v0.1.3

0.1.3 (2026-10-25)

Bug Fixes

• repair CUA input and simplify browser workflows and approval (#47) (8fe6910)

v0.1.2

0.1.2 (2026-10-20)

Bug Fixes

• align click contracts with CUA 0.37.0 (#43) (d455eb9)

Validation

Release source: 977afec748845c05c294b01318c926db60826378. SDK and private worker both use CUA 0.37.0, revision 2d2f99228d4d2508dc6fcc84c176b296e146714a.

• Updated version-PR CI, exact-release source CI, and final signed candidate workflow passed. Candidate source checks reused only the explicit successful same-SHA main CI. Final platform package and click-contract checks still ran.
• All 14 downloaded assets passed size/digest, SHA-256, BUILD source/CUA revision, compressed executable identity, Plugin manifests, Skill/source content and license-inventory checks. These accepted bytes were promoted without rebuilding.
• All three macOS executables independently passed Developer ID (Team 64KZ67PM5J), Hardened Runtime and online notarization checks. The standalone CLI exported the exact signed worker recorded in BUILD.
• Downloaded standalone/slim packages passed MCP, actual-worker click contracts and source-line checks, protocol, Runtime isolation, bounded lifecycle and isolated installation checks. Caelis isolated-Store install/status/remove confirmed Plugin/Skill/MCP registration; this was not a fresh model-turn or live Core MCP-readiness acceptance test.
• On macOS 27.0.1 (arm64), a dedicated blank AppKit fixture passed all seven strict click cases: actual down/up events, Ctrl flags, right clicks, both double-click pairs/counts, zero extra events for invalid parameters, and Agent-script line numbers. Dispatch receipts alone were not treated as GUI-effect proof.

Compatibility and limits

• macOS Apple Silicon targets macOS 14+. Clean-machine macOS 14 permissions/first-run acceptance remains unverified.
• Windows x64 binaries are unsigned and require the x64 Visual C++ runtime. This release has package/protocol CI coverage, not new live Windows GUI acceptance. DPI, modal-provider and uncertain-focus limitations remain tracked in #36. Windows right/double-click zoom capability is preserved; no new native Windows zoom-effect acceptance is claimed.
• Use modifier arrays through modifiers or native modifier. CUA's raw scalar modifier did not apply Ctrl in the native fixture; DTW rejects scalar input. Double-click modifiers and macOS right/double-click zoom are rejected explicitly rather than reporting a successful unsupported action.
• Caelis Bot manages a separately pinned DTW copy; this release does not replace installed Bot dependencies.

Desktop World v0.1.1

0.1.1 (2026-10-20)

Features

• document Agent installation and automate DTW releases (a60710f)
• skills: optimize desktop-world skill description and SOP structure (#38) (e6e4a2a)

Validation

Release source: ae4873399bf8a2ad1143322665216163148a72ca.

• Exact-release source/package CI and signed candidate workflow passed. These candidate bytes were promoted without rebuilding.
• Downloaded macOS and Windows artifacts passed SHA-256, BUILD revision, Plugin manifest, Skill/source content and license-inventory checks. Windows Skill text uses CRLF line endings.
• All three macOS executables independently passed Developer ID, Hardened Runtime and online notarization checks. The standalone CLI exported the exact signed worker bytes.
• Downloaded standalone/slim packages passed MCP, protocol, Runtime isolation, bounded lifecycle and installation checks. Antigravity project Plugin validation and Caelis isolated-Store install/status/remove passed; this was not a fresh model-turn acceptance test.
• On macOS 27.0.1, the original complete native fixture passed: three-window inventory, SCK and CUA clicks with independent counter effects, and refusal after reuse, move, close, intervening scripts, foreign-window occlusion and expiry. An initial ordinary-window click was conservatively refused under a full-screen Dock overlay with no counter change; its original receipt was retained before testing a fresh fixture.

Compatibility and limits

• macOS Apple Silicon targets macOS 14+. Clean-machine macOS 14 permissions/first-run acceptance remains unverified.
• Windows x64 binaries are unsigned and require the x64 Visual C++ runtime. This release has package/protocol CI coverage, not new live Windows GUI acceptance. DPI, modal-provider and uncertain-focus limitations remain tracked in #36.
• Caelis Bot manages a separately pinned DTW copy; publishing this release does not replace installed Bot dependencies.

Desktop World v0.1.0

Desktop World v0.1.0 is the first stable release: a portable standard Agent Plugin with one exec MCP tool and a bundled desktop-control Skill. Both platforms use pinned CUA source d74a9cab3fb2e80ab7f0cef47025ec828586ea75.

Changes since RC.9

• Bound cancellation and shutdown to each Runtime's private worker. EOF, SIGTERM and parent death stop descendants; native scene helpers retain their lease until exit. MCP request cancellation is scoped to pending tool calls.
• Preserve interrupted input as unknown, stop further dispatch, and require a fresh Runtime plus observation. Never automatically replay uncertain input.
• Bound retained payloads to 64 MiB, 64 completed results and 15 minutes; keep lightweight receipts after payload expiry. Admission stops at 4096 receipts until restart.
• Restore canonical manifests and relative paths on Plugin re-export. Host ownership and registration files are excluded. Claude integration supports user scope only and validates marketplace source ownership.
• Ship a separate slim Plugin archive for embedding, alongside standalone and compressed standalone downloads. Bot verifies archive, BUILD, runtime, worker and licensing digests before staging, without executing downloads.
• Sign and notarize macOS standalone, slim Runtime and worker; enforce macOS 14.0 deployment metadata. CUA remains unmodified.

Package sizes

Decimal MB: macOS slim Plugin is 54.91 MB unpacked / 18.23 MB download; Windows is 58.04 MB / 19.90 MB. The macOS Plugin is 23.8% smaller than the independently exported RC.9 package. Same-source local adapter strip A/B reduced 15.32 MB to 11.45 MB; this is separate from final signed-package measurements.

Downloads

Use dtw-darwin-arm64 or dtw-windows-amd64.exe for the self-contained installer. Embedders should use desktop-world-plugin-<platform> and preserve its complete directory. Compressed standalone archives are also available. Verify the accompanying SHA-256 files and BUILD-<platform>.json.

Acceptance and known limits

The release assets are the same candidate bytes downloaded and verified before promotion; acceptance details and asset digests are included in ACCEPTANCE.json and SHA256SUMS. Final macOS native tests verified real overlay/ordinary-window clicks with independent readback, stale/occluded input refusal, continuous-action cancellation and parent-death cleanup, and 128 observations with retained-result eviction. Core standard-loader PNG payloads and Bot/Core/Codex Plugin discovery/disable paths passed. Bot/Codex native action tests use a local model fixture; Claude CLI install/update/uninstall and Plugin connection passed, but its model turn was unavailable because the CLI is not logged in.

macOS standalone Mach-O notarization tickets are delivered online and cannot be stapled. macOS 14.0 is the deployment target; a clean macOS 14 first-run permission test was unavailable. Local native desktop acceptance uses macOS 27.0.1 and CI uses macOS 26.

Windows is available with limited GUI support. Current native Windows CI covers source build, checksums, MCP, state isolation, cancellation and installation. New Windows GUI acceptance is not claimed. Upstream DPI-unaware scaling, modal-provider stalls and post-effect foreground errors are non-blocking for this release and tracked in #36. Windows binaries are unsigned and require the x64 Microsoft Visual C++ runtime. Elevated apps, secure desktop and mixed-DPI input are not advertised as verified.

Desktop World v0.1.0-rc.9

每个平台只需下载一个 dtw 可执行文件。它包含固定版本的 CUA worker、Desktop World Skill、插件 manifest 和许可证清单；安装时不需要 Rust、Python、Node 或额外下载 worker。本版为 prerelease，Windows 已知上游限制继续保留。

本版变化

• Runtime 统一管理 CUA 会话和 JSON state；一个 MCP 进程对应一个独立执行上下文。调用 exec 时请省略 session；旧命名 session 请求会返回 session_managed_by_runtime，不会执行。独立 Agent 应使用独立 MCP 进程，物理桌面和前台焦点仍然共享。
• macOS 新增应用级窗口观察：默认返回归属应用的前两个窗口图像，保留完整候选清单，并支持绑定最新、单次 observation 的截图坐标点击。窗口归属为 best effort；新增的 operation:"app" / 绑定点击扩展仅支持 macOS，Windows 继续使用 CUA 的窗口 API。
• macOS 原生截图扩展使用同一签名可执行文件的短生命周期子进程及每用户互斥 lease，解决已复现的多个存活 Runtime 间 SCK 回调停滞。未知输入结果不会自动重放。
• SDK 与 worker 同步固定为官方 CUA 0.35.4 组件预发布版本，源码 d74a9cab3fb2e80ab7f0cef47025ec828586ea75；未修改上游内核。

安装

macOS Apple Silicon（macOS 14+）：

curl -fL https://github.com/caelis-labs/desktop-world/releases/download/v0.1.0-rc.9/dtw-darwin-arm64 -o dtw
chmod +x dtw
./dtw install agy

Windows x64（PowerShell）：

Invoke-WebRequest https://github.com/caelis-labs/desktop-world/releases/download/v0.1.0-rc.9/dtw-windows-amd64.exe -OutFile dtw.exe
.\dtw.exe install agy

对应 Agent CLI 需已安装；Claude Code 用户可改用 dtw install claude。标准 Plugin Host 可用 dtw install plugin --to <新目录>。详见安装指南。macOS 桌面权限应授予实际启动 Agent 的应用；Windows 可能需要 x64 Visual C++ Runtime，发行文件未做 Authenticode 签名。

实际验收范围

• 双平台源码 CI和发行候选构建均通过。macOS 构建包含 Developer ID 签名、hardened runtime、Apple 公证 Accepted、内嵌 worker 字节比对及在线票据检查；Windows 候选为 unsigned。
• 2026-10-16 在 Windows 11 家庭中文版 x64 10.0.22631、125% 显示缩放下，直接验收本次发布的 Windows 候选文件；两平台下载文件的 SHA-256、源码版本和 Windows 展开后的 worker 哈希均已核对。
• Windows 通过 5 项本地 release-mode Rust 测试、MCP/回执协议、隐式 state、独立进程隔离、外部 receipt 拒绝、旧 session 无执行拒绝、并发请求拒绝、许可证清单及含中文/空格路径的独立安装（731 项文件校验）。发布前对同一单文件候选再次运行 MCP、回执、Runtime 隔离和 native pass-through 检查，均通过。
• DPI-aware WinForms fixture 通过窗口发现、截图几何、精确前台焦点、中文/emoji/多行输入、恰好一次语义提交、Ctrl+S 独立磁盘读回、截图点击及 capture 重用拒绝、checkbox、菜单及 20 轮设值/磁盘读回。文件选择器检查仍失败，见下文。
• 独立 Chrome profile 通过 UIA、Unicode/多行键盘输入、可信 submit 与 UI 读回、缩放截图点击/capture 重用拒绝、5 轮重复输入提交及可信滚轮事件。未操作用户现有浏览器 profile 或文档。
• macOS GUI 验收沿用 PR #35及RC.9 验收记录：三窗口 fixture、过期/移动/关闭/遮挡等观察拒绝、多 Runtime 交替/并发截图，以及同源本地包的 WPS/Obsidian 窗口与菜单效果读回。本轮 Windows 审查未重新执行 macOS GUI、签名或票据命令。
• 在上述已覆盖范围内，未发现 #35 新增回归。旧 session 参数被拒绝是本版明确的兼容性变化。Windows 全功能验收仍为未通过；按本次发布决定，以下已知上游限制不阻塞 RC.9，不将失败项改记为通过。

保留的 Windows 上游限制

1. DPI-unaware 截图错位。 125% 缩放下，fixture 绿色按钮的 PNG 边界为 [198,206,155,39]，UIA screenshot_frame 为 [250,257,194,50]，存在约 52×51 像素位置偏差。检测到错位后未发送像素输入。优先使用可验证的语义控件，发送坐标输入前核对同一张最新截图与目标几何；不能把此候选视为 DPI 问题已修复。跟踪 CUA #3342。
2. 语义点击打开模态窗口时会等待 provider。 文件选择器已经打开，5 秒后原执行仍为 running，同一 Runtime 无法继续执行处理该对话框的脚本。测试由第二个独立 Runtime 观察并取消对话框后，原调用约 9.34 秒时完成；应用只记录一次打开，关闭后普通语义操作恢复。该结果不证明永久死锁，也不证明取消请求能立即中断 provider。跟踪 CUA #5012 / #5046。
3. 前台像素点击后的焦点校验可能报告失败。 本次点击实际打开自有文件选择器，但返回 foreground_unavailable；随后通过只读观察定位真实对话框，完成预设 fixture 文件选择并独立记录 OK，原打开动作未重发。失败回执不代表没有 UI 效果；须先对账原 execution 和可见 UI，不能盲目重试。相关跟踪 CUA #2681。

未覆盖：混合 DPI/多显示器实时输入、提权/UIPI 与安全桌面、干净机器的运行库/权限首次配置、真实外部 Agent 宿主 fresh-session 发现，以及任意应用窗口的完整归属。macOS 多显示器虚拟光标位置也不能用作实际输入效果的证明。动作回执表示交付，仍需独立观察 UI 效果。

源码和校验

RC.9 标签及候选源码：79a097b3b479fbf65926fdd6a58c296d8d1e1e1e。随附 BUILD-*.json 与 .sha256 记录两平台构建和签名证据；发布资产直接提升自已验收的候选构建。

• macOS arm64 dtw-darwin-arm64 SHA-256：40ba7c0656280541d93d0f4dc394aa445166b4625317d1ca854aae2b30dcaa81
• Windows amd64 dtw-windows-amd64.exe SHA-256：98ccb7b3e0b6b0e164436448bd3aea7ada3a5e5c64c436ead8f96a719e83c6ce

Desktop World v0.1.0-rc.8

Desktop World v0.1.0-rc.8

每个平台只需下载一个 dtw 可执行文件。dtw install 会从文件内展开固定版本的 CUA worker、Desktop World Skill、Agent Plugin 1.0 / Claude 兼容 manifest 和许可证清单，再接入 Agent；安装时不需要 Rust、Python、Node 或额外下载 worker。

macOS Apple Silicon

curl -fL https://github.com/caelis-labs/desktop-world/releases/download/v0.1.0-rc.8/dtw-darwin-arm64 -o dtw
chmod +x dtw
./dtw install agy

Windows x64 (PowerShell)

Invoke-WebRequest https://github.com/caelis-labs/desktop-world/releases/download/v0.1.0-rc.8/dtw-windows-amd64.exe -OutFile dtw.exe
.\dtw.exe install agy

已安装 Claude Code CLI 的用户可改用 dtw install claude。需要嵌入 Caelis Bot 等标准 Agent Plugin Host 时，可运行 dtw install plugin --to <新目录>，由 Host 管理插件生命周期。dtw install caelis 仍需 Caelis 的 headless 插件安装接口。安装、升级和卸载说明见 README 与 安装指南。

本版将默认 MCP exec 回执收敛为短 id 和 CUA 原始脚本文本；长文本直接标记截断长度，完整结果可按同一 id 取回。不会重复返回字节数、图像计数或推测的 UI 效果字段。

发行工作流在 macOS 对 DTW 和内嵌 worker 做 Developer ID 签名、公证及在线票据检查，并验证单文件展开后 worker 字节一致；Windows 构建与插件/MCP 检查由 Windows runner 完成。下载后的 macOS 文件与展开的 worker 又独立通过了哈希、签名、公证和 MCP 启动检查。Windows 可执行文件未签名，尚无本版原生 GUI 验收。

源提交：10d6c056222fd0756f87493a8db62761e34331e7；发行构建 双平台通过。随附的 BUILD-*.json 记录了固定 CUA 源码版本、两平台检查及签名证据。

• macOS arm64 dtw-darwin-arm64 SHA-256：399b1c444ce94f921746f99ecbdbf86c0f920092ff8793f87856f2ae4adba255
• Windows amd64 dtw-windows-amd64.exe SHA-256：f10aa4641e91f5a2213145addde76eef9b4a3a0b4121af68b4d25347a96bff12

**验收范围：**同源的本地单文件候选在 macOS 上经 agy CLI fresh session 发现 Skill 和 MCP，完成隔离的 Chrome、Obsidian 新建仓库和 WPS 新建 DOCX 任务，并有独立读回。全新 Mac 的 Gatekeeper/权限流程、Claude fresh-session 使用、Caelis Bot 集成及本版 Windows GUI 操作属于后续验收。多显示器下 CUA 虚拟光标可能画在主屏幕；不要用光标位置判断目标操作是否成功。详见 验收记录 和 发行边界。

macOS 桌面权限应授予启动 Agent CLI 的应用（例如 Terminal.app），授权后完全退出并重开。Windows 可能需要 x64 Visual C++ Runtime。本版为 prerelease。

Desktop World v0.1.0-rc.4

rc.4 发布薄 Rust/CUA 实现：DTW 提供插件打包、唯一 MCP exec、执行回执和有限状态，桌面操作由固定版本 CUA 原生 worker 执行。

升级需要重新安装完整插件包（含 libexec/ 和 LICENSING/）。旧 Go 实现及 dtw.app 脚本 API 已移除，新脚本使用随包 Skill 中的 cua API。上游发行的 worker 不能直接替换本包的固定源码构建。

本次修复 Windows 权限探测参数和焦点回执摘要，更新 Windows 区域查询配方，并加入独立安装、协议、原生窗口和 Chrome 验收。发行归档由合并后的 tag 在 Windows x64、macOS arm64 CI 原生构建。Windows 实际候选包通过本地交互式核心验收；macOS 通过构建、打包、协议及安装检查，未重新做 macOS Agent GUI 验收。各项范围和归档校验和见 ACCEPTANCE.json、BUILD-*.json 和 SHA256SUMS。

已知 CUA 上游限制（直接绕过 DTW 亦复现，本次经用户授权跳过）：

• 125% 缩放下，DPI-unaware 窗口的截图与元素坐标可能错位。
• 语义 Invoke 打开模态文件对话框后，调用可能持续等待。
• 截图点击打开模态对话框后，可能返回 foreground_unavailable；原动作可能已经生效，应查询原回执并只读核对 UI，避免重发。

这些问题可在 CUA 原生层修复；本包维持 pin ac967b9006aafa10870aadb5a645b038cba9721a，不声称完成所有 Windows GUI 场景验收。详见责任与许可证审计。本次改动见 PR #33。

许可证已在发布前重新核验：双平台锁定依赖清单、原始许可证/版权声明、内嵌 Inter 字体 OFL 1.1 声明及 Rust 运行时声明随包提供。6 个 UniFFI MPL 2.0 组件的完整、未修改对应源码置于 LICENSING/MPL-SOURCES.tar.gz，无需另行下载。DTW/CUA 的 MIT 授权不替代这些依赖各自的条款。

Windows 需要兼容的 x64 Visual C++ Runtime。PowerShell 7、Python、Rust 和 Visual Studio 仅用于源码打包或验收，已安装插件不需要；CUA 完整性诊断使用 Windows 自带 PowerShell 5.1。Windows 包未签名，macOS 包为 ad hoc 签名、未 notarize。本次为 prerelease。

Desktop World v0.1.0-rc.3

Desktop World v0.1.0-rc.3 修复 macOS Chrome 的 set_checked 语义投递问题。Issue #22 / PR #23。

源码提交：43172bb1f3dd26b90a88c346bc9978cbabab5785。 两平台预编译包、对应源码归档、包内 SDK/docs 与 manifest 均来自该提交。请下载 SHA256SUMS 和 ACCEPTANCE.json，核对归档与实际运行的 bin/dtw version 或 bin/dtw.exe version。

macOS Chrome 154 的 checkbox 曾报告可写 AXValue，但写入成功后 DOM 和 input/change 均不变化。此版从新鲜的 0/1 状态执行一次广告的 AXPress 并继续自动验证；已达目标不投递。空值/无语义动作、禁用及 Chromium 只读控件在投递前拒绝，不转成键鼠，也不重放未知结果。AppKit 的 press-only checkbox 继续可用。

实际验证： macOS 27.0.1 arm64 / Chrome 154.0.8037.98 上，下载的 Mac 包内 helper 在全新私有 profile 与合成页面经直接 host SDK 完成 false→true→true→false。回执依次为 complete/verified、not_applicable/verified、complete/verified；原请求 Reconcile 保持同一 RunID。独立 DOM 仅有两组 input/change。同一包内 helper 的禁用、ARIA 只读和 reduced-AX 场景在投递前拒绝且 DOM 未改变；AppKit F6/F7、系统 WebKit F8 和独立 Electron 44.5.1 checkbox fixture 均通过应用侧业务日志。Electron 较大范围的完整操作脚本在 11 项通过后遇到不相关的 ambiguous_target 上下文菜单绑定，整轮未记为通过。

自动验证： 合并提交的 Linux、macOS、Windows contracts 与 macOS native-build CI 全绿；同提交的 macOS arm64、Windows amd64 原生打包 workflow 全绿。Windows ZIP 是本次同提交重新编译的原生包，并通过其 runner 自动检查；本轮没有 Windows GUI 实机复测，不能把 rc.2 的 Windows 交互结果记为 rc.3 复测。Mac helper 严格 ad-hoc 签名验证通过、未公证；Windows helper 未签名。

两个源码归档的 396 个文件路径一致。Mac 源码与合并提交逐字节一致；Windows 源码的 373 个文本文件仅有 CRLF/LF 差异，归一化后与合并提交一致，二进制文件一致；每个平台包内 source/ 与其独立源码归档逐文件一致。许可为 MPL-2.0，第三方通知随包分发。TypeScript、Python、Rust SDK 随源码/平台包提供，本轮未向 npm/PyPI/crates.io 发布。更多环境、应用 provider、Windows GUI 与公证状态请按 ACCEPTANCE.json 的边界理解。

Desktop World v0.1.0-rc.2

Desktop World rc.2 提供同会话动态 APP 授权、未启动 APP 声明、单份 cooperative 焦点/键鼠计划，以及 Go / TypeScript / Python / Rust SDK。默认审计只保留元数据，支持碰撞轮转和显式 append 检查。

发布提交：e7b53a1812fe3892cf8e4b903479d208dfaa0104。 PR #19 已合并；Windows 验收与环境 和附件 ACCEPTANCE.json 记录同提交、同 Windows helper 的验收与分发身份。

• Windows 11 实机通过 Chrome 表单与 20 轮 cooperative、Notepad 保存、Calculator、Win32 原生控件/截图、Electron 32 轮及菜单/对话框、UIA 大树分页、Go 宿主管道、动态授权/撤权/重启/EOF 等流程。业务效果由应用日志和最终文本独立确认。
• 解压包的 TS / Python / Rust SDK 在独立目录安装后，各完成 Unicode 输入、恰好一次提交、原请求去重和前台恢复。Python/Rust 运行不依赖 Node。全套本机检查与八项三平台 CI 通过。
• 修复 Windows 的跨进程 UIA provider / HWND owner 检查、退出实例失效、原生指针生命周期和同身份 COM 接口更新；原生树滚动经过独立可见性验证。

Windows ZIP 是本机实际验收的原包。Mac arm64 包从同一提交在 macOS 原生重新编译，manifest、严格 ad-hoc 签名检查及哈希通过；源码 ZIP/TAR 逐文件核对，文本仅有平台 CRLF/LF 差异，二进制一致。Mac 交互证据仍为 Issue #20 已记录的 e17a528 基线，后续生产变化仅影响 Windows，没有将此次构建称为最终提交的新 Mac 交互实测。

下载对应平台归档及 SHA256SUMS，校验后解压，运行 bin/dtw.exe version/doctor/schema 或 bin/dtw version/doctor/schema。包内 clients、docs、source 对应同一提交，预编译 helper 无需 Go。TypeScript/JavaScript 需要 Node；Python/Rust 不需要 Node。许可为 MPL-2.0，语言 SDK 注册表本轮未发布。

这是 pre-release：Windows 包未签名，Mac 包 ad-hoc 签名、未经公证。已验收范围是登录单屏桌面的 Windows 11 amd64 和原 Mac arm64 场景；更多系统版本、Windows arm64、多屏/RDP、复杂 IME、视觉/Canvas grounding 与通用 LLM 任务成功率仍待扩展。后台语义执行和短 cooperative 前台借用均可用，应用 provider 与 OS 前台规则仍适用。

故障边界保持显式：目标退出时只读 wait 的验证可为 unknown，但独立日志确认原点击/释放与无后续提交；宿主 EOF 中断可返回无原回执的 session_unknown，通过应用日志和新的只读观察确认有限效果，不自动重放。脱敏证据包含这些边界，未公开私有 wire、owner、截图、脚本内容或用户文档。

Mac 最终提交验收交接 #21 已提供包哈希、环境与复验清单。

Desktop World v0.1.0-rc.1

Desktop World v0.1.0-rc.1 publishes Windows amd64 and macOS arm64 packages for scoped native desktop observation, semantic actions, window capture, bounded input plans, Go managed helpers and persistent JavaScript sessions. Source and both platform packages use commit 5c3ca121c2204840d1b57cb2556d080b2e20dc55; the latest merged main has the identical tree.

Windows 11 amd64 native acceptance covers Chrome navigation and 20 cooperative rounds, Notepad exact disk saving, Calculator, Win32 controls and capture/lifecycle behavior, Electron 44.5.1 with 32 fresh form tasks, UIA continuation, managed-pipe revocation and persistent JavaScript Ref/Epoch use. The helper, SDK and native backend source is unchanged from Windows-accepted commit 92ac6c3bd5587ad7abf56b92ff3efe72569e7acb. The published Windows ZIP was cross-built on Mac from the final source; these new bytes were not rerun on Windows. The adapter entrypoint path fix and 21 JavaScript regressions pass Windows CI.

Final extracted Mac package acceptance on macOS 27.0.1 arm64 passes F1/F2/F3/F6/F7/F8/F9, two extra F1 samples, full AppKit/Chrome/Electron operation scenarios, TextEdit exact UTF-8 disk saving, Go SDK grants and EndTurn revocation, and two separate JavaScript exec calls with the same Ref/Epoch. Cancellation, lease expiry, human application switching, restart/old-Ref rejection and target exit are covered by independent business logs and original receipts. Ten feature PNGs and three provider PNGs were individually viewed. Full details, retained failed samples and limitations are in ACCEPTANCE.json; controlled Mac evidence is in MAC_ACCEPTANCE.tar.gz. Full wire traces and desktop inventories remain private.

Mac acceptance found and fixed two issues: the F9 oracle now permits AppKit's native parent dimming only while a sheet is attached, while retaining green-content and child-pixel exclusion checks (#16); the JavaScript CLI now starts through filesystem aliases such as /var and /tmp, with symlink/junction and import regressions (#17). No desktop execution behavior changed in those fixes.

Validation includes race, vet, builds, protocol examples, 21 JavaScript checks, native fixture compilation and three-platform CI. Each platform manifest records the clean revision, version, license and signing state; complete corresponding source and license notices are included. Verify downloads with SHA256SUMS. Licensing is MPL-2.0, with Go/runtime and applicable third-party notices.

The accepted desktop matrix is ordinary permissions, a logged-in single-screen Windows 11 amd64 or macOS arm64 desktop. Mac binaries are ad-hoc signed and not notarized; Windows binaries are unsigned. Mac Intel/minimum macOS, Windows 10/arm64, mixed-DPI multi-screen, RDP/locked sessions, complex IME, arbitrary providers and actual Bot/Wails integration remain outside the validated matrix. Cooperative input shares physical devices and briefly borrows the foreground; it does not provide independent system input. Old Common Controls v5 ScrollItem failures retain their original HRESULT without keyboard/mouse replay; Windows Electron native menus were accepted through real shortcuts/dialog callbacks where UIA menu items were absent. Graceful shutdown is verified; forced termination with held input does not guarantee cleanup. Helper restart creates a new Epoch and does not preserve cross-process refs or deduplication.

Acceptance handoff: #15