oab-instance-mcp 0.6.6

Highlights

Linux hands node now runs on a headless server with no desktop (verified on an Intel N95
mini PC, Ubuntu 24.04 Server), not just a Raspberry Pi with a screen. Same three-artifact release
as 0.6.5; macOS behaviour unchanged.

Artifacts

Platform	Asset
macOS (universal, signed + notarized)	oab-instance-mcp-0.6.6-universal.pkg, .app.zip
Linux arm64 (Raspberry Pi, aarch64)	oab-instance-mcp-0.6.6-linux-arm64.tar.gz
Linux amd64 (x86-64)	oab-instance-mcp-0.6.6-linux-amd64.tar.gz

Each has a .sha256. Linux install:
docs/linux-setup.md.

What's changed since 0.6.5

• Headless-server support (#34): install-linux.sh --headless-seat runs sway with the
  headless wlroots backend as a user unit (one 1920×1080 virtual output) for boxes with no
  desktop. Installer now detects the seat's Wayland socket, falls back to Playwright's Chromium
  where the distro has none (Ubuntu), writes the AppArmor userns profile Ubuntu 24.04 needs so
  Chromium's sandbox stays on, forces Wayland + en-US locale, installs fonts, and sets
  KillMode=process. Verified end to end: lent to an openab-pty session, 37 tools, browser
  navigate/snapshot.
• Module split behind a Desktop trait (#33): the Linux PoC is now auth / http / mcp /
  attach / tools/* / platform/{desktop,linux/wlroots}, so a second backend (portal, macOS)
  is a drop-in.
• Reverse-attach grants match the Connect MacGrant contract (#28): 202 + standard
  fields, GET/DELETE /attach/{id}, one grant per runtime+session with replacement.
• Release pipeline (#35, #36): the Linux tarball jobs now share the release environment
  approval with the macOS job (they no longer time out), and retry dispatch is documented to run
  on the tag ref.

Full Changelog: v0.6.5...v0.6.6