v3.5.2

[3.5.2] - 2026-06-13

Changed

• peekaboo type and the MCP type tool now default to zero-delay linear typing; supplying --wpm/wpm still opts into human cadence.
• Hardened the maintainer release workflow around 1Password credential consistency, non-login shells, and neutral-directory npm verification.

Fixed

• Synchronized Tachikoma's OpenAI gpt-5-chat-latest catalog metadata so configured models apply the correct GPT-5 parameter filtering.

Verification

• Exact-head CI: https://github.com/openclaw/Peekaboo/actions/runs/27461393769
• npm: https://www.npmjs.com/package/@steipete/peekaboo/v/3.5.2
• Registry tarball: https://registry.npmjs.org/@steipete/peekaboo/-/peekaboo-3.5.2.tgz
• npm integrity: sha512-sWUONq77kBoLdPOb1z/2pWBgzZWtiwl0SJr56VN5xieyqD/rScgn9mCHX4cVMPvxnx5jZ3X5TxIA9HcBxZtD/w==
• Universal CLI SHA-256: ba60251b759b8dfa564ae71bc6f543aa8269cf8939cd9289921e993bd116edef
• macOS app SHA-256: 2e645fdd21fd5158a394fb58c2c839f455973b20ae8cb9d7676b3afb961ab120
• macOS app notarization accepted and ticket stapled (submission 179ad83e-a3d2-4668-bcc9-96dd6312834b).

v3.5.1

[3.5.1] - 2026-06-12

Fixed

• peekaboo see now returns at its configured wall-clock deadline when suspended capture or detection work ignores task cancellation, while preserving explicit command cancellation.
• Corrected the install guide to clarify that the macOS app and CLI are separate downloads.

Verification

• Tag commit: 6a932d0004d898bda35884601e85678544c7a9c2
• Artifact build commit: 6a932d0004d898bda35884601e85678544c7a9c2
• npm: @steipete/peekaboo@3.5.1
• Registry tarball: peekaboo-3.5.1.tgz
• npm integrity: sha512-+I5Tv+7VnusjEBkCbfRLrr/VZhNM5bhZgYrCrBqPM8+LsDdiJLvH4lh9TnudBvGQdEz0waZ9ltJI32N1uFyJtA==
• npm published: 2026-06-13T04:24:40.990Z; latest points to 3.5.1
• macOS app: Developer ID signed, Apple notarization accepted (17680d23-59b7-4f3d-9915-4c0e25f72445), ticket stapled, Gatekeeper accepted
• CI: macOS CI passed on the tag commit
• Proof: pnpm run test:safe (509 tests, 68 suites); pnpm run lint (0 errors); pnpm run lint:docs; pnpm run docs:site; clean autoreview; release artifact checksum and app zip verification
• SHA-256: CLI 1dff75b61e534e3cc0204f0435913bbcec587a64403ccea17a732561cd5a7f31; npm ec2ed30b3cbd99d28d1ac117c9f0fa72ae54e2f89738dd531fe8dd154f6d6839; app 6b1f0281c40cd7284b98cb9cc00db9a626fc67b33042459eddd2b56cf35f98a2

v3.5.0

[3.5.0] - 2026-06-12

Added

• peekaboo agent now supports explicit Claude Fable 5 (claude-fable-5) selection with 1M context and 128K max output while keeping Anthropic defaults on Opus 4.8 for zero-retention compatibility.

Changed

• Agent runs now honor the saved agent.temperature and agent.maxTokens values shared by the CLI and macOS Settings UI, clamp them to each provider's capabilities, infer Fable limits through compatible providers, and omit unsupported sampling parameters for GPT-5 and current Anthropic reasoning models.
• Project, issue, build, release, and app About links now use the canonical openclaw/Peekaboo repository.

Fixed

• Bridge hosts now use atomic lease-backed socket ownership and bounded nonblocking transport, keep Peekaboo.app and the reusable daemon on distinct paths while preserving the healthy app's TCC-backed fallback, preserve lifecycle settings while migrating legacy daemons, prevent MCP from hosting a bridge listener, safely recover stale sockets, and release abandoned client connections instead of wedging. Thanks @Artifact-LV for #184.
• Legacy screen and area capture now fails with a permission or native capture error instead of returning wallpaper-only/redacted pixels from background sessions. Thanks @VishalJ99 for #185.

Verification

• Tag commit: 231fa4837001f627ed0146a34cb80c942fbdb56a
• Artifact build commit: 0f66ff5c247d0bd871ee97c93eef6fd2b1ec8aa7
• npm: @steipete/peekaboo@3.5.0
• Registry tarball: peekaboo-3.5.0.tgz
• npm integrity: sha512-lYnEluSMJOm0wsxSaUndl7dXKEzkuzPruBGxR7dI+tdge2KxuRKYPzzCGiwwKwPmLWC165pqClvE9ft7Veyxaw==
• npm published: 2026-06-12T18:50:09.667Z; latest points to 3.5.0
• macOS app: Developer ID signed, Apple notarization accepted, ticket stapled, Gatekeeper accepted
• Proof: pnpm run prepare-release; pnpm run test:safe (507 tests, 68 suites); pnpm run lint; pnpm run lint:docs; pnpm run docs:site; clean autoreview
• SHA-256: CLI 974d98f6c9ac026092eafeaebb7af8c039c02e06884224a0f3ddb5fa14a2280f; npm 7174f21affe47733802cb3620981dc8095976fab64f74fbf7aa64a282a4a3ba0; app 1b2b2486662797e70e1624eee76c992e1bdd4390de34d78bf61c377b4abafeba

v3.4.1

[3.4.1] - 2026-06-10

Fixed

• peekaboo agent now resolves saved custom providers, xAI/Grok, Gemini 3.5 Flash, Claude Opus 4.8, and GPT-5.5 model selections before falling back to unavailable built-in defaults. Thanks @udiedrichsen for #182.

v3.4.0

[3.4.0] - 2026-06-07

Added

• MCP now exposes the bounded capture tool for live/video frame capture, contact sheets, metadata, and optional MP4 output. Thanks @coygeek for #169.
• Added dedicated CLI wrappers for MCP-only browser/page and accessibility-tree inspection via peekaboo browser and peekaboo inspect-ui. Thanks @coygeek for #173.
• Added peekaboo capture action, which records adaptive live capture around a child command with pre-roll, post-roll, timeout, artifact validation, and optional MP4 output. Thanks @coygeek for #171.

Changed

• Documented background vs. foreground input delivery across the README, automation guide, quickstart, permissions, and interaction command docs.
• Clarified that peekaboo tools lists the MCP/agent tool catalog rather than top-level CLI commands. Thanks @lonexreb for #174.

Fixed

• Action-only scroll now reports an empty target as unsupported, and generic process scripts preserve menu, modifier, drag, and type flag aliases. Thanks @coygeek for #178 and #179.
• Clipboard writes now count companion text toward the large-payload guard and return previews for UTF-8 plain-text representations. Thanks @coygeek for #180.
• Bridge-backed CLI JSON errors now preserve bridge message/details and map permission failures to permission-specific error codes. Thanks @coygeek for #181.

Release Proof

• npm package: https://www.npmjs.com/package/@steipete/peekaboo/v/3.4.0
• npm tarball: https://registry.npmjs.org/@steipete/peekaboo/-/peekaboo-3.4.0.tgz
• npm integrity: sha512-JGO1qgoQGNBWqEXkgRSfBhj7ve5Rx02Bul4woqotNErRFqkZzLF5mDrbD/12L0YeG33wWiBNeWNGV/8M92b/Sw==
• npm published: 2026-06-07T07:18:40.455Z
• CI: https://github.com/openclaw/Peekaboo/actions/runs/27085904190
• Local proof: SwiftLint passed, warning scan clean, 485 safe tests passed, universal CLI signed with Developer ID, notarization accepted for submission 4f1127e0-f849-4893-822d-57e165dcb79d, app zip stapled and assessed, release artifact checksums verified.
• Asset SHA-256: Peekaboo-3.4.0.app.zip 66d1aadf9ffaaa4bdc9dc7577177b97fb6e8c25467f258db8f1b09fe09702ed3
• Asset SHA-256: peekaboo-macos-universal.tar.gz fbfa42f2db3c239ca51fe0f742802637891d2b222efa681e6ab9ec96880fca5e
• Asset SHA-256: steipete-peekaboo-3.4.0.tgz d514d6728bc8062e1da7f0ad91a59604a38d1b2d80e5804d6b54435d3ce56889

v3.3.0

[3.3.0] - 2026-06-01

Added

• peekaboo agent now supports MiniMax China via minimax-cn/... models and MINIMAX_CN_API_KEY, while preserving the existing international MiniMax endpoint. Thanks @LLuke for #161.

Changed

• peekaboo click, type, hotkey, press, and paste now use background process-targeted delivery by default when a target PID/app/window/snapshot process can be resolved, with --foreground for focused foreground input.

Fixed

• Background text input now prefers AX text editing for typing, paste, clear, and focused-field key presses so targeted apps stay in the background more reliably.
• Background text paste no longer snapshots or restores the user clipboard, positional peekaboo paste "text" works again, and background cmd+a selects focused text fields via AX.
• peekaboo open --app Finder ... now resolves Finder from CoreServices, matching the documented examples.
• Visualizer settings and capture-engine docs now reference peekaboo capture live instead of stale top-level peekaboo watch/peekaboo capture command forms. Thanks @coygeek for #166 and #167.

Verification

• npm: https://www.npmjs.com/package/@steipete/peekaboo/v/3.3.0
• Registry tarball: https://registry.npmjs.org/@steipete/peekaboo/-/peekaboo-3.3.0.tgz
• Integrity: sha512-5VfZ/Xr4KG1Hh4AC1kcQof7SdiNJK0jgSqElW4HErkj9e2hPNft59mJYpZDZnBRQ7JRX3ZJz3vwpx7A8R5+sAA==
• Published: 2026-05-31T23:41:15.713Z
• Proof: SwiftFormat, SwiftLint, warning gate, pnpm run test:safe (463 tests), notarization, appcast validation, npm registry verification.

v3.2.3

[3.2.3] - 2026-05-24

Added

• peekaboo image --json now reports capture coordinate diagnostics and warns when window captures look blank or solid.

Fixed

• Interaction commands now accept --snapshot latest explicitly and window/app capture failures list rejected capture candidates.

Release proof

• npm: https://www.npmjs.com/package/@steipete/peekaboo/v/3.2.3
• registry tarball: https://registry.npmjs.org/@steipete/peekaboo/-/peekaboo-3.2.3.tgz
• integrity: sha512-0+NJGpJVNnwTYiw/ApL7VNYCMJkOIHHxQqR8qJubzm7EKRt3tVu7CdqHs1lXkpcdJaJ5PYeGGDngj+PeUlPxFA==
• published: 2026-05-24T04:33:55.374Z
• proof: autoreview clean; pnpm run test:safe; node scripts/prepare-release.js; notarized app zip accepted; GitHub assets verified; npm latest points to 3.2.3

v3.2.2

[3.2.2] - 2026-05-22

Added

• GameBridge manifests now let peekaboo see expose Firestaff/SDL game UI zones from GPU-rendered windows. Thanks @yeager for #152.

Fixed

• peekaboo agent now accepts OpenRouter model IDs and can use OPENROUTER_API_KEY from env or credentials. Thanks @delort for #155.

Release Verification

• npm package: https://www.npmjs.com/package/@steipete/peekaboo/v/3.2.2
• registry tarball: https://registry.npmjs.org/@steipete/peekaboo/-/peekaboo-3.2.2.tgz
• npm integrity: sha512-MV2heuhtWJPf8H1KwYGyfcXlOqKEMtuZNlOH9CA7gG7iXRsX28qEjCy/DTUWbTnKKeIsbrVi9SGjxfMLBIrXFg==
• proof: pnpm run lint, pnpm run test:safe, universal CLI build, Developer ID signing, Apple notarization accepted, Sparkle appcast XML validated.

v3.2.1

[3.2.1] - 2026-05-18

Fixed

• peekaboo click --coords now treats coordinates as target-window-relative when app/window target flags are supplied, reports resolved target metadata, and requires --global-coords for targeted global clicks.
• peekaboo-mcp now shuts down cleanly during restart backoff and repairs executable permissions without shelling out through an install path.
• pnpm run peekaboo:dev no longer depends on a hardcoded local checkout path.
• peekaboo agent now tells models to use the current tool schema instead of stale tool names and arguments. Thanks @vyctorbrzezowski for #139.
• AX element detection now honors traversal budgets and reports truncation when depth, count, or per-node child limits are reached. Thanks @vyctorbrzezowski for #140.
• peekaboo agent and MCP clients now have an inspect_ui tool for AX-only UI text/control inspection without capturing screenshots. Thanks @vyctorbrzezowski for #141.
• Window-mode capture now falls back to desktop-independent ScreenCaptureKit filters when multi-display setups cannot map a window to an enumerated display. Thanks @lonexreb for #147.
• peekaboo agent guidance now routes AX-only observation through inspect_ui consistently while keeping screenshot-backed checks on see. Thanks @vyctorbrzezowski for #144.
• Custom provider docs, CLI help, and macOS settings now prefer ${VAR} API key references and shell examples that preserve them literally. Thanks @scotthuang for #142.
• peekaboo agent now refreshes desktop context before each model turn and wires opt-in action verification through the configured capture strategy. Thanks @lonexreb for #148.
• AX traversal budgets now have wider defaults plus CLI, MCP, and environment overrides for complex app trees. Thanks @widdowson for #150 and #151.

Release Proof

• npm: https://www.npmjs.com/package/@steipete/peekaboo/v/3.2.1
• npm tarball: https://registry.npmjs.org/@steipete/peekaboo/-/peekaboo-3.2.1.tgz
• npm integrity: sha512-EemQV/dh2pM3NjhYNeCwN5z2xVnNCRtiG/lOpUWCG9D11ebaY8mgoKoNAACjDcWwIsSB+tAhzYj9F1Y5bee70A==
• npm published: 2026-05-18T13:56:48.898Z
• macOS app: signed, notarized, stapled, and spctl accepted as Notarized Developer ID.
• Local proof: pnpm run lint, pnpm run format, pnpm run test:safe, universal CLI build/package verification, checksum verification, appcast XML validation.
• Assets: Peekaboo-3.2.1.app.zip, peekaboo-macos-universal.tar.gz, steipete-peekaboo-3.2.1.tgz, checksums.txt.

v3.2.0

[3.2.0] - 2026-05-15

Added

• peekaboo click --focus-background and the MCP click tool now support process-targeted background mouse delivery for apps identified by --app, --pid, or snapshot metadata.
• peekaboo agent now supports MiniMax M2.7 through Tachikoma's Anthropic-compatible provider path. Thanks @xiaofeiwa for #130.
• peekaboo agent now accepts ollama/<model> and lmstudio/<model> local model selections, including local-only provider defaults. Thanks @0x5845 for #137.

Fixed

• Ollama vision model IDs such as qwen2.5vl:3b now stay intact through Tachikoma model parsing instead of falling back to llama3.3 (#16).
• peekaboo agent now initializes with Gemini-only or MiniMax-only credentials instead of falling back to an unavailable OpenAI/Anthropic default. Thanks @lonexreb for #133.
• Window captures now retry transient SCScreenshotManager failures before reporting a minimized/off-screen/Space hint. Thanks @lonexreb for #135.
• The macOS app now keeps one status item/controller across app state reconnects and removes the status item on teardown, avoiding duplicate or ghost menu bar icons. Thanks @lonexreb for #134.
• Release automation now verifies CLI, npm, macOS app, checksum, appcast, and uploaded GitHub assets before publish.
• peekaboo type --json now separates requested text from executed key actions, making escaped special keys such as \n visible to agents without losing backwards-compatible typedText.
• peekaboo permissions status --all-sources now compares Bridge and local TCC permission state side by side, so daemon grants are no longer confused with CLI grants.
• peekaboo mcp serve --transport ... now rejects invalid transport names instead of silently starting stdio mode.
• peekaboo paste --app ... now fails before mutating the clipboard when the requested app cannot be found.
• peekaboo agent no longer sends stale Anthropic extended-thinking options to Claude Opus 4.7 and now exits with failure when agent execution fails.
• Command timeout JSON now reports the intended timeout error instead of occasionally surfacing cancellation as an unknown error.
• Refreshed CLI docs and quickstart examples to use current flags such as image --path, click --coords, type --return, press --count, and scroll --amount.

Performance

• Debug CLI startup no longer spawns git config on every launch when build-staleness checking is disabled, cutting startup-heavy command latency by more than 30% in local testing.

Release Verification

• npm: https://www.npmjs.com/package/@steipete/peekaboo/v/3.2.0
• npm tarball: https://registry.npmjs.org/@steipete/peekaboo/-/peekaboo-3.2.0.tgz
• npm integrity: sha512-Lwpruo1iYEeTFAsyybmTGEOFbuH5qqpDc3j1bQfz8XOLgBERbPpnLooY931rjg/ysmc7ALyP/Jx9zYKALiECzw==
• npm published: 2026-05-15T04:43:18.471Z
• GitHub tag: v3.2.0 at b0d17c2
• Notarization: accepted submission 842aa9b3-28ce-4288-bc4f-1dd60c1d28bf; app zip verifies as Notarized Developer ID.
• Preflight: pnpm run prepare-release passed SwiftFormat, SwiftLint, compiler warning scan, and pnpm run test:safe with 438 tests.
• CLI artifact: Peekaboo 3.2.0 (main/b0d17c23) verified from peekaboo-macos-universal.tar.gz.

Checksums

255ded65abdedfc61d0c2e9decfa0eb206c26ca916d1519f16d8f83dcc1af444  peekaboo-macos-universal.tar.gz
4696d2c392ea2fbb062f7b4e0eebe8c70796d5fecf4a4685329848bacfc364bd  steipete-peekaboo-3.2.0.tgz
e0048492bc90890cc11ad6e4c51f9b0b2cb23ede258456ef7c55c8c6819c32fb  Peekaboo-3.2.0.app.zip