Harden local and remote CUA computer use

[milind-soni]

Summary

• make stopped Local VM desktops recreate safely instead of attempting a broken Docker resume, with idle recycling that preserves user workspace and browser data
• upgrade the bundled CUA SDK and executables to 0.20.0, disable telemetry, and verify daemon health plus real screenshot capture before reporting readiness
• route hosted computer actions and screenshots through a private CUA daemon with automatic reattachment after wake and an X11 fallback
• add safer semantic Chromium controls, isolate hosted command environments, and improve computer status reporting

Validation

• pnpm typecheck
• pnpm check:electron
• pnpm test (466 passed, 8 skipped; updater 11 passed)
• pnpm build
• pnpm build:server
• pnpm build:cua
• node scripts/smoke-cua.mjs (56 tools, PNG screenshot)

Supersedes #156 and #157 with a clean branch based directly on the updated main after #155.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: cb3d1f45-6e76-419e-9319-253657bdb828

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}