Machine Control desktop 0.7.2

• Access you turned on no longer turns itself off silently. On macOS an
  ordinary network clock sync could look like a different login and stop
  Desktop and Browser access; Windows did the same whenever another session
  held the console or one session check failed, and Linux after a GNOME
  Shell restart. Now only another login actually holding the screen
  interrupts access, and only as a pause: agents see
  console_session_elsewhere, and the same access resumes when your
  session returns.
• The macOS unlock helper no longer treats a clock sync as a different
  login, which could refuse a locked-use unlock or skip a relock.
• Install and restart works while access is on. Machine Control stops
  access, installs the update, restarts, and turns the same Desktop and
  Browser access back on, keeping any timed access's original end time.
  Running or waiting agent tasks end; Settings asks first when one exists.
• The Browser card explains why no profile can be chosen: it offers to
  install the Chrome extension when none is connected, to update one too
  old for profiles, or to enable the profile in the extension's side
  panel, plus brief troubleshooting steps.
• Settings and the menu bar/tray status no longer wait for the shared access
  policy process. A slow policy process under heavy load could previously
  freeze Settings on macOS or make Machine Control give up on its resident
  on Linux and Windows.
• Give the Linux and Windows resident longer to answer than its own policy
  calls, and 30 seconds to start on Linux, so a slow moment is reported
  instead of ending the resident.
• If the background resident stops responding or loses its policy process,
  Machine Control restarts it and turns the same Desktop and Browser access
  back on, unless you changed access in the meantime. On macOS this restarts
  the app. A Linux resident that fails to start no longer quits the app.

Machine Control desktop 0.7.1

• Simplify access settings with an overall On/Off switch, separate Desktop
  and Browser switches, and one Apply/Discard footer for edited choices.
• Choose immediate starts, a configurable heads-up, or explicit approval
  independently for Desktop and Browser.
• Move live task approvals, delayed starts, Pause, Continue and Cancel into
  Activity, with compact native notices and clearer menu bar/tray status.
• Configure how long Desktop yields after deliberate human input and whether
  it resumes the approved task or asks again. Automatic return still warns
  before taking control; protected safety checks retain their own requirements.
• Keep Browser automation running during ordinary computer use. It no longer
  automatically yields to physical input; Activity and access switches retain
  manual control. Explicit foreground browser operations can still interfere
  with concurrent Desktop input.
• Replace presentation profile names with concrete startup choices and retain
  original task, owner and consent deadlines across delays and interruptions.

Machine Control Chrome extension 0.9.0

Submitted to the Chrome Web Store for automatic publication after Google's review. The receipt records the API result; this release does not mean review has finished.

The ZIP is the exact package CI tested; its build record (source revision and SHA-256) and store receipt are attached.

Machine Control desktop 0.7.0

• Give Desktop and Browser independent Off, Ask first and Automatic modes on
  Windows, macOS and Linux, using one shared TypeScript policy engine and a
  privately bundled Node runtime.
• Add predictable takeover warnings, native approval, Start now, per-task
  deferral, timed or manual pauses, Resume and Stop. Deliberate human input
  interrupts desktop work; mouse movement alone does not.
• Support explicitly enabled, named Chrome profiles across desktop platforms.
  Approval and browser --profile select exact profiles; connection loss,
  stale references and Stop cannot redirect work to another profile.
• Include supported CDP and page JavaScript in Browser permission. Keep
  Desktop permissions independent, including browser access while locked.
• Update Settings and native task controls for the shared permissions model.
  Restart restores access choices but no live control authority; explicitly
  enable the intended surfaces and browser profiles after upgrading. Named
  profiles require the matching Chrome extension 0.9.0 or later.
• Keep the Python CLI and SDK, automatically renewing supported live owners
  under their original consent. Use --no-renew for an intentionally finite
  task; Stop, disconnect, claim loss and consent expiry still end access.
• Preserve the actual refusal reason when browser profile discovery meets a
  session transition, without dispatching or replaying the requested action.
• Keep Linux warnings visible while Settings has focus, add an explicitly
  installed read-only physical-activity observer, and reap the policy child
  even when its native parent crashes. Ordinary effects remain AT-SPI/portal.

Targets all six desktop architectures. Bounded native ARM64 appliance evidence
for Windows, macOS and GNOME Wayland Linux is documented separately from
signed candidate acceptance. Physical human-input classification, other Linux
compositors and broader display/hardware configurations require qualification.

Machine Control desktop 0.6.11

• Remember selected access scopes and duration across Settings and app restarts,
  including browser permissions and Until I turn it off. Stop keeps access off.
• Deliver native multiline text correctly on Mac, and retain closed guardian
  health/timing diagnostics when covered control ends unexpectedly.
• Keep covered Mac browser accessibility available with fully opaque painted
  covers, verified independently of the agent's filtered capture.
• Support negotiated renewal of the same live Mac control owner under existing
  approval, with finite protected deadlines and unchanged Stop/watchdogs.
• Keep heartbeats, Stop and status responsive during Mac covered startup,
  preserve native references through renewal and handle locked display handoff.
• Require covered reliability, real-duration expiry, same-owner renewal and
  disposable-workspace cleanup in candidate acceptance from 0.6.11.
• Make the Chrome Web Store the primary browser extension setup path on Mac,
  Windows, and Linux. Keep bundled Developer mode installation under secondary
  instructions, with folder copying only when explicitly requested.

Targets all six desktop architectures. Mac ARM64 candidate acceptance covers
the documented one-display VM profile; physical takeover, lid/wake, multiple
displays and SIP-enabled qualification remain separate. The historical
intermittent guardian fault remains under investigation.

Machine Control Chrome extension 0.8.4

Submitted to the Chrome Web Store for automatic publication after Google's review. The receipt records the API result; this release does not mean review has finished.

The ZIP is the exact package CI tested; its build record (source revision and SHA-256) and store receipt are attached.

Machine Control Chrome extension 0.8.3

Submitted to the Chrome Web Store for automatic publication after Google's review. The receipt records the API result; this release does not mean review has finished.

The ZIP is the exact package CI tested; its build record (source revision and SHA-256) and store receipt are attached.

Machine Control desktop 0.6.10

• Authorize typed browser dialog inspection and handling through Windows
  control sessions under the existing browser scope.
• Preserve operator arming when Mac covered startup or a provider fails.
  End the finite task, fence desktop work and recover from fresh locked,
  healthy and quiet conditions. Explicit Stop, original expiry and console
  changes still invalidate consent. Search multiple login windows without choosing an
  ambiguous password field.
• Repair approved but unreachable Mac helpers after app replacement, allow
  bounded cold signature validation and avoid validating the full app twice.
  Keep a missing admission-status sample from disabling an already admitted
  task; retain live guardian, root watchdog and OS permission checks. Drain
  final completion before judging guardian exit, without reviving expired
  heartbeats or blocking on partial covered frames.
• Run root-driven Mac relock through a pinned lock-only helper in the original
  console's GUI session, with independent lock readback. Refuse covered arming
  when that route is unavailable and end active use on fresh root fault evidence.
• Keep the display awake through the bounded covered-startup handoff with a
  kernel-limited display-only assertion; wait for prior root cleanup before
  admitting the next task.
• Keep browser discovery, dialog handling, release and unrelated tabs
  responsive when page work stalls. Cancel expired queued actions, report
  dispatched uncertainty, and protect new routes from stale callbacks.
• Wait boundedly for native file-panel confirmation readiness after path/name
  entry; a disabled or unknown button remains unpressed.
• Add typed browser dialog inspection/handling and sanitized route recovery
  diagnostics. A missing dialog event is reported as unobserved.
• Accept validated bounded COW workspace estimates in scoped tasks while
  continuing to refuse unknown acquisition outcomes.

Machine Control desktop 0.6.9

• Fix the installed Mac app crashing while choosing a browser download or
  upload location. Read keyboard-layout properties on the main thread while
  keeping file-dialog and accessibility work on the provider worker.
• Show when a previous Mac session ended without a clean shutdown, with
  unfinished-operation context and build identity in diagnostics. Add an
  explicit, reviewed OS crash-report export; ordinary exports still exclude
  those reports and nothing is uploaded automatically.
• Keep bounded diagnostics for thirty days on Mac, Windows and Linux.
  Preserve matching Mac executable and native-framework symbols separately
  from the installers.
• Refuse old browser references and queued actions after access ends or
  changes, including native-host reconnection and app restart.
• Require acceptance of the exact signed Mac package before publication,
  including real downloads/uploads, native file dialogs, Settings, Stop,
  forced-exit recovery and diagnostic export.
• Replace the Windows covered-desktop setup file picker with native local
  account password enrollment and update/removal actions. Enrollment does not
  grant ordinary control; browser access while locked remains independent.
  Full signed enrollment/unlock/relock acceptance is still pending.

Targets all six desktop architectures. Mac ARM64 exact-package acceptance is
required for this release. Intel/physical GUI execution and the new Windows
enrollment lifecycle remain separate from build and signature verification.

Machine Control desktop 0.6.8

• Add the default-off Allow approved browser access while locked setting
  on Mac, Windows and GNOME Wayland Linux. Existing browser approvals retain
  their expiry; desktop control and broader approvals remain gated. Pause,
  Stop, expiry and session loss still end or suspend access. Scripts and
  DevTools require their separate approval.
• Add desktop dialog choose --path PATH on Mac for native Open/Save panels,
  keyboard-layout and modifier-remapping fixes, reliable empty accessibility
  text values, bounded observation identities and exact certificate
  trust-settings prompt recognition.
• Include the candidate persistent Python MCP session with compact trees,
  capture-bound input, explicit activation and owned claim/session cleanup.
  Improve offline help, claim arguments, queued deadlines and provisioning
  journal error reporting.
• Add secret-free Mac covered-unlock diagnostics. The reported physical-Mac
  password-panel discovery failure remains unresolved.
• Fix Linux release verification to require the new locked-browser runtime
  modules, and include nested extension assets such as icons.
• Fix Windows CI coverage of POSIX-only session publication. Windows keeps
  refusing file-based session IDs pending native ACL validation; explicit
  tool/session-environment identities remain available. Report lease-renewal
  failures correctly when they occur before a scoped child starts. Keep Linux
  preference persistence tests on POSIX and test logon identity with a portable
  fixture UID.

Includes the changes from unpublished 0.6.5 through 0.6.7, targeting all six desktop
platform/architecture packages. Source-native VM acceptance covers locked
browser click/text effects and tab capture on Mac, Windows and Ubuntu GNOME
Wayland, plus Windows streamed per-tab DevTools. Mac keyboard, native identity
and Python-session acceptance retain their bounded fixture coverage. Physical
hardware, sleep, Intel Mac execution, other Linux desktops and signed installed
feature acceptance remain separate. The Linux browser fixture used an empty,
explicitly unsandboxed Chrome for Testing profile.