computer-use 0.0.1

First public release of the optional desktop-control MCP server — a GitHub Release asset, not an npm artifact.

Install

.\scripts\install.ps1 -ComputerUse          # Windows
bash scripts/install.sh --computer-use      # POSIX

The installer verifies this wheel's sha256 before installing it, runs --selftest, and only then writes the mcp.computeruse entry. A hash that does not match fails closed and writes nothing.

What it is

Seven tools: screenshot, click, type_text, key, scroll, drag, control_status. Every mutating tool returns {before_sha1, after_sha1, changed_pixels_pct, verdict} — no-observable-change is a first-class answer, never an error.

What it is not

• Not a security boundary. A 200-action budget, an audit trail, a panic hotkey and "someone is watching" bound the blast radius; they do not secure it.
• Elevated (UAC) windows are unreachable — only a Windows process can touch the secure desktop.
• Typed text bypasses this project's R2/R6 classifiers. Typing into a terminal is delivered as keystrokes; the env-variable red line does not exist on that path.
• Screenshots are not JIT-governed — they are non-text parts, so the offload pipeline passes them through. Use include_image:false unless the model can read pixels.

Audit

One row per action under %LOCALAPPDATA%\te-river\computeruse\audit\<date>\<sid8>\. Window titles and expect_title are stored as length + sha1 fingerprint, never as text; type_text records text_len + text_sha1_8 only. 7-day TTL.

Wheel

computeruse_mcp-0.0.1-py3-none-any.whl · sha256 6212f9b7eb814ea558514c1d886b3765036628e28dc72192c03a524b377e0f04