local-commander-agent 0.3.46 → 0.3.47

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Change history
 
+## 0.3.47 - 2026-10-22
+
+- New: screenshots on Linux. Where the screenshot tool is available to your account and the computer has Full Access, it now also works on a Linux desktop (Wayland through the desktop portal or grim, X11 through xwd, import or maim). When capture is not possible the client gets a clear reason, such as no desktop session or no capture tool.
+- New: you can turn screenshots off for this computer. Run `localcommander screenshot off` on Windows, or `npx local-commander-agent screenshot off` on macOS and Linux; `screenshot on` turns them back on and `screenshot status` shows the current setting. No restart is needed.
+- The cabinet now shows whether each computer has Full Access or selected folders only.
+- Includes everything in 0.3.46.
+
 ## 0.3.46 - 2026-10-22
 
 - Simpler setup on macOS and Linux: the approval page opens in your browser by itself, and on a Mac access is one click in a window (Full Access, or Choose Folder). Linux asks one question in the terminal: press Enter for Full Access or type a folder.

package/bin/localcommander.mjs

@@ -316,6 +316,19 @@ async function auditCommand(runtimeDir, sub) {
   }
   fail("ARGUMENT_INVALID");
 }
+// Owner opt-out for take_screenshot under Full Access (#486), on by default. Only this owner-run command changes it (the agent
+// state folder is protected from every file tool); the agent checks it on each capture, so no restart is needed.
+const SCREENSHOT_OFF_FILE = "screenshot-disabled-by-owner";
+async function screenshotCommand(args) {
+  const action = args[0] || "status";
+  if (args.length > 1 || !["status", "on", "off"].includes(action)) fail("ARGUMENT_INVALID");
+  if (!(await readCurrent())) fail("AGENT_NOT_INSTALLED");
+  const file = path.join(stateDirectory(), SCREENSHOT_OFF_FILE);
+  if (action === "off") await fs.writeFile(file, "", { flag: "wx" }).catch(error => { if (error?.code !== "EEXIST") throw error; });
+  if (action === "on") await fs.rm(file, { force: true });
+  const off = await fs.lstat(file).then(() => true, error => error?.code !== "ENOENT");
+  process.stdout.write(JSON.stringify({ screenshot: off ? "off" : "on" }) + "\n");
+}
 // Public AI-provider domains routed through the tunnel; everything else stays direct. Mirror of
 // packages/connectivity/src/profiles.ts (stable public suffixes).
 const PROXY_PROVIDERS = {
@@ -793,6 +806,10 @@ async function main() {
     if (action === "setup") await restartIfRunning();
     return;
   }
+  if (command === "screenshot") {
+    await screenshotCommand(args);
+    return;
+  }
   if (command === "audit") {
     const current = await readCurrent(); if (!current) fail("AGENT_NOT_INSTALLED");
     await auditCommand(current.runtimeDir, args);

package/bin/posix.mjs

@@ -28,11 +28,29 @@ export function posixHelp() {
   ].join("\n");
 }
 
+// Owner opt-out for take_screenshot under Full Access (#486): a marker in the installed service agent's state folder
+// (the service runs without XDG_DATA_HOME). No runtime staging is needed; the agent checks it on each capture.
+async function screenshotCommand(args) {
+  const action = args[0] || "status";
+  if (args.length > 1 || !["status", "on", "off"].includes(action)) fail("ARGUMENT_INVALID");
+  if (typeof process.getuid === "function" && process.getuid() === 0) fail("POSIX_OWNER_REQUIRED");
+  const state = path.join(os.homedir(), process.platform === "darwin" ? "Library/Application Support" : ".local/share", "LocalCommander", "Agent");
+  const folder = await fs.lstat(state).catch(() => null);
+  if (!folder?.isDirectory() || folder.uid !== process.getuid()) fail("AGENT_NOT_INSTALLED");
+  const file = path.join(state, "screenshot-disabled-by-owner");
+  if (action === "off") await fs.open(file, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600)
+    .then(handle => handle.close(), error => { if (error?.code !== "EEXIST") throw error; });
+  if (action === "on") await fs.rm(file, { force: true });
+  const off = await fs.lstat(file).then(() => true, error => error?.code !== "ENOENT");
+  process.stdout.write(JSON.stringify({ screenshot: off ? "off" : "on" }) + "\n");
+}
+
 export async function runPosix(argv, version) {
   const name = PACKAGES[process.platform + "-" + process.arch];
   if (!name) fail(process.platform === "darwin" ? "MACOS_APPLE_SILICON_REQUIRED" : process.platform === "linux" ? "LINUX_X64_OR_ARM64_REQUIRED" : "PLATFORM_UNSUPPORTED");
   const command = argv[0] || "bootstrap", args = argv.slice(1);
   if (command === "-h" || command === "--help" || command === "help") { process.stdout.write(posixHelp()); return; }
+  if (command === "screenshot") { await screenshotCommand(args); return; }
   const lifecycle = COMMANDS[command];
   if (!lifecycle) fail("ARGUMENT_INVALID");
   if (lifecycle === "uninstall" ? args.length > 1 || (args.length === 1 && args[0] !== "--purge-state") : args.length) fail("ARGUMENT_INVALID");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "local-commander-agent",
-  "version": "0.3.46",
+  "version": "0.3.47",
   "description": "Computer companion for Local Commander: connect AI clients to local files, approved commands and localhost. Requires https://localcmd.app.",
   "type": "module",
   "bin": {
@@ -16,9 +16,9 @@
     "arm64"
   ],
   "optionalDependencies": {
-    "local-commander-agent-darwin-arm64": "0.3.46",
-    "local-commander-agent-linux-arm64": "0.3.46",
-    "local-commander-agent-linux-x64": "0.3.46"
+    "local-commander-agent-darwin-arm64": "0.3.47",
+    "local-commander-agent-linux-arm64": "0.3.47",
+    "local-commander-agent-linux-x64": "0.3.47"
   },
   "engines": {
     "node": ">=20.0.0"