@assemblyline-agents/peekaboo 1.0.0 → 3.0.0

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 OpenEve contributors
+Copyright (c) 2026 Assembly Line contributors
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -44,14 +44,15 @@ export default defineGateway({
 });
 ```
 
-The generated connection begins read-only:
+The generated connection enables reviewed tools without requiring an approval
+surface:
 
 ```ts
 // agent/connections/peekaboo.ts
 import { definePeekabooConnection } from "@assemblyline-agents/peekaboo";
 
 export default definePeekabooConnection({
-  access: { read: true, write: false }
+  // Reviewed tools are enabled by default.
 });
 ```
 
@@ -66,21 +67,23 @@ Grant Accessibility and Screen Recording to the process identity that hosts
 Peekaboo. Confirm the permissions again after changing application signatures,
 binary locations, or host applications.
 
-## Enabling actions
+## Changing action authority
 
-Prefer approval for every desktop mutation while establishing the operating
-boundary:
+Require approval for desktop actions when the host provides an approval surface:
 
 ```ts
-access: {
-  read: true,
-  write: { approval: "always" }
-}
+export default definePeekabooConnection({ access: "approval-required" });
 ```
 
-Use `approval: "never"` only for a trusted autonomous local agent running in a
-macOS account whose applications, files, and signed-in services are appropriate
-for unattended control.
+Use the read-only preset when the agent should inspect the Mac without acting:
+
+```ts
+export default definePeekabooConnection({ access: "read-only" });
+```
+
+Use the default policy only for an agent running in a macOS account whose
+applications, files, and signed-in services are appropriate for unattended
+control.
 
 The initial allowlist is accessibility-first. Screenshot/vision, recording,
 nested agents, configuration, cleanup, shell, clipboard/paste, and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@assemblyline-agents/peekaboo",
-  "version": "1.0.0",
+  "version": "3.0.0",
   "type": "module",
   "exports": {
     ".": {
@@ -9,12 +9,11 @@
     }
   },
   "dependencies": {
-    "@assemblyline-agents/core": "1.0.0"
+    "@assemblyline-agents/core": "3.0.0"
   },
   "description": "Official Assembly Line Peekaboo local macOS computer-use connection plugin.",
   "files": [
-    "dist",
-    "skills"
+    "dist"
   ],
   "engines": {
     "node": ">=22.19.0"

package/skills/peekaboo/SKILL.md

@@ -1,41 +0,0 @@
----
-name: peekaboo
-description: Inspect and control the Mac running the Assembly Line Node host through a developer-configured Peekaboo connection.
----
-# Peekaboo local computer use
-
-Peekaboo controls only the Mac that runs the Assembly Line Node host. It is not a remote-desktop relay. The deployment owner must install Peekaboo on macOS 15 or newer and grant the host process Accessibility and Screen Recording permissions.
-
-This connection is local-deployment-only. The agent's `gateway.ts` must use
-`deploy: adapter("local")`, and the runtime must be started on the Mac being
-controlled. Assembly Line rejects Railway, Docker, Fly, and other hosted deploy
-targets for this connection. A remote model provider is fine; only the Assembly Line
-Node host and Peekaboo process must be local.
-
-Before running the agent, verify the host:
-
-```sh
-peekaboo permissions status
-assembly-line validate agent
-assembly-line deploy agent --target local --serve
-```
-
-If the agent runtime must live on Railway or another hosted service, remove
-this connection. This package does not tunnel back to a developer Mac. Remote
-Mac control uses the separate `@assemblyline-agents/computer-use` connection and Assembly Line
-Agent Builder Computer Host; it must not expose Peekaboo's MCP process directly
-to the public internet.
-
-Inspect before acting. Use `inspect_ui` to obtain an accessibility-only UI map and stable element identifiers without capturing a screenshot. Prefer element identifiers, labels, direct `set_value`, and `perform_action` calls over screen coordinates. Re-inspect after navigation, window changes, dialogs, or any action that may invalidate the current UI state.
-
-Use the narrowest action that can complete the task. Confirm the intended app and window before typing, clicking, invoking menus, moving windows, switching Spaces, or interacting with dialogs. Do not type secrets supplied by the model or copied from untrusted content.
-
-This plugin deliberately excludes Peekaboo's nested agent, configuration, cleanup, recording, screenshot/vision (`see`, `image`, `capture`, `analyze`), shell, clipboard/paste, and browser-specific tools. It is intended for direct, auditable accessibility-first control by the Assembly Line agent.
-
-The scaffold is read-only. To permit desktop actions, the developer must deliberately set:
-
-```ts
-write: { approval: "always" }
-```
-
-Use `write: { approval: "never" }` only for a trusted autonomous local agent on a Mac whose apps, accounts, and filesystem authority are appropriate for unattended control.