v0.3.0

Added

• Windows support, verified on Windows 11. rdc service install creates an elevated Task
  Scheduler logon task that runs the daemon in the interactive session with a log file;
  service uninstall stops the running daemon. Window focus implemented (foreground-thread
  attach with an Alt-tap fallback). Absolute pointer moves use SendInput over the whole
  virtual desktop so secondary monitors are addressable (untested on real hardware yet).
• --log-file / RDC_LOG_FILE to append logs to a file instead of stderr.

Fixed

• Windows: the service path no longer carries the \\?\ verbatim prefix.

Install

Download the archive for your platform below, verify it against SHA256SUMS
(sha256sum -c SHA256SUMS), and put rdc on your PATH. Each archive also contains the
documentation, the agent skill and the third-party license bundle. Setup guides:
docs/install.md.

Unsigned binaries

These binaries are not code-signed or notarized.

• macOS: Gatekeeper refuses the raw download, and permissions granted to an unsigned
  binary are lost on every upgrade. Build on the Mac and sign with your own identity via
  scripts/macos/bundle-and-sign.sh; see
  docs/setup-macos.md. The
  unsigned binary is fine for the client side (rdc -t …, rdc mcp).
• Windows: SmartScreen warns on first run. "More info" → "Run anyway", or build from source.
• Linux: no signature checks apply.

Full Changelog: v0.2.1...v0.3.0

v0.2.1

Changed

• License is now GPL-3.0-or-later (was AGPL-3.0-or-later). rdc is a program you run on
  your own machines, not a hosted service, so the AGPL network clause added friction without
  protecting anything; plain GPL keeps the requirement that distributed modifications are
  published. There are no external contributions to date, so no consent was needed.
• GitHub releases carry the changelog section for the version as their notes.
• CONTRIBUTING asks for DCO sign-off (git commit -s).

Install

Download the archive for your platform below, verify it against SHA256SUMS
(sha256sum -c SHA256SUMS), and put rdc on your PATH. Each archive also contains the
documentation, the agent skill and the third-party license bundle. Setup guides:
docs/install.md.

Unsigned binaries

These binaries are not code-signed or notarized.

• macOS: Gatekeeper refuses the raw download, and permissions granted to an unsigned
  binary are lost on every upgrade. Build on the Mac and sign with your own identity via
  scripts/macos/bundle-and-sign.sh; see
  docs/setup-macos.md. The
  unsigned binary is fine for the client side (rdc -t …, rdc mcp).
• Windows: SmartScreen warns on first run. "More info" → "Run anyway", or build from source.
• Linux: no signature checks apply.

Full Changelog: v0.2.0...v0.2.1

rdc 0.2.0

Added

• Capabilities. Grants can limit an identity to view, input and/or clipboard.
  Config accepts plain strings (full control), inline tables
  { who = "...", can = [...] } inside allow, or [[serve.grant]] blocks; the CLI accepts
  --allow who=view,clipboard. Missing capability → 403 forbidden. whoami reports caps.
• Audit log. One JSON line per authorized request or rejection (host, identity and
  capability denials included) with identity, action summary, outcome and duration. Mode 0600,
  size-rotated, configurable under [serve.audit]. New rdc audit command to read it.
• rdc doctor prints the configured grants and the audit log path.

Changed

• --allow and [serve].allow entries are now grants; existing plain-string configs behave
  exactly as before (full control).

Install

Download the archive for your platform below, verify it against SHA256SUMS
(sha256sum -c SHA256SUMS), and put rdc on your PATH. Each archive also contains the
documentation, the agent skill and the third-party license bundle. Setup guides:
docs/install.md.

Unsigned binaries

These binaries are not code-signed or notarized.

• macOS: Gatekeeper refuses the raw download, and permissions granted to an unsigned
  binary are lost on every upgrade. Build on the Mac and sign with your own identity via
  scripts/macos/bundle-and-sign.sh; see
  docs/setup-macos.md. The
  unsigned binary is fine for the client side (rdc -t …, rdc mcp).
• Windows: SmartScreen warns on first run. "More info" → "Run anyway", or build from source.
• Linux: no signature checks apply.

Full Changelog: v0.1.0...v0.2.0

rdc 0.1.0

First public release. Remote desktop control for AI agents over Tailscale: screenshot, mouse,
keyboard, window focus and clipboard as MCP tools and a CLI. Tailscale whois identity with an
allowlist, Host-header check, input validation. Verified on Linux (Hyprland) and macOS (Apple
silicon); Windows compiles but is untested.

Install

Download the archive for your platform below, verify it against SHA256SUMS
(sha256sum -c SHA256SUMS), and put rdc on your PATH. Each archive also contains the
documentation, the agent skill and the third-party license bundle. Setup guides:
docs/install.md.

Unsigned binaries

These binaries are not code-signed or notarized.

• macOS: Gatekeeper refuses the raw download, and permissions granted to an unsigned
  binary are lost on every upgrade. Build on the Mac and sign with your own identity via
  scripts/macos/bundle-and-sign.sh; see
  docs/setup-macos.md. The
  unsigned binary is fine for the client side (rdc -t …, rdc mcp).
• Windows: SmartScreen warns on first run. "More info" → "Run anyway", or build from source.
• Linux: no signature checks apply.

Full Changelog: https://github.com/bscott/rdc/commits/v0.1.0