sidecar output
+            // Log output
             tauri::async_runtime::spawn(async move {
                 while let Some(event) = rx.recv().await {
                     match event {

src-tauri/tauri.conf.json

@@ -36,9 +36,6 @@
       "icons/icon.icns",
       "icons/icon.ico"
     ],
-    "externalBin": [
-      "binaries/node-backend"
-    ],
     "license": "MIT"
   }
 }