qubicl-cli 0.1.1 → 0.2.0

package/README.md

@@ -36,7 +36,7 @@ your model or agent
         │
         │  MCP / OpenAPI / Open Terminal
         ▼
- localhost-only Qubicl gateway
+ local-by-default Qubicl gateway
         │
         ├── terminal + managed processes
         ├── durable, host-visible files
@@ -60,8 +60,13 @@ your model or agent
 ## Quick start
 
 Requirements: Node.js 22 or 24, Docker Engine 24.0 or Docker Desktop 4.29+, and
-Docker Compose 2.24+. Qubicl supports Linux, Apple Silicon macOS with Docker
-Desktop, and Windows 11 x64 through Ubuntu 24.04 on WSL 2 with Docker Desktop.
+Docker Compose 2.24+. Directly tested hosts are Linux x64, Apple Silicon
+macOS with Docker Desktop, and Windows 11 x64 through Ubuntu 24.04 on WSL 2
+with Docker Desktop. Linux ARM64, Intel macOS, Windows on ARM, and other WSL 2
+distributions are best-effort. Native Windows and WSL 1 are unsupported;
+Qubicl computers remain Linux containers on every host. See the versioned
+[Platform support](https://github.com/EldanRing/qubicl/blob/main/docs/platforms.md)
+matrix before installing on a best-effort host.
 
 ```sh
 qubicl setup
@@ -81,7 +86,7 @@ never with `sudo`.
 | `file-system` | Shell, processes, Git, durable files, web research | — | 1 CPU / 512m |
 | `browser` | Everything above plus persistent Chromium, OCR, PDF inspection | ✓ | 2 CPU / 2g |
 | `computer` | Browser plus a lightweight XFCE desktop, editors, document tools, SSH | ✓ | 2 CPU / 3g |
-| `workstation` | Full development and office environment with LibreOffice | ✓ | 2 CPU / 4g |
+| `workstation` | Development and office environment with LibreOffice Writer, Calc, and Impress | ✓ | 2 CPU / 4g |
 
 Every preset includes native keyless `web_search`, local `web_extract`, and
 verified Qubicl-native skill baselines with durable, agent-editable working
@@ -114,8 +119,37 @@ a bearer token.
 
 For Open WebUI, copy the generated configuration into **Admin Panel → Settings
 → Integrations → Open Terminal**. Qubicl supplies native durable-file browsing,
-chat uploads, screenshots, browser tools, and explicitly published local
-previews without joining Open WebUI's Docker network.
+bounded ZIP downloads, non-PTY managed processes, chat uploads, screenshots,
+browser tools, and explicitly published local previews without joining Open
+WebUI's Docker network.
+
+The gateway remains on `127.0.0.1` unless the host operator explicitly adds a
+second TLS-only listener with `qubicl gateway expose`. The opt-in uses the same
+gateway container, requires certificate, interface, network, and trusted-origin
+policy, and persists until `qubicl gateway revoke`; `0.0.0.0` additionally
+requires `--all-interfaces`. Read the
+[remote-access guide](https://github.com/EldanRing/qubicl/blob/main/docs/remote-access.md)
+before enabling it.
+
+## Review updates safely
+
+`qubicl status` shows pending exact curated gateway/default/computer targets.
+`qubicl upgrade --all` prints the deduplicated targets, expected download and
+expanded sizes, honest capacity limits, preserved runtime state, and roll-forward
+order before confirmation. It acquires and inspects every target before the first
+state or runtime mutation. Custom images remain manual.
+
+Optional notices are local and default off:
+
+```sh
+qubicl config set --update-notifications on
+```
+
+They compare only with the CLI's bundled catalog and never use telemetry, make a
+network check, pull an image, or apply an update. `qubicl cleanup --orphans
+[--images]` likewise previews exact verified candidates; Docker images and
+volumes remain manual because daemon-global or name-only resources cannot be
+proven exclusive to one installation.
 
 ## Watch and take over
 
@@ -127,20 +161,36 @@ Observation is passive. **Take control** fences agent tools and terminates its
 ordinary managed commands before handing you the keyboard and mouse. Persistent
 browser and managed desktop applications remain visible so you can continue the
 same task. Qubicl's green pointer shows the agent's latest desktop or browser
-position in the viewer.
+position in the viewer. The viewer states that Chromium's profile is durable
+across restarts and upgrades. Current viewer images also require a
+gateway-injected internal credential for noVNC files and WebSocket traffic and
+expose no raw TCP VNC listener.
+
+Agent-facing `browser_reset` is presented as **Reset tabs** and retains the
+durable profile. A host operator can separately run `qubicl browser profile
+wipe COMPUTER` to preview domains with stored cookies/site data and the exact
+removal/preservation scope before explicit confirmation; Downloads remain.
 
 ## Security boundary
 
 Computers run without privileged mode, a Docker socket, host namespaces,
 arbitrary mounts, or passwordless elevation. The gateway listens only on
-`127.0.0.1`. Qubicl is a Docker-based computer for trusted or
+`127.0.0.1` by default; explicit remote mode adds a separate TLS-only listener
+without publishing computer ports. Qubicl is a Docker-based computer for trusted or
 operator-supervised workloads, not a VM boundary against hostile code.
 
 Read the complete [security model](https://github.com/EldanRing/qubicl/blob/main/docs/security-model.md)
 before relying on the boundary.
 
 Qubicl `0.1.x` is the initial public series. Interfaces and state formats may
-evolve before 1.0; back up important computer homes before upgrades.
+evolve before 1.0. Linux x64, Apple Silicon macOS with Docker Desktop, and
+Windows 11 x64 through Ubuntu 24.04 on WSL 2 with Docker Desktop are directly
+tested. Linux ARM64, Intel macOS, Windows on ARM, and other WSL 2 distributions
+remain best-effort. Native Windows and WSL 1 are unsupported; Qubicl computers
+remain Linux containers on every host. Read the
+[platform matrix](https://github.com/EldanRing/qubicl/blob/main/docs/platforms.md)
+and [WSL guide](https://github.com/EldanRing/qubicl/blob/main/docs/wsl.md) for
+the exact boundaries. Back up important computer homes before upgrades.
 
 Explore the [source and full documentation](https://github.com/EldanRing/qubicl).
 Source code and documentation are Apache-2.0. Designated Qubicl brand artwork

package/dist/SBOM.spdx.json

@@ -2,22 +2,22 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "qubicl-cli-0.1.1-npm-application",
-  "documentNamespace": "https://github.com/EldanRing/qubicl/spdx/qubicl-cli/0.1.1/dac0e16a11b8cbc0ed7f8b0e9eb9e16a3aa2f45d/npm-application",
+  "name": "qubicl-cli-0.2.0-npm-application",
+  "documentNamespace": "https://github.com/EldanRing/qubicl/spdx/qubicl-cli/0.2.0/5e54dafceb7c28ca3bcf561e6281be3d7da976d5/npm-application",
   "creationInfo": {
-    "created": "2026-08-27T13:23:55Z",
+    "created": "2026-08-30T04:44:30Z",
     "creators": [
       "Tool: qubicl-metafile-sbom-1"
     ]
   },
   "documentDescribes": [
-    "SPDXRef-Package-qubicl-cli-0.1.1-3aef512ef329"
+    "SPDXRef-Package-qubicl-cli-0.2.0-e4e0b5a81a1f"
   ],
   "packages": [
     {
       "name": "qubicl-cli",
-      "SPDXID": "SPDXRef-Package-qubicl-cli-0.1.1-3aef512ef329",
-      "versionInfo": "0.1.1",
+      "SPDXID": "SPDXRef-Package-qubicl-cli-0.2.0-e4e0b5a81a1f",
+      "versionInfo": "0.2.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "Apache-2.0",
@@ -27,7 +27,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/qubicl-cli@0.1.1"
+          "referenceLocator": "pkg:npm/qubicl-cli@0.2.0"
         }
       ],
       "comment": "Qubicl npm-application application assembled from the recorded esbuild metafiles."
@@ -50,6 +50,24 @@
       ],
       "comment": "Bundled into: control."
     },
+    {
+      "name": "@isaacs/fs-minipass",
+      "SPDXID": "SPDXRef-Package-isaacs-fs-minipass-4.0.1-e29823829017",
+      "versionInfo": "4.0.1",
+      "downloadLocation": "NOASSERTION",
+      "filesAnalyzed": false,
+      "licenseConcluded": "ISC",
+      "licenseDeclared": "ISC",
+      "copyrightText": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/%40isaacs/fs-minipass@4.0.1"
+        }
+      ],
+      "comment": "Bundled into: cli."
+    },
     {
       "name": "@modelcontextprotocol/core",
       "SPDXID": "SPDXRef-Package-modelcontextprotocol-core-2.0.0-546354de5e47",
@@ -104,6 +122,114 @@
       ],
       "comment": "Bundled into: cli, control."
     },
+    {
+      "name": "chownr",
+      "SPDXID": "SPDXRef-Package-chownr-3.0.0-833f419be73d",
+      "versionInfo": "3.0.0",
+      "downloadLocation": "NOASSERTION",
+      "filesAnalyzed": false,
+      "licenseConcluded": "BlueOak-1.0.0",
+      "licenseDeclared": "BlueOak-1.0.0",
+      "copyrightText": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/chownr@3.0.0"
+        }
+      ],
+      "comment": "Bundled into: cli."
+    },
+    {
+      "name": "entities",
+      "SPDXID": "SPDXRef-Package-entities-8.0.0-2e887580fed6",
+      "versionInfo": "8.0.0",
+      "downloadLocation": "NOASSERTION",
+      "filesAnalyzed": false,
+      "licenseConcluded": "BSD-2-Clause",
+      "licenseDeclared": "BSD-2-Clause",
+      "copyrightText": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/entities@8.0.0"
+        }
+      ],
+      "comment": "Bundled into: control."
+    },
+    {
+      "name": "fflate",
+      "SPDXID": "SPDXRef-Package-fflate-0.8.3-e40a8fa62b11",
+      "versionInfo": "0.8.3",
+      "downloadLocation": "NOASSERTION",
+      "filesAnalyzed": false,
+      "licenseConcluded": "MIT",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/fflate@0.8.3"
+        }
+      ],
+      "comment": "Bundled into: control."
+    },
+    {
+      "name": "minipass",
+      "SPDXID": "SPDXRef-Package-minipass-7.1.3-919212b49551",
+      "versionInfo": "7.1.3",
+      "downloadLocation": "NOASSERTION",
+      "filesAnalyzed": false,
+      "licenseConcluded": "BlueOak-1.0.0",
+      "licenseDeclared": "BlueOak-1.0.0",
+      "copyrightText": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/minipass@7.1.3"
+        }
+      ],
+      "comment": "Bundled into: cli."
+    },
+    {
+      "name": "minizlib",
+      "SPDXID": "SPDXRef-Package-minizlib-3.1.0-9d2296e811f3",
+      "versionInfo": "3.1.0",
+      "downloadLocation": "NOASSERTION",
+      "filesAnalyzed": false,
+      "licenseConcluded": "MIT",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/minizlib@3.1.0"
+        }
+      ],
+      "comment": "Bundled into: cli."
+    },
+    {
+      "name": "parse5",
+      "SPDXID": "SPDXRef-Package-parse5-8.0.1-e18dc8ba2437",
+      "versionInfo": "8.0.1",
+      "downloadLocation": "NOASSERTION",
+      "filesAnalyzed": false,
+      "licenseConcluded": "MIT",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/parse5@8.0.1"
+        }
+      ],
+      "comment": "Bundled into: control."
+    },
     {
       "name": "playwright-core",
       "SPDXID": "SPDXRef-Package-playwright-core-1.62.1-6e887f47565b",
@@ -124,8 +250,8 @@
     },
     {
       "name": "qubicl-core-skill-adaptations",
-      "SPDXID": "SPDXRef-Package-qubicl-core-skill-adaptations-0.1.1-7a87144aafe4",
-      "versionInfo": "0.1.1",
+      "SPDXID": "SPDXRef-Package-qubicl-core-skill-adaptations-0.2.0-29cfb4803a60",
+      "versionInfo": "0.2.0",
       "downloadLocation": "https://github.com/EldanRing/qubicl",
       "filesAnalyzed": false,
       "licenseConcluded": "MIT",
@@ -135,11 +261,47 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:github/EldanRing/qubicl@dac0e16a11b8cbc0ed7f8b0e9eb9e16a3aa2f45d"
+          "referenceLocator": "pkg:github/EldanRing/qubicl@5e54dafceb7c28ca3bcf561e6281be3d7da976d5"
         }
       ],
       "comment": "Six Qubicl-native core skills, with selected MIT-licensed helpers adapted from hermes-agent@7d6db4efb885856078e4d19f804035226df81e0d; Hermes Agent is not installed."
     },
+    {
+      "name": "tar",
+      "SPDXID": "SPDXRef-Package-tar-7.5.22-60084ba1dfc1",
+      "versionInfo": "7.5.22",
+      "downloadLocation": "NOASSERTION",
+      "filesAnalyzed": false,
+      "licenseConcluded": "BlueOak-1.0.0",
+      "licenseDeclared": "BlueOak-1.0.0",
+      "copyrightText": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/tar@7.5.22"
+        }
+      ],
+      "comment": "Bundled into: cli."
+    },
+    {
+      "name": "yallist",
+      "SPDXID": "SPDXRef-Package-yallist-5.0.0-4a8b5707001b",
+      "versionInfo": "5.0.0",
+      "downloadLocation": "NOASSERTION",
+      "filesAnalyzed": false,
+      "licenseConcluded": "BlueOak-1.0.0",
+      "licenseDeclared": "BlueOak-1.0.0",
+      "copyrightText": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/yallist@5.0.0"
+        }
+      ],
+      "comment": "Bundled into: cli."
+    },
     {
       "name": "yaml",
       "SPDXID": "SPDXRef-Package-yaml-2.9.0-be80181ebffd",
@@ -179,42 +341,87 @@
   ],
   "relationships": [
     {
-      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.1.1-3aef512ef329",
+      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.2.0-e4e0b5a81a1f",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-hono-node-server-1.19.17-1838a11ef509"
     },
     {
-      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.1.1-3aef512ef329",
+      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.2.0-e4e0b5a81a1f",
+      "relationshipType": "DEPENDS_ON",
+      "relatedSpdxElement": "SPDXRef-Package-isaacs-fs-minipass-4.0.1-e29823829017"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.2.0-e4e0b5a81a1f",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-modelcontextprotocol-core-2.0.0-546354de5e47"
     },
     {
-      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.1.1-3aef512ef329",
+      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.2.0-e4e0b5a81a1f",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-modelcontextprotocol-node-2.0.0-cc861036891c"
     },
     {
-      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.1.1-3aef512ef329",
+      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.2.0-e4e0b5a81a1f",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-modelcontextprotocol-server-2.0.0-39f69d3701b8"
     },
     {
-      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.1.1-3aef512ef329",
+      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.2.0-e4e0b5a81a1f",
+      "relationshipType": "DEPENDS_ON",
+      "relatedSpdxElement": "SPDXRef-Package-chownr-3.0.0-833f419be73d"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.2.0-e4e0b5a81a1f",
+      "relationshipType": "DEPENDS_ON",
+      "relatedSpdxElement": "SPDXRef-Package-entities-8.0.0-2e887580fed6"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.2.0-e4e0b5a81a1f",
+      "relationshipType": "DEPENDS_ON",
+      "relatedSpdxElement": "SPDXRef-Package-fflate-0.8.3-e40a8fa62b11"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.2.0-e4e0b5a81a1f",
+      "relationshipType": "DEPENDS_ON",
+      "relatedSpdxElement": "SPDXRef-Package-minipass-7.1.3-919212b49551"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.2.0-e4e0b5a81a1f",
+      "relationshipType": "DEPENDS_ON",
+      "relatedSpdxElement": "SPDXRef-Package-minizlib-3.1.0-9d2296e811f3"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.2.0-e4e0b5a81a1f",
+      "relationshipType": "DEPENDS_ON",
+      "relatedSpdxElement": "SPDXRef-Package-parse5-8.0.1-e18dc8ba2437"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.2.0-e4e0b5a81a1f",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-playwright-core-1.62.1-6e887f47565b"
     },
     {
-      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.1.1-3aef512ef329",
+      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.2.0-e4e0b5a81a1f",
+      "relationshipType": "DEPENDS_ON",
+      "relatedSpdxElement": "SPDXRef-Package-qubicl-core-skill-adaptations-0.2.0-29cfb4803a60"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.2.0-e4e0b5a81a1f",
+      "relationshipType": "DEPENDS_ON",
+      "relatedSpdxElement": "SPDXRef-Package-tar-7.5.22-60084ba1dfc1"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.2.0-e4e0b5a81a1f",
       "relationshipType": "DEPENDS_ON",
-      "relatedSpdxElement": "SPDXRef-Package-qubicl-core-skill-adaptations-0.1.1-7a87144aafe4"
+      "relatedSpdxElement": "SPDXRef-Package-yallist-5.0.0-4a8b5707001b"
     },
     {
-      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.1.1-3aef512ef329",
+      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.2.0-e4e0b5a81a1f",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-yaml-2.9.0-be80181ebffd"
     },
     {
-      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.1.1-3aef512ef329",
+      "spdxElementId": "SPDXRef-Package-qubicl-cli-0.2.0-e4e0b5a81a1f",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3-0479f5dfed7f"
     }