Week of July 13, 2026 - Cua Changelog

cua-driver

Add consent-aware telemetry — Cua Driver and Lume now support persistent disable, reset, and identity-data purge controls. #2211.
Add privacy-bounded session telemetry — Session duration, tool, action, error, and transport usage are aggregated across CLI, daemon, and MCP paths. #2227.
Cover CLI, MCP, and cursor usage — Bounded telemetry covers CLI operations, MCP client kinds, and cursor state while keeping GUI test harnesses isolated by default. #2228.
Add YAML and Rego permission policies — Administrators can restrict which tools the driver may execute. #2235.

Require an explicit page JavaScript target — Multi-window applications now fail closed instead of silently executing against the wrong page. #2166.
Move install and uninstall downloads to cua.ai — Driver scripts now use the stable distribution endpoint. #2152.
Report Windows delivery and capture honestly — Background actions no longer claim success when input was not delivered, and minimized-window capture returns an explicit unavailable result. #2180.
Correct Linux Wayland targeting — Window identity, accessibility geometry, WebKitGTK bounds, and scrolling now target the intended window position. #2182.
Harden Windows and macOS input delivery — Windows controls scroll into view before acting, background typing appends instead of replacing, and macOS clears stale modifier keys before typing. #2193.
Keep installer recovery on the stable endpoint — Windows recovery no longer relies on GitHub's latest-release redirect, and attribution hints stay off when telemetry is disabled. #2214.
Discard raw telemetry IP addresses — Location enrichment retains only country-level data. #2217.
Preserve telemetry across macOS re-execs — Daemon lifecycle and permission-gate events now survive responsibility and permission transitions. #2224.
Emit tool-completion telemetry once — A single owner records each completion, avoiding duplicates between the MCP proxy and daemon. #2225.

Thanks to @hqhq1025 for contributing.

Release: 0.3.16.

Default new macOS VM disks to 100 GB — Linux keeps its 50 GB default, and explicit disk-size overrides remain unchanged. #2191.
Add consent-aware telemetry controls — Content-free usage events exclude prompts, screenshots, file paths, and other sensitive data, with persistent disable, reset, and purge controls. #2211.

Support macOS 26 SIP authorization — Recovery automation handles the new authorized-user prompt while remaining compatible with older guests. #2203.