v0.5.0

This release improves the reliability of existing Mac control tools and makes failed or uncertain actions easier for agents to handle.

• Reject ambiguous AX targets, invalid window bounds, failed activation, and unsafe background fallbacks before input. Preserve explicit window targets through batches and field filling, and avoid closing sibling documents when a selected window disappears.
• Stop failed batches, release held input on interruption, restore clipboard contents before paste returns, preserve Unicode, and prevent modifier leakage into later typing. Verify Open dialog paths before submitting them.
• Correct Chromium semantic-click delivery, avoid launching a second default-profile app when attaching, fail closed when ownership cannot be verified, preserve unchanged OpenCode configuration, and improve credential scrubbing.
• Clarify observation, action, and verification guidance while retaining all 48 tools and existing parameters. The loaded tool schema is about 9% smaller; this is not a claim about model accuracy or task speed.
• Add 55 portable regression tests, real AppKit/browser/Electron fixtures, both MCP major-version CI checks, and release gates that reject stale Mac evidence and private/generated package content.

Validation: all 48 tools exercised through real MCP on macOS 26.5.2 with MCP 1.28.0 and 2.1.1; independent native app state, Chrome page events, Electron file contents, cross-app drops, background cursor/focus preservation, and clean-wheel discovery/input-free calls checked. Hardware coverage was one display. Physical emergency-shortcut acceptance remains a separate manual check. Input delivery metadata does not establish task completion; observe the outcome after actions.

Update an existing installation with klyk update. Shared-install clients load the update when their servers restart; separately pinned or bundled installations need their own update.