Week of October 19, 2026

Features

• Add browser_select for native HTML select — #5232.
• Let agents approve Cua Driver's macOS prompts when the owner authorizes it — #5467.
• Recovery hints on refusals and unverifiable results — #5493.
• Install the skill pack when setting up an agent, and add get_guide — #5491.
• Optional brief foreground step for native drag-and-drop on macOS — #5481.
• Publish cua-sdk and the proto contract so you can build your own harness (CUA-1902) — #5532.

Fixes

• List untitled X11 windows the window manager manages — #5341.
• Ask for macOS's direct-capture consent during setup, not over the user's window (CUA-1792) — #5352.
• Don't open a background web <select>; steer to set_value (CUA-1795) — #5353.
• Install Antigravity skills in IDE and CLI directories — #5226.
• Verify macOS target focus before dispatching keys — #5372.
• Derive the macOS desktop point ratio from the display mode instead of a screenshot — #5340.
• Keep rendered controls visible in semantic_v2 and report not_rendered for background tabs — #5256.
• Deliver background drags in Electron windows through the main process (CUA-1207) — #5351.
• Count a bundle-identifier capture approval as consent (fixes hosted macOS preflight) — #5402.
• Leave focus on a dialog the clicked app opened — #5258.
• Uninstall keeps macOS permissions unless asked; release gate pins the app signing requirement — #5460.
• Report a locked screen and keep the display awake while an agent works — #5483.
• Match path-style app grants against the full executable path — #5505.
• Keep the pointer out of macOS window screenshots — #5480.
• Launch the installed app by path, stop daemons from any copy, drop extra copies — #5471.
• Let the client wait out the largest tool budget — #5526.
• Refuse background menus bound to sibling windows — #5520.
• Accept the GNOME helper only from the session's Shell — #5496.
• Restrict Windows launch candidates to the receipt process family — #5561.
• Let launch_app take the .app path that list_apps reports — #5525.
• Refuse unsafe GNOME 50+ helper startup — #5565.
• Avoid unsafe zero-delivery retry advice for macOS web typing — #5560.
• Scale Windows foreground scroll targets from the screenshot context — #5567.
• Stop macOS EINVAL flake in daemon client and settle capture/menu tests on conditions — #5558.
• Keep an ended session's master pointer until its popup menu closes — #5254.
• Discover native Wayland windows in desktop snapshots — #5368.
• Deliver window-only foreground hotkeys through the HID activation guard — #5522.
• Report unknown tools accurately — #5579.
• Handle Add-Type failure on non-ASCII locales — #5581.
• Windows list_windows omits the driver's own overlay windows — #5566.
• Fix Windows selected-browser launch guidance — #5583.
• Keep GNOME element actions inside the requested window — #5585.
• Report Windows tree completeness — #5582.
• Suspend the target GUI thread while posting a Windows click — #5584.
• Classify DOM click effects with readback — #5586.
• Recover rootless XWayland browser identities — #5597.
• Retry unverified macOS window prefetches — #5605.
• Track cursor placement explicitly — #5603.
• Undo the GTK4 CSD inset before at-point ownership checks — #5610.
• Verify foreground Document text insertion — #5587.
• Never send a Windows foreground drag to the window covering the target — #5616.
• Distrust the compromised eMudhra intermediates in every Cua client (CUA-1948) — #5622.

Performance

• Read macOS bundle plists in process — #5369.
• Faster batched steps and window reads, and a nudge to batch — #5487.

Thanks to @1111david, @CMGS, @Kenmege, @SunkenInTime, @ZIXT233, @abonneth, @ceckert, @ethanblake4, @fynixart, @howardxie-dev, @hqhq1025, @loonghao, @omoi0kane, @only21mil, @saariuslystoned, @tlq5l, @wszkxlllll for contributing.