@assemblyline-agents/computer-use 2.0.0 → 3.0.0

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 OpenEve contributors
+Copyright (c) 2026 Assembly Line contributors
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -22,28 +22,32 @@ relay routes opaque envelopes and cannot read tool arguments or results.
 assembly-line add computer-use agent
 ```
 
-The generated connection starts read-only:
+The generated connection enables reviewed tools without requiring an approval
+surface:
 
 ```ts
 import { defineComputerUseConnection } from "@assemblyline-agents/computer-use";
 
 export default defineComputerUseConnection({
-  access: { read: true, write: false }
+  // Reviewed tools are enabled by default.
 });
 ```
 
-Enable mutations cautiously:
+Require approval for desktop mutations when the host provides an approval
+surface:
 
 ```ts
-access: {
-  read: true,
-  write: { approval: "always" }
-}
+export default defineComputerUseConnection({ access: "approval-required" });
 ```
 
-Use `approval: "never"` only when both the remote agent and the local macOS
-account are appropriate for unattended control. Local Computer Host policy can
-still require approval or deny individual applications and actions.
+Use a read-only policy to hide mutations:
+
+```ts
+export default defineComputerUseConnection({ access: "read-only" });
+```
+
+Local Computer Host policy can still require approval or deny individual
+applications and actions independently of the connection policy.
 
 The binding carries a raw P-256 agent private scalar and the Mac's uncompressed
 X9.63 P-256 public key, encoded inside an opaque base64url JSON value. It must

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@assemblyline-agents/computer-use",
-  "version": "2.0.0",
+  "version": "3.0.0",
   "type": "module",
   "exports": {
     ".": {
@@ -9,12 +9,11 @@
     }
   },
   "dependencies": {
-    "@assemblyline-agents/core": "2.0.0"
+    "@assemblyline-agents/core": "3.0.0"
   },
   "description": "Official Assembly Line remote macOS computer-use connection plugin.",
   "files": [
-    "dist",
-    "skills"
+    "dist"
   ],
   "engines": {
     "node": ">=22.19.0"

package/skills/computer-use/SKILL.md

@@ -1,36 +0,0 @@
----
-name: computer-use
-description: Inspect and control a developer-paired remote Mac through the encrypted Assembly Line Computer Host connection.
----
-# Assembly Line remote computer use
-
-This connection controls a specific paired Mac through Assembly Line Computer Host.
-The agent may be hosted remotely; the Mac host must be online, unlocked, and
-permitted by its local policy. A device-offline, locked, expired, revoked, or
-approval-denied response is a terminal result for that action. Do not work
-around it by requesting shell, clipboard, screenshot, or other excluded tools.
-
-Inspect before acting. Use `inspect_ui` to obtain an accessibility UI map and
-stable element identifiers. Prefer identifiers, labels, `set_value`, and
-`perform_action` over screen coordinates. Re-inspect after navigation, window
-changes, dialogs, or any action that can invalidate UI state.
-
-Use the narrowest action that completes the task. Confirm the intended app and
-window before typing, clicking, invoking menus, moving windows, switching
-Spaces, or interacting with dialogs. Never place passwords, API keys, pairing
-bindings, recovery codes, or other credentials in tool arguments unless the
-user has explicitly chosen a trusted local credential workflow.
-
-The plugin exposes only accessibility inspection, app/window/menu control, and
-direct input. Screenshot/vision, recording, nested agents, configuration,
-cleanup, shell, clipboard/paste, and browser-specific Peekaboo tools are not
-available in v1.
-
-The scaffold is read-only. Desktop mutations require the developer to set:
-
-```ts
-write: { approval: "always" }
-```
-
-`write: { approval: "never" }` is appropriate only for a trusted autonomous
-agent and a Mac account intentionally provisioned for unattended control.