local-commander-agent 0.3.45 → 0.3.47

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Change history
 
+## 0.3.47 - 2026-10-22
+
+- New: screenshots on Linux. Where the screenshot tool is available to your account and the computer has Full Access, it now also works on a Linux desktop (Wayland through the desktop portal or grim, X11 through xwd, import or maim). When capture is not possible the client gets a clear reason, such as no desktop session or no capture tool.
+- New: you can turn screenshots off for this computer. Run `localcommander screenshot off` on Windows, or `npx local-commander-agent screenshot off` on macOS and Linux; `screenshot on` turns them back on and `screenshot status` shows the current setting. No restart is needed.
+- The cabinet now shows whether each computer has Full Access or selected folders only.
+- Includes everything in 0.3.46.
+
+## 0.3.46 - 2026-10-22
+
+- Simpler setup on macOS and Linux: the approval page opens in your browser by itself, and on a Mac access is one click in a window (Full Access, or Choose Folder). Linux asks one question in the terminal: press Enter for Full Access or type a folder.
+- Fixed: on macOS, updates keep access to the agent's key in the Keychain.
+- Includes everything in 0.3.45.
+
 ## 0.3.45 - 2026-10-22
 
 - New: macOS 14 or later on Apple Silicon, and Linux x64 or arm64 with a systemd user session. Run the same `npx local-commander-agent@latest` in Terminal; npm downloads only the runtime for your computer. Setup pairs the computer, asks what may be used in the terminal, and runs the agent as a background service that starts when you sign in.

package/README.md

@@ -19,7 +19,7 @@ Use **Windows 11 x64**, **macOS 14 or later on Apple Silicon**, or **Linux with
    ```
 
 2. The installer opens a browser. Sign in to [Local Commander](https://localcmd.app), check the displayed pairing code, and approve this computer. Approve only a pairing you just started yourself.
-3. Choose access in the local dialog (a window on Windows, a terminal prompt on macOS and Linux):
+3. Choose access in the local window (on Windows and macOS; Linux asks one question in the terminal):
    - **Full access - all connected drives (default):** approve the available drive letters, file reads/writes, installed commands and localhost services at once. There is no folder picker or separate approval for Node.
    - **Selected folders:** choose one folder in the folder picker. It starts read/write; more folders and write permission can be added later.
 

package/bin/localcommander.mjs

@@ -316,6 +316,19 @@ async function auditCommand(runtimeDir, sub) {
   }
   fail("ARGUMENT_INVALID");
 }
+// Owner opt-out for take_screenshot under Full Access (#486), on by default. Only this owner-run command changes it (the agent
+// state folder is protected from every file tool); the agent checks it on each capture, so no restart is needed.
+const SCREENSHOT_OFF_FILE = "screenshot-disabled-by-owner";
+async function screenshotCommand(args) {
+  const action = args[0] || "status";
+  if (args.length > 1 || !["status", "on", "off"].includes(action)) fail("ARGUMENT_INVALID");
+  if (!(await readCurrent())) fail("AGENT_NOT_INSTALLED");
+  const file = path.join(stateDirectory(), SCREENSHOT_OFF_FILE);
+  if (action === "off") await fs.writeFile(file, "", { flag: "wx" }).catch(error => { if (error?.code !== "EEXIST") throw error; });
+  if (action === "on") await fs.rm(file, { force: true });
+  const off = await fs.lstat(file).then(() => true, error => error?.code !== "ENOENT");
+  process.stdout.write(JSON.stringify({ screenshot: off ? "off" : "on" }) + "\n");
+}
 // Public AI-provider domains routed through the tunnel; everything else stays direct. Mirror of
 // packages/connectivity/src/profiles.ts (stable public suffixes).
 const PROXY_PROVIDERS = {
@@ -793,6 +806,10 @@ async function main() {
     if (action === "setup") await restartIfRunning();
     return;
   }
+  if (command === "screenshot") {
+    await screenshotCommand(args);
+    return;
+  }
   if (command === "audit") {
     const current = await readCurrent(); if (!current) fail("AGENT_NOT_INSTALLED");
     await auditCommand(current.runtimeDir, args);

package/bin/posix.mjs

@@ -1,66 +1,84 @@
-// macOS and Linux: the runtime ships in a per-platform package (an optional dependency, so npm installs only the
-// matching one). Its lifecycle accepts only a private, owner-only artifact directory, so the files are copied from the
-// npx cache into a fresh private directory and the lifecycle installs from there into its own versions directory.
-import { constants } from "node:fs";
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { spawnSync } from "node:child_process";
-import { createRequire } from "node:module";
-
-const PACKAGES = { "darwin-arm64": "local-commander-agent-darwin-arm64", "linux-x64": "local-commander-agent-linux-x64", "linux-arm64": "local-commander-agent-linux-arm64" };
-// npm command -> lifecycle command. The default (`npx local-commander-agent@latest`) is setup, as on Windows.
-const COMMANDS = { bootstrap: "setup", install: "setup", setup: "setup", update: "update", pair: "pair", access: "access", "configure-access": "access",
-  start: "start", stop: "stop", status: "status", rollback: "rollback", uninstall: "uninstall" };
-const EXECUTABLES = new Set(["node", "posix-host", "owner-store"]);
-
-function fail(code) { const error = new Error(code); error.code = code; throw error; }
-
-export function posixHelp() {
-  return [
-    "Local Commander",
-    "",
-    "  npx local-commander-agent@latest            set up this computer, pair it and choose access",
-    "  npx local-commander-agent@latest update     install this version, keeping pairing and access",
-    "  npx local-commander-agent@latest status|start|stop|pair|access|rollback",
-    "  npx local-commander-agent@latest uninstall [--purge-state]",
-    ""
-  ].join("\n");
-}
-
-export async function runPosix(argv, version) {
-  const name = PACKAGES[process.platform + "-" + process.arch];
-  if (!name) fail(process.platform === "darwin" ? "MACOS_APPLE_SILICON_REQUIRED" : process.platform === "linux" ? "LINUX_X64_OR_ARM64_REQUIRED" : "PLATFORM_UNSUPPORTED");
-  const command = argv[0] || "bootstrap", args = argv.slice(1);
-  if (command === "-h" || command === "--help" || command === "help") { process.stdout.write(posixHelp()); return; }
-  const lifecycle = COMMANDS[command];
-  if (!lifecycle) fail("ARGUMENT_INVALID");
-  if (lifecycle === "uninstall" ? args.length > 1 || (args.length === 1 && args[0] !== "--purge-state") : args.length) fail("ARGUMENT_INVALID");
-  if (typeof process.getuid === "function" && process.getuid() === 0) fail("POSIX_OWNER_REQUIRED");
-
-  let packageJson;
-  try { packageJson = createRequire(import.meta.url).resolve(name + "/package.json"); } catch { fail("PLATFORM_PACKAGE_MISSING"); }
-  const meta = JSON.parse(await fs.readFile(packageJson, "utf8"));
-  if (meta.name !== name || meta.version !== version) fail("PLATFORM_PACKAGE_MISMATCH");
-  const source = path.join(path.dirname(packageJson), "runtime");
-  const manifest = JSON.parse(await fs.readFile(path.join(source, "manifest.json"), "utf8"));
-  const files = Object.keys(manifest?.files ?? {});
-  if (manifest?.platform !== process.platform || manifest?.arch !== process.arch || !files.length || files.some(file => !/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u.test(file))) fail("PLATFORM_PACKAGE_INVALID");
-
-  // Canonical parent: on macOS os.tmpdir() is under /var, a symlink to /private/var, and the lifecycle rejects aliases.
-  const stage = await fs.mkdtemp(path.join(await fs.realpath(os.tmpdir()), "local-commander-"));
-  try {
-    await fs.chmod(stage, 0o700);
-    for (const file of [...files, "manifest.json"]) {
-      const target = path.join(stage, file);
-      await fs.copyFile(path.join(source, file), target, constants.COPYFILE_EXCL);
-      await fs.chmod(target, EXECUTABLES.has(file) ? 0o700 : 0o600);
-    }
-    // The lifecycle verifies every file against the manifest, then copies them into its own versions directory.
-    const result = spawnSync(path.join(stage, "node"), [path.join(stage, "lifecycle.mjs"), lifecycle, ...args], { stdio: "inherit" });
-    if (result.error) throw result.error;
-    process.exitCode = result.status ?? 1;
-  } finally {
-    await fs.rm(stage, { recursive: true, force: true });
-  }
-}
+// macOS and Linux: the runtime ships in a per-platform package (an optional dependency, so npm installs only the
+// matching one). Its lifecycle accepts only a private, owner-only artifact directory, so the files are copied from the
+// npx cache into a fresh private directory and the lifecycle installs from there into its own versions directory.
+import { constants } from "node:fs";
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { spawnSync } from "node:child_process";
+import { createRequire } from "node:module";
+
+const PACKAGES = { "darwin-arm64": "local-commander-agent-darwin-arm64", "linux-x64": "local-commander-agent-linux-x64", "linux-arm64": "local-commander-agent-linux-arm64" };
+// npm command -> lifecycle command. The default (`npx local-commander-agent@latest`) is setup, as on Windows.
+const COMMANDS = { bootstrap: "setup", install: "setup", setup: "setup", update: "update", pair: "pair", access: "access", "configure-access": "access",
+  start: "start", stop: "stop", status: "status", rollback: "rollback", uninstall: "uninstall" };
+const EXECUTABLES = new Set(["node", "posix-host", "owner-store"]);
+
+function fail(code) { const error = new Error(code); error.code = code; throw error; }
+
+export function posixHelp() {
+  return [
+    "Local Commander",
+    "",
+    "  npx local-commander-agent@latest            set up this computer, pair it and choose access",
+    "  npx local-commander-agent@latest update     install this version, keeping pairing and access",
+    "  npx local-commander-agent@latest status|start|stop|pair|access|rollback",
+    "  npx local-commander-agent@latest uninstall [--purge-state]",
+    ""
+  ].join("\n");
+}
+
+// Owner opt-out for take_screenshot under Full Access (#486): a marker in the installed service agent's state folder
+// (the service runs without XDG_DATA_HOME). No runtime staging is needed; the agent checks it on each capture.
+async function screenshotCommand(args) {
+  const action = args[0] || "status";
+  if (args.length > 1 || !["status", "on", "off"].includes(action)) fail("ARGUMENT_INVALID");
+  if (typeof process.getuid === "function" && process.getuid() === 0) fail("POSIX_OWNER_REQUIRED");
+  const state = path.join(os.homedir(), process.platform === "darwin" ? "Library/Application Support" : ".local/share", "LocalCommander", "Agent");
+  const folder = await fs.lstat(state).catch(() => null);
+  if (!folder?.isDirectory() || folder.uid !== process.getuid()) fail("AGENT_NOT_INSTALLED");
+  const file = path.join(state, "screenshot-disabled-by-owner");
+  if (action === "off") await fs.open(file, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600)
+    .then(handle => handle.close(), error => { if (error?.code !== "EEXIST") throw error; });
+  if (action === "on") await fs.rm(file, { force: true });
+  const off = await fs.lstat(file).then(() => true, error => error?.code !== "ENOENT");
+  process.stdout.write(JSON.stringify({ screenshot: off ? "off" : "on" }) + "\n");
+}
+
+export async function runPosix(argv, version) {
+  const name = PACKAGES[process.platform + "-" + process.arch];
+  if (!name) fail(process.platform === "darwin" ? "MACOS_APPLE_SILICON_REQUIRED" : process.platform === "linux" ? "LINUX_X64_OR_ARM64_REQUIRED" : "PLATFORM_UNSUPPORTED");
+  const command = argv[0] || "bootstrap", args = argv.slice(1);
+  if (command === "-h" || command === "--help" || command === "help") { process.stdout.write(posixHelp()); return; }
+  if (command === "screenshot") { await screenshotCommand(args); return; }
+  const lifecycle = COMMANDS[command];
+  if (!lifecycle) fail("ARGUMENT_INVALID");
+  if (lifecycle === "uninstall" ? args.length > 1 || (args.length === 1 && args[0] !== "--purge-state") : args.length) fail("ARGUMENT_INVALID");
+  if (typeof process.getuid === "function" && process.getuid() === 0) fail("POSIX_OWNER_REQUIRED");
+
+  let packageJson;
+  try { packageJson = createRequire(import.meta.url).resolve(name + "/package.json"); } catch { fail("PLATFORM_PACKAGE_MISSING"); }
+  const meta = JSON.parse(await fs.readFile(packageJson, "utf8"));
+  if (meta.name !== name || meta.version !== version) fail("PLATFORM_PACKAGE_MISMATCH");
+  const source = path.join(path.dirname(packageJson), "runtime");
+  const manifest = JSON.parse(await fs.readFile(path.join(source, "manifest.json"), "utf8"));
+  const files = Object.keys(manifest?.files ?? {});
+  if (manifest?.platform !== process.platform || manifest?.arch !== process.arch || !files.length || files.some(file => !/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u.test(file))) fail("PLATFORM_PACKAGE_INVALID");
+
+  // Canonical parent: on macOS os.tmpdir() is under /var, a symlink to /private/var, and the lifecycle rejects aliases.
+  const stage = await fs.mkdtemp(path.join(await fs.realpath(os.tmpdir()), "local-commander-"));
+  try {
+    await fs.chmod(stage, 0o700);
+    for (const file of [...files, "manifest.json"]) {
+      const target = path.join(stage, file);
+      await fs.copyFile(path.join(source, file), target, constants.COPYFILE_EXCL);
+      await fs.chmod(target, EXECUTABLES.has(file) ? 0o700 : 0o600);
+    }
+    // The lifecycle verifies every file against the manifest, then copies them into its own versions directory.
+    const result = spawnSync(path.join(stage, "node"), [path.join(stage, "lifecycle.mjs"), lifecycle, ...args], { stdio: "inherit" });
+    if (result.error) throw result.error;
+    process.exitCode = result.status ?? 1;
+  } finally {
+    await fs.rm(stage, { recursive: true, force: true });
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "local-commander-agent",
-  "version": "0.3.45",
+  "version": "0.3.47",
   "description": "Computer companion for Local Commander: connect AI clients to local files, approved commands and localhost. Requires https://localcmd.app.",
   "type": "module",
   "bin": {
@@ -16,9 +16,9 @@
     "arm64"
   ],
   "optionalDependencies": {
-    "local-commander-agent-darwin-arm64": "0.3.45",
-    "local-commander-agent-linux-arm64": "0.3.45",
-    "local-commander-agent-linux-x64": "0.3.45"
+    "local-commander-agent-darwin-arm64": "0.3.47",
+    "local-commander-agent-linux-arm64": "0.3.47",
+    "local-commander-agent-linux-x64": "0.3.47"
   },
   "engines": {
     "node": ">=20.0.0"