@phnx-labs/computer-cli 0.1.8 → 0.1.10

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## 0.1.10
+
+- Over VNC, `click`, `right-click`, `type`, `type-text`, `key`, `scroll` and `drag` return once the screen has stopped changing (250 ms with no changed pixel, at most 1.5 s), instead of as soon as the events are written. Text typed right after a click no longer lands before the field has focus, and the next screenshot shows the result without a `sleep`.
+- `drag --host vnc://…` works. It was refused with `vnc backend has no method 'drag'`; it now presses at `--from`, moves in 12 steps and releases at `--to`.
+- `--char-delay` applies over VNC too; it was ignored there.
+- `key --keys` takes several chords in order separated by commas (`--keys "Right,1,5,Tab"`), on every backend and from `computer run`; the screenshot is taken after the last one. A comma that is the key itself still works: `--keys ","`, `--keys "cmd+,"`. An empty `--keys` is an error. Before, only the VNC backend split on commas, so `cmd+,` was broken there.
+- `scroll --dy/--dx` over VNC is a pixel delta, as on the other backends: about 50 px per wheel notch. It was one notch per unit, so `--dy -600` scrolled 600 notches and agents could not find a working value.
+- The "coordinate mode moves your real cursor" note is no longer printed for a remote target (`--host`, `--device`), where it is not your cursor.
+
+## 0.1.9
+
+- Removing a `Computer(<bundle-id>)` grant now applies to the next local `computer` invocation, as it already did under `agents computer`. Before, a direct call kept listing and driving the app until `computer reload`. Adding a grant still needs `computer reload`, a running `computer mcp` keeps the groups it read at startup, and remote TCP/VNC helpers keep their own policy. An inherited allowlist, including an empty one, still replaces the groups.
+
 ## 0.1.8
 
 - Add `scripts/generate-cli-docs.sh` with `--check` and `--out-dir`, downloadable command references in PR/release-branch CI, and a freshness check that also covers releases with tests/build skipped.

package/README.md

@@ -61,7 +61,7 @@ computer key --host vnc://host:5900 --keys enter
 ```
 
 VNC provides screenshot and coordinate input (`click --x --y`, `type-text`,
-`key`). Accessibility verbs (`describe`, `get-text`, `click --id`, `type --id`)
+`key`, `scroll`, `drag`); each input returns once the screen has settled. Accessibility verbs (`describe`, `get-text`, `click --id`, `type --id`)
 require a native driver and are not available over VNC.
 
 `computer run` drives an app from a natural-language task using an embedded model
@@ -268,13 +268,16 @@ Release with the repository's own script:
 
 ```sh
 bash scripts/release.sh                 # print the release plan (dry run)
-secrets exec npmjs.com -- bash scripts/release.sh --confirm
+bash scripts/release.sh --confirm       # push release/<version> and watch it publish
 ```
 
-Release requires a clean linked worktree at the reviewed `origin/main` commit. It
-builds every platform, verifies packed file lists and immutable package
-integrity, publishes the launcher and per-platform packages, and checks a
-registry install. Live desktop verification remains part of delivery.
+`--confirm` runs from a clean linked worktree at the reviewed `origin/main` commit and
+pushes `release/<version>`. The `release` workflow on that branch builds every platform,
+runs the tests, verifies packed file lists and immutable package integrity, publishes the
+per-platform packages and then the launcher, and tags `v<version>`. npm trusts that
+workflow in the `npm-publish` environment through trusted publishing, so no npm token is
+stored anywhere. The script then checks a registry install. Live desktop verification
+remains part of delivery.
 
 Minification, obfuscation and bytecode compilation raise the bar for casual
 inspection; they are not a guarantee against reverse engineering. Keep

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@phnx-labs/computer-cli",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "description": "Native desktop automation over Accessibility, UI Automation and VNC",
   "type": "module",
   "bin": {
@@ -25,11 +25,11 @@
     "test": "bash scripts/test.sh"
   },
   "optionalDependencies": {
-    "@phnx-labs/computer-cli-darwin-arm64": "0.1.8",
-    "@phnx-labs/computer-cli-darwin-x64": "0.1.8",
-    "@phnx-labs/computer-cli-linux-arm64": "0.1.8",
-    "@phnx-labs/computer-cli-linux-x64": "0.1.8",
-    "@phnx-labs/computer-cli-win32-x64": "0.1.8"
+    "@phnx-labs/computer-cli-darwin-arm64": "0.1.10",
+    "@phnx-labs/computer-cli-darwin-x64": "0.1.10",
+    "@phnx-labs/computer-cli-linux-arm64": "0.1.10",
+    "@phnx-labs/computer-cli-linux-x64": "0.1.10",
+    "@phnx-labs/computer-cli-win32-x64": "0.1.10"
   },
   "devDependencies": {
     "@modelcontextprotocol/sdk": "1.30.0",