github trycua/cua nightly-cua-driver-rs-v0.38.1-nightly.20261025.40174952744
on GitHub

pre-release3 hours ago

Cua Driver 0.38.1-nightly.20261025.40174952744 (nightly)

Automated immutable nightly built from an exact main commit. Nightlies are
opt-in, may be less stable than regular releases, and never replace stable
update discovery.

Source

Changes

  • Fix: report live running state for accessory apps. (#3456) Thanks @xronocode.
  • Fix: honor modifiers during X11 drags. (#3618) Thanks @usedhonda.
  • Fix: accept every Enter-key spelling in the Linux terminal gate. (#3658) Thanks @bennybuoy.
  • Fix: send a real key repeat rate on Hyprland agent keyboards. (#4358)
  • Fix: keep the Windows autostart task when an isolated install or failed registration would remove it. (#4284) Thanks @dajiaohuang.
  • Ci: run the desktop E2E gate in the nightly build. (#4355)
  • Chore: update Electron to 43.7.6 in the Cua Driver TypeScript SDK. (#4361)
  • Fix: report native Wayland modified-drag refusals with a stable code. (#4360)
  • Fix: reveal the agent cursor for keyboard-first actions. (#4287)
  • Feat: add jev-use density modes to the Windows harnesses. (#4354)
  • Fix: resolve element tokens against a snapshot store invalidated on read. (#3873) Thanks @r33drichards, @injaneity.
  • Ci: check dependency licence compatibility. (#4364)
  • Build: add Omarchy profile measurement and rebuild guidance. (#4383)
  • Docs: state the pixel budget and image-blind verification paths. (#4353) Thanks @BoneLiu.
  • Test: cover Lume python preflight. (#4306) Thanks @Iflaqbhat.
  • Test: preserve foreground pixel route evidence. (#3884) Thanks @lorenzozanee.
  • Fix: run the cursor event loop when PiP is enabled. (#4304) Thanks @ZenAlexa.
  • Fix: keep Windows update --apply from killing its own installer. (#4398) reported by @Feighery89.
  • Feat: merge updated sdk from cua-staging. (#4397) Thanks @injaneity, @r33drichards.
  • Fix: hash downloads with .NET instead of Get-FileHash. (#4418)
  • Fix: list every windowed instance of a bundle in macOS list_apps. (#4421)
  • Fix: attribute #4418 and #4421 in the 0.32.0 changelog. (#4425)
  • Fix: accept verbatim and junctioned Windows browser installs. (#4467) Thanks @qtqjcz.
  • Fix: validate Windows capture handles. (#4333) Thanks @AnvitDevadiga; reported by @ART1KZ.
  • Fix: support rotated Hyprland outputs. (#3969) Thanks @osamahbeig.
  • Fix: report recoverable UIA timeouts as warnings. (#3959) Thanks @lorenzozanee.
  • Fix: point the macOS CDP-port error at browser_prepare, not launch_app flags. (#2931) Thanks @biztex.
  • Feat: auto-link skills for Pi. (#4049) Thanks @kvnloo; reported by @tyxlb.
  • Fix: rank titled macOS launch windows first. (#4048) Thanks @Iflaqbhat; reported by @0xsline.
  • Fix: refuse ambiguous macOS browser AppleScript. (#4051) Thanks @kvnloo.
  • Fix: constrain element_token tool schemas. (#4318) Thanks @kvnloo.
  • Fix: extend first Linux snapshot budget. (#4375) Thanks @Iflaqbhat, @kvnloo.
  • Feat: let embedding hosts set the macOS key gap. (#3489) Thanks @hyprcat.
  • Fix: validate get_window_state window via exact Win32 lookup. (#4505) reported by @nothingtolose09-sys.
  • Fix: map Windows browser window rect into Chromium DIP layout. (#4506) reported by @Feighery89.
  • Fix: resolve sheet elements to their parent window. (#4507) reported by @muness.
  • Fix: re-resolve visible windows on a stale Space view. (#4509) reported by @muness.
  • Fix: deduplicate macOS browser setup identities. (#4466) Thanks @Iflaqbhat.
  • Fix: close the menu a failed macOS invoke_menu path opened. (#4484) Thanks @Ed-Key.
  • Fix: count an erroring macOS toggle press when its value moved. (#4485) Thanks @Ed-Key.
  • Fix: refuse set_value on Finder file name cells instead of confirming a rename that never happened. (#4483) Thanks @Ed-Key.
  • Fix: drain Windows foreground input before restoring focus. (#4500) Thanks @wszkxlllll.
  • Fix: keep idle X11 cursor overlays unmapped. (#4529) Thanks @Iflaqbhat.
  • Fix: let verify_state read label-less display text on macOS. (#4531) reported by @kianwoon.
  • Fix: make the macOS background drag refusal explicit. (#4533) reported by @kianwoon.
  • Fix: omit AX-less AppKit helper windows from macOS list_windows. (#4534) reported by @kianwoon.
  • Fix: scrub the Claude MCP registration the CLI actually creates. (#4546) Thanks @c8dhjp4tyv-bit.
  • Fix: keep the CLI fallback inside the ownership check. (#4546) Thanks @c8dhjp4tyv-bit.
  • Fix: make Claude MCP cleanup path-owned. (#4546) Thanks @c8dhjp4tyv-bit.
  • Test: isolate uninstaller process inspection. (#4546) Thanks @c8dhjp4tyv-bit.
  • Test: cover missing Python during MCP cleanup. (#4546) Thanks @c8dhjp4tyv-bit.
  • Fix: fail safely when Claude ownership cannot be inspected. (#4546) Thanks @c8dhjp4tyv-bit.
  • Fix: make Windows MCP removal guidance ownership-safe. (#4546) Thanks @c8dhjp4tyv-bit.
  • Test: lock down Windows MCP ownership guidance. (#4546) Thanks @c8dhjp4tyv-bit.
  • Fix: remove UTF-8 BOM from Windows uninstaller. (#4546) Thanks @c8dhjp4tyv-bit.
  • Test: cover remaining Claude cleanup safety gaps. (#4546) Thanks @c8dhjp4tyv-bit.
  • Fix: close remaining Claude cleanup safety gaps. (#4546) Thanks @c8dhjp4tyv-bit.
  • Test: cover foreign dangling launcher. (#4546) Thanks @c8dhjp4tyv-bit.
  • Fix: preserve foreign dangling launcher. (#4546) Thanks @c8dhjp4tyv-bit.
  • Test: cover foreign dangling canonical launcher. (#4546) Thanks @c8dhjp4tyv-bit.
  • Test: keep dangling regression with ownership suite. (#4546) Thanks @c8dhjp4tyv-bit.
  • Test: cover relative MCP command ownership. (#4546) Thanks @c8dhjp4tyv-bit.
  • Fix: reject relative MCP commands as ownership evidence. (#4546) Thanks @c8dhjp4tyv-bit.
  • Fix: keep the uninstaller parseable by bash 3.2. (#4546) Thanks @c8dhjp4tyv-bit.
  • Fix: tie Claude MCP cleanup to actual release removal. (#4546) Thanks @c8dhjp4tyv-bit.
  • Test: consolidate uninstall ownership fixtures. (#4546) Thanks @c8dhjp4tyv-bit.
  • Fix: match "..." to the ellipsis in macOS menu paths. (#4578) Thanks @Ed-Key.
  • Fix: repair native Hyprland foreground regressions. (#4396)
  • Test: repair the macOS Lume acceptance lane. (#4601)
  • Test: require a modern Tk in the Lume seed. (#4604)
  • Fix: settle started browser consent before claim completion. (#4595)
  • Fix: drain committed consent work through timeout. (#4595)
  • Test: qualify the Omarchy Edge kit for Driver 0.33.2. (#4395)
  • Fix: refuse set_value on Finder's Get Info Name field. (#4614) Thanks @Ed-Key.
  • Fix: support multi-monitor Hyprland desktops. (#4305) Thanks @Iann29, @CARLOSDAVID33; reported by @praxis1244-consulting.
  • Fix: recognize captured Chinese browser consent. (#4590) Thanks @loonghao.
  • Fix: prefer the owned macOS browser profile endpoint. (#4384) Thanks @injaneity, @Irfanwani.
  • Feat: six agent cursor motion styles. (#4659)
  • Fix: keep Chromium tabs alive under gVisor on arm64. (#4658)
  • Feat: choose the cursor motion in start_session and a saved default. (#4670)
  • Fix: draw the comet trail from the arrow's body, not its tip. (#4673)
  • Fix: scope macOS health permission guidance. (#4674)
  • Fix: post a background right click once on macOS. (#4690)
  • Perf: front-load efficient workflow, trim hot tool descriptions (CUA-1195, CUA-1198). (#4742)
  • Fix: do not report a submitted type_text as partial delivery. (#4741)
  • Fix: on macOS, accept element_token without pid and say what to do after refusals. (#4739)
  • Fix: on macOS, set_value selects options of AppKit and Chromium pop-up buttons. (#4740)
  • Fix: resolve latest release without the rate-limited REST API. (#4757)
  • Feat: get_window_state returns lean output by default: compact markdown only (no elements), at most 250 nodes unless max_elements is set, and no _note or background_input unless verbose: true; pass full_output: true for the previous full response; the typed SDKs keep the full response unless a shape is requested (CUA-1192). (#4743)
  • Feat: get_window_state since: <snapshot_id> returns only the rows added, changed or removed since that snapshot, or no change (CUA-1193). (#4743)
  • Feat: add run_actions batch tool (CUA-1194). (#4737)
  • Feat: plan cursor motion with the new cua-cursor-motion crate. (#4758)
  • Feat: plan cursor motions from the SDKs through UniFFI. (#4767)
  • Docs: drop the stale Unreleased block from the changelog. (#4770)
  • Fix: on Windows and Linux, accept element_token without pid; a stale token is refused as stale_element_token. (#4773)
  • Fix: repair non-native Linux tool registry. (#4715)
  • Fix: on Windows, set_value on a native combo box selects the option (or types into an editable one) so the app's change handlers run, and refuses an unknown option. (#4774)
  • Fix: on Linux, set_value selects GTK combo-box options through AT-SPI Selection, closes any popup its keyboard fallback opens, and no longer fails that fallback with action_outcome_mismatch. (#4775)
  • Docs: correct trope-cua attribution for cursor motion. (#4760)
  • Fix: ignore hidden helper windows and serialize foreground focus on macOS. (#4821)
  • Fix: remove lean-read failure modes and make batching the default path. (#4812)
  • Fix: accept scroll dx/dy and handle get_window_state in run_actions. (#4831)
  • Fix: activate browsers fully and keep the field focus before foreground typing. (#4835)
  • Feat: run_actions steps that find, wait for and check by name. (#4820)
  • Feat: run_script tool: sandboxed JavaScript (QuickJS) that drives the driver's own tools in one call, with wall-time, driver-call, heap and stack limits (on by default since #4936) (CUA-1214). (#4822)
  • Fix: list the menu items when an invoke_menu segment is missing. (#4857)
  • Fix: post a mouse-moved event after a desktop pointer warp on macOS. (#4854)
  • Fix: accept common spellings of key names on macOS. (#4858)
  • Fix: let a get_window_state query search the whole window. (#4855)
  • Fix: make run_actions take the shapes models send and recover from stale targets. (#4859)
  • Fix: refuse background submits into a Chromium address bar. (#4856)
  • Fix: accept invoke_menu and zoom shapes models send, point named direct actions to run_actions. (#4862)
  • Fix: say when a tooltip needs the app under the pointer active. (#4865)
  • Fix: break same-name ties by exact role and the acting tool in run_actions finds. (#4863)
  • Fix: refuse background pixel clicks LibreOffice cannot receive. (#4864)
  • Fix: pass CUA_DRIVER_RS_ENABLE_WAYLAND through to embedded hosts. (#4877)
  • Fix: wait for EIS to acknowledge libei input before replying. (#4880)
  • Feat: add display_only to get_window_state for live previews. (#4881)
  • Fix: scroll Electron windows in the background through accessibility. (#4861)
  • Fix: run menu-bar item tokens as invoke_menu and keep rows for stale-token re-finds. (#4886)
  • Perf: reuse one session-bus connection for the GNOME helper. (#4879) Thanks @injaneity, @louistiti.
  • Feat: capture GNOME windows from their own actor (WinRects v10). (#4882)
  • Fix: one-turn route for background-refused batch steps and index-less name misses. (#4891)
  • Perf: leaner window reads: collapse closed menus, drop noise rows and metadata. (#4892)
  • Fix: keep a failed run_actions report readable within client error limits. (#4897)
  • Ci: requalify the plugin for every Hyprland build. (#4910)
  • Perf: return quiet actions after 300 ms instead of the full 1 s window watch. (#4915)
  • Perf: cap macOS screenshots at 1366 px by default, desktop captures included. (#4917)
  • Fix: in-repo callers (Spaces permission approver, macOS image probe, cua-s1, Hyprland proofs, jev-use and samples) ask get_window_state for elements explicitly; the operate guide has a "Before updating to 0.35" checklist (https://cua.ai/docs/cua-driver/guides/operate#before-updating-to-035). (#4913)
  • Perf: filter list_windows by app and steer discovery away from host-wide lists. (#4916)
  • Fix: say macOS list_apps omits unknown fields, and test it. (#4925)
  • Feat: rename run_actions to run_steps; run_actions stays a hidden alias until a future release. (#4935)
  • Feat: run_script is on by default on macOS, Windows and Linux: sandboxed JavaScript (QuickJS, driver-only cua API, time, call and memory limits) that drives the driver's own tools in one call, for loops, branches and retries; turn it off with CUA_DRIVER_DISABLE_RUN_SCRIPT=1 or "disable_run_script": true in ~/.cua-driver/config.json (CUA_DRIVER_EXPERIMENTAL_SCRIPT=0 still works; =1 is no longer needed); set_config cannot change it (CUA-1214). (#4936)
  • Fix: keep the user's key window during background work on macOS. (#4943)
  • Fix: put the user's window back above a background target that opens a menu on macOS. (#4955)
  • Fix: publish Vertex-compatible tool input schemas. (#4888) Thanks @injaneity, @kvnloo; reported by @Himanshu-0104.
  • Fix: pace Windows foreground type_text one readable unit at a time. (#4901) reported by @wszkxlllll.
  • Fix: macOS reverts a background target's self-activation (Chrome on cmd+L, GnuCash on a double-click) within tens of milliseconds and gives the user's window key focus back; pixel double_click now goes through click. Behaviour change: the pixel double_click result reads "Posted double-click to pid …", and it needs a get_window_state screenshot of the window first, like click (CUA-1341). (#4976)
  • Fix: close the staging handle before removing it on Windows. (#4979) Thanks @DaveTseng2019.
  • Fix: reap finished daemon connection tasks. (#4980) Thanks @luochen211; reported by @adargham.
  • Fix: wait for the keymap restore before closing the connection. (#4981) Thanks @CMGS.
  • Fix: drop the foreground resend hint from delivered macOS hotkeys. (#4982) Thanks @Ed-Key.
  • Fix: set_value on macOS fails with write_not_applied when the read-back shows the value did not move (LibreOffice Calc cells), instead of returning "Sent (unverified)". Behaviour change. (#4977)
  • Fix: move_cursor with a window target on macOS reads window screenshot pixels and moves only the agent cursor; a background app sees no hover, and the result says so. Behaviour change (CUA-1342). (#4977)
  • Fix: the macOS background drag refusal names non-drag routes first. (#4977)
  • Fix: let embedded hosts disable the daemon update check. (#4985) Thanks @SunflowersLwtech.
  • Fix: normalize Windows skill junction paths. (#4983) Thanks @AyinLee987.
  • Fix: on macOS, set_value and type_text's accessibility write into a document's text area now also send a net-zero key edit (space, backspace) so the document registers the change and saves it; before, TextEdit kept the old content (Bench v2 DS-07). Behaviour change: one extra "Typing" undo step. (#4989)
  • Fix: screenshot windows on another Space on macOS (CUA-1351). (#4996)
  • Feat: background hover on macOS without the user's pointer: a window-target move_cursor reveals hover-only controls through AXShowAlternateUI, or hovers an Electron page through webContents.sendInputEvent (CUA-1342). (#5005)
  • Fix: click on macOS refuses an unknown AX action name instead of pressing the element, and accepts show_alternate_ui / show_default_ui. Behaviour change. (#5005)
  • Fix: document macOS trusted background limitation. (#4986) Thanks @lorenzozanee; reported by @coygeek.
  • Fix: exit 64 for cua-driver extension usage errors. (#4959) Thanks @methanoya; reported by @coygeek.
  • Fix: move macOS windows on another Space with set_window_frame. (#4636) Thanks @FredAmartey.
  • Fix: refuse background existing-profile attach on macOS instead of bringing Chrome forward. (#5007)
  • Fix: prevent Linux accessibility-bus deadlocks. (#4903) Thanks @factory-ain3sh.
  • Feat: the agent cursor now defaults to steady timing: every move takes at least 600 ms with a gentle ease, so short moves no longer look like a snap; long moves keep their time. New selectable timings relaxed (450 ms floor), calm (750 ms floor) and deliberate (slower Fitts) join native, fitts and fixed; cua-driver config set cursor.motion.timing native restores the previous timing. (#5044)
  • Fix: background mouse events always carry explicit modifier flags on macOS. (#5051)
  • Fix: point a background-disabled invoke_menu refusal at the foreground shortcut. (#5055)
  • Fix: stop advertising pid as required for element_token tools. (#5047) Thanks @JohnnyVizz.
  • Test: match the quoted segment in the AppKit invoke_menu refusal. (#5060)
  • Fix: skip AT-SPI frame rebase when the frame has no extents. (#4984) Thanks @kevinherron.
  • Feat: attach to an existing Chrome profile in the background when Chrome is on another Space (macOS). (#5052)
  • Fix: pixel type_text, press_key and scroll in the background focus their target again on macOS. (#5062)
  • Test: attach before the background oracles on macOS, then check the same-Space refusal. (#5063)
  • Fix: name the missing AT-SPI bus in the X11 background keyboard refusal. (#5070)
  • Test: pin Shift for mixed-case and symbol keystrokes on Linux. (#5067)
  • Test: expect the macOS background refusals in the invoke_menu and two-window gate cells. (#5078)
  • Fix: scroll an inner Electron scroller in the background on macOS. (#5079)
  • Fix: tolerate a transient UIA read and a twice-reported consent prompt on Windows. (#5082)
  • Fix: stop silent background failures in TextEdit and Finder on macOS. (#5057)
  • Fix: route browser pages to browser_prepare and refuse desktop pointer over background apps. (#5066)
  • Fix: minimal agent cursor badge by default; cursor.badges verbose restores the old badge. (#5053)
  • Fix: stop background actions from dropping a user keystroke on macOS. (#5091)
  • Fix: SDK create() prefers the daemon on macOS so the agent cursor works. (#5090)
  • Fix: print the named command's help for <command> --help. (#5083) Thanks @RitikaxG, @injaneity; reported by @coygeek.
  • Fix: wake Chromium AT-SPI content before the first application tree traversal. (#5074)
  • Test: pin the cursor showcase to cursor.badges verbose. (#5118)
  • Fix: refuse background Cmd+V when the browser focus is its omnibox. (#5124)
  • Fix: keep list_windows valid when macOS reports non-finite window bounds. (#5125) Thanks @injaneity, @kayzenline.
  • Ci: give Spaces, the SDK and the Python/npm packages the Cua Driver/Lume changelog and contributor credits. (#5127)
  • Fix: background browser clicks reach pointer-driven rows. (#5110)
  • Fix: share one approved Chrome connection across sessions. (#5115)
  • Fix: keep the Chromium screen rebase off a top-level frame that matches its window-manager frame. (#4967) Thanks @CMGS.
  • Ci: cache protoc and retry cargo/registry downloads. (#5130)
  • Fix: stop opening a console window for the embedded daemon on Windows. (#5136) Thanks @SunflowersLwtech.
  • Fix: keep background popups and context menus open on macOS. (#5129)
  • Fix: fail type_text when a character cannot be typed. (#5139) Thanks @CMGS.
  • Fix: preserve macOS middle-click window routing. (#5137) Thanks @Iflaqbhat.
  • Fix: exit 64 for an unknown permissions subcommand. (#5148) Thanks @UlviShukurzade.
  • Fix: preserve recording start timestamp in session.json. (#5145) Thanks @Iflaqbhat.
  • Fix: isolate Computer History under CUA_DRIVER_RS_HOME. (#5165) Thanks @AyinLee987.
  • Fix: give each character of a text its own spare keycode. (#5158) Thanks @CMGS.
  • Fix: write action.json timestamp as ISO-8601 as documented. (#5144) Thanks @methanoya.
  • Test: retry transient harness CDP target reads; report invalid E2E evidence without a panic. (#5164)
  • Fix: advertise coordinate scrolling support. (#5149) Thanks @Iflaqbhat; reported by @amplogik.
  • Fix: let CUA_LOG=info and debug raise the log level. (#5173) Thanks @Ed-Key.
  • Fix: type long Linux text in spare-keycode batches. (#5168) Thanks @CMGS.
  • Fix: stop worker and embedded processes launching Orca on GNOME. (#5179) Thanks @methanoya.
  • Fix: drain autoreleased objects on SCK capture workers. (#5170) Thanks @Irfanwani.
  • Fix: report every layer when list_windows is given a pid. (#5162) Thanks @bitomule.
  • Test: make the late-window change detector test deterministic. (#5203)
  • Feat: publish isolated browser session lifetime in browser_prepare. (#5183) Thanks @Iflaqbhat.
  • Fix: wait for the client before restoring a borrowed keycode. (#5172) Thanks @CMGS.
  • Fix: build macOS fixtures for the host architecture. (#5202) Thanks @loonghao.
  • Fix: list window rows in list_windows text content. (#5211) Thanks @Irfanwani.
  • Fix: print actionable PATH install hints. (#5219) Thanks @Iflaqbhat.
  • Fix: report actual browser delivery mode in public results. (#5222)
  • Fix: refuse unconfirmed macOS Electron scrolls. (#5251) Thanks @SDSLeon.
  • Fix: honor --pid-file in cua-driver status. (#5246) Thanks @methanoya.
  • Fix: skip web content during Chrome consent scans. (#5216) Thanks @Iflaqbhat.
  • Fix: report Linux and Windows permissions status instead of "not granted". (#5237) Thanks @RitikaxG.
  • Fix: say why a Windows desktop can't be captured (locked, RDP disconnected) (CUA-1727). (#5266)
  • Fix: stop a batched text before rebinding keycodes the client has not confirmed reading. (#5244) Thanks @CMGS.
  • Fix: background keyboard into editor surfaces and multi-window apps (CUA-1767). (#5306)
  • Fix: background menu/format controls and page reads on another Space (CUA-1768, CUA-1769). (#5307)
  • Feat: background drag on macOS (CUA-1207). (#5309)
  • Fix: make the addressed LibreOffice window key without activating (CUA-1767). (#5319)
  • Fix: wait for Chrome web content on first read; point background browser_prepare refusals to the AX route (CUA-1766). (#5305)
  • Docs: skill guidance from the Bench v2 background-gap RCA. (#5332)
  • Fix: refuse background drags in Electron windows and fix the AppKit drag cell. (#5335)
  • Fix: stop background actions from raising Chrome or re-activating the user's app (CUA-1309, CUA-1791). (#5334)
  • Fix: resolve launch_app to the app window, not a launcher splash. (#5342) Thanks @abonneth.
  • Fix: start the Python-bundled binary when another user owns the install. (#5339) Thanks @abonneth.
  • Fix: fail loudly when the unbundled daemon has no WindowServer connection (CUA-1777). (#5333)
  • Fix: keep the current tab's page out of the Chrome setup proof. (#5343) Thanks @abonneth.
  • Fix: list untitled X11 windows the window manager manages. (#5341) Thanks @abonneth.
  • Fix: ask for macOS's direct-capture consent during setup, not over the user's window (CUA-1792). (#5352)
  • Fix: don't open a background web ; steer to set_value (CUA-1795). (#5353) Fix: install Antigravity skills in IDE and CLI directories. (#5226) Thanks @Kenmege. Perf: read macOS bundle plists in process. (#5369) Thanks @hqhq1025. Feat: add browser_select for native HTML select. (#5232) Fix: verify macOS target focus before dispatching keys. (#5372) Thanks @fynixart. Fix: derive the macOS desktop point ratio from the display mode instead of a screenshot. (#5340) Thanks @abonneth. Fix: keep rendered controls visible in semantic_v2 and report not_rendered for background tabs. (#5256) Fix: deliver background drags in Electron windows through the main process (CUA-1207). (#5351) Fix: count a bundle-identifier capture approval as consent (fixes hosted macOS preflight). (#5402) Fix: leave focus on a dialog the clicked app opened. (#5258) Thanks @CMGS. Fix: cua-sandbox, cua-bench and the playground no longer depend on Fleet; remove cua-train (CUA-1834). (#5445) Refactor: remove the Fleet adapters and the @trycua/fleet package (CUA-1836). (#5456) Feat: let agents approve Cua Driver's macOS prompts when the owner authorizes it. (#5467) Fix: uninstall keeps macOS permissions unless asked; release gate pins the app signing requirement. (#5460) Feat: recovery hints on refusals and unverifiable results. (#5493) Feat: install the skill pack when setting up an agent, and add get_guide. (#5491) Feat: optional brief foreground step for native drag-and-drop on macOS. (#5481) Fix: report a locked screen and keep the display awake while an agent works. (#5483) Perf: faster batched steps and window reads, and a nudge to batch. (#5487) Fix: match path-style app grants against the full executable path. (#5505) Fix: keep the pointer out of macOS window screenshots. (#5480) Fix: launch the installed app by path, stop daemons from any copy, drop extra copies. (#5471) Fix: let the client wait out the largest tool budget. (#5526) Thanks @abonneth. Fix: refuse background menus bound to sibling windows. (#5520) Thanks @saariuslystoned. Ci: drop the cua-fleet release workflow, the gateway conformance tests and the Terraform smoke lane (CUA-1836). (#5490) Ci: advance installer version through a pull request, not a direct main push. (#5537) Chore: tidy the repo root (56 entries to 38). (#5464) Ci: enforce staging-first in Spaces and Cua Driver publish (CUA-1907). (#5539) Fix: accept the GNOME helper only from the session's Shell. (#5496) Thanks @only21mil. Fix: restrict Windows launch candidates to the receipt process family. (#5561) reported by @loonghao. Fix: let launch_app take the .app path that list_apps reports. (#5525) Thanks @tlq5l. Fix: refuse unsafe GNOME 50+ helper startup. (#5565) reported by @1111david. Fix: avoid unsafe zero-delivery retry advice for macOS web typing. (#5560) reported by @howardxie-dev. Fix: scale Windows foreground scroll targets from the screenshot context. (#5567) Thanks @omoi0kane. Fix: stop macOS EINVAL flake in daemon client and settle capture/menu tests on conditions. (#5558) Fix: keep an ended session's master pointer until its popup menu closes. (#5254) Thanks @CMGS. Fix: discover native Wayland windows in desktop snapshots. (#5368) Thanks @ceckert. Fix: deliver window-only foreground hotkeys through the HID activation guard. (#5522) Thanks @abonneth. Fix: report unknown tools accurately. (#5579) Fix: handle Add-Type failure on non-ASCII locales. (#5581) Fix: Windows list_windows omits the driver's own overlay windows. (#5566) Thanks @CMGS. Fix: fix Windows selected-browser launch guidance. (#5583) Fix: keep GNOME element actions inside the requested window. (#5585) Thanks @only21mil. Fix: report Windows tree completeness. (#5582) Thanks @ethanblake4. Fix: suspend the target GUI thread while posting a Windows click. (#5584) Fix: classify DOM click effects with readback. (#5586) Fix: recover rootless XWayland browser identities. (#5597) Fix: retry unverified macOS window prefetches. (#5605) Feat: publish cua-sdk and the proto contract so you can build your own harness (CUA-1902). (#5532) Fix: track cursor placement explicitly. (#5603) Fix: undo the GTK4 CSD inset before at-point ownership checks. (#5610) Thanks @ZIXT233. Fix: verify foreground Document text insertion. (#5587) Thanks @wszkxlllll. Fix: never send a Windows foreground drag to the window covering the target. (#5616) Thanks @SunkenInTime. Fix: distrust the compromised eMudhra intermediates in every Cua client (CUA-1948). (#5622) Fix: keys for a popup an MPX click opened go through the master keyboard of the session that clicked. (#5652) Thanks @CMGS. Fix: the macOS WindowServer health check treats any app-bundle host as bundled. (#5680) Ci: start the staging smoke from the release tag run. (#5706) Fix: guard Space-free background window enumeration. (#5712) Thanks @CMGS. Fix: stabilize the known flaky release-gate tests. (#5538) Feat: compat gateways for E2B and Daytona, Hetzner as your own cloud, the elastic pool, cua share and the public relay. (#5778) Ci: bump undici to 7.30.1 in the Cua Driver TypeScript lockfile. (#5854) Ci: the Windows uninstaller finds a PATH copy of cua-driver-local without Get-Command. (#5864) Ci: stop rebuilding Rust crates between test steps; prebuilt wasm-bindgen. (#5827) Ci: run the verification proof in Linux CI. (#5832) Ci: install the Artifact Signing module on every run and check it before the build. (#5875) Ci: nightly Cua Driver starts again, and a test catches this class of startup_failure (CUA-2227). (#5898) Refactor: fold duplicate daemon launch and socket-release wait paths. (#5894) Fix: build client-kind SDK constructors without rebuilding the driver. (#5896) Ci: warn instead of holding nightlies on unresolved attribution. (#5904) Thanks @0xABAN. Ci: make contributor attribution best effort everywhere. (#5919) Fix: give the DOM-click baseline readback a longer budget. (#5918) Contributors Thanks to @0xABAN, @0xsline, @1111david, @abonneth, @adargham, @amplogik, @AnvitDevadiga, @ART1KZ, @AyinLee987, @bennybuoy, @bitomule, @biztex, @BoneLiu, @c8dhjp4tyv-bit, @CARLOSDAVID33, @ceckert, @CMGS, @coygeek, @dajiaohuang, @DaveTseng2019, @Ed-Key, @ethanblake4, @factory-ain3sh, @Feighery89, @FredAmartey, @fynixart, @Himanshu-0104, @howardxie-dev, @hqhq1025, @hyprcat, @Iann29, @Iflaqbhat, @Irfanwani, @JohnnyVizz, @kayzenline, @Kenmege, @kevinherron, @kianwoon, @kvnloo, @loonghao, @lorenzozanee, @louistiti, @luochen211, @methanoya, @muness, @nothingtolose09-sys, @omoi0kane, @only21mil, @osamahbeig, @praxis1244-consulting, @qtqjcz, @r33drichards, @RitikaxG, @saariuslystoned, @SDSLeon, @SunflowersLwtech, @SunkenInTime, @tlq5l, @tyxlb, @UlviShukurzade, @usedhonda, @wszkxlllll, @xronocode, @ZenAlexa, @ZIXT233 for contributing to or reporting changes in this nightly. Exact installation CUA_DRIVER_RS_VERSION=nightly-cua-driver-rs-v0.38.1-nightly.20261025.40174952744 /bin/bash -c "$(curl -fsSL https://cua.ai/driver/install.sh)" SHA256 checksums 1fc19c3c35bb459c5d1987f3d1b8ab54bffb457b7827bfae06147b36e56d28e3 _install-rust.sh ee3fc0dbb8b13bf72ed24c2643000811738a7cf289fbd15a8489a9a871e7ab64 checksums.txt cba0a0abff7da4989620d71cf318558d370af37df72c40e856e699dbc1cb07f9 cua-driver-rs-0.38.1-nightly.20261025.40174952744-darwin-arm64.tar.gz bb3fd270fff1b785a0abe24e375f4fe1fb0da0f4a7b22d2f5e88a53c76bade7e cua-driver-rs-0.38.1-nightly.20261025.40174952744-darwin-universal-binary.tar.gz bfc4c32d7776efff5f711eaf462181b5fb89ecb6add3b7a50b005197672a0a1a cua-driver-rs-0.38.1-nightly.20261025.40174952744-darwin-universal.tar.gz 039c071e1075943089ac018af26c22977d85d56b30a9bbba61c7d0e34bf4efec cua-driver-rs-0.38.1-nightly.20261025.40174952744-darwin-x86_64.tar.gz 62561e5e2bde71ee68371fd86f26d85ce1f1f683e06e701ac5924ac3e473bafc cua-driver-rs-0.38.1-nightly.20261025.40174952744-linux-arm64-binary.tar.gz 20d039ae82eb3526907391d5e35462f166d559b453d9d5f0a806ec1f0208222b cua-driver-rs-0.38.1-nightly.20261025.40174952744-linux-arm64.tar.gz 635c64c2c296b8f89f931c6c5a68dc8d0795e21c81d1e9a68e28f698e1b28eeb cua-driver-rs-0.38.1-nightly.20261025.40174952744-linux-x86_64-binary.tar.gz 6b9d08c51ddae04fb359effdc0a087ba7a5ac8b7fb80792d7742908091a37392 cua-driver-rs-0.38.1-nightly.20261025.40174952744-linux-x86_64.tar.gz cd482a1a5b68f8ab6b53650a9d1d2d93e40d624b03f4df500bd0cee5115a6d8c cua-driver-rs-0.38.1-nightly.20261025.40174952744-windows-arm64-binary.zip 2250a892a99df0f213da60211b598fd12eca2ea8962280579bceb604de5530d0 cua-driver-rs-0.38.1-nightly.20261025.40174952744-windows-arm64.zip aa9a6ad1e584b4ee2e9c9c8ebaad5c6bba6f9270e6a08adbbb2fe828c1f68e25 cua-driver-rs-0.38.1-nightly.20261025.40174952744-windows-x86_64-binary.zip ecc1902e1fc7f20e46ca64002979ff5b93cc3a197fac8bc978a19b945232ece7 cua-driver-rs-0.38.1-nightly.20261025.40174952744-windows-x86_64.zip 85392d657d9a9d8ca10bc6ffb63a8bbafe73164416d4c19b78609b2a0d4837e4 cua-driver-rs-v0.38.1-nightly.20261025.40174952744-skills.tar.gz d9d4d29aa10c76dcc1bb3595cd9003d2fbf554f99c09ce3dd6147dfaa869da9b install.ps1 a103177e0df86d04d752bfa20c73f99a3e501906f1814c3127da84788539d9ba install.sh 1bde1d55e0220fda853c262b5732ecd9b9bd9b181c7db3ee4013ca4be70a93ce uninstall.ps1 e213843003f6440a16308e3b39e10010caae898a6d4dc65a1b3b7cf18e18cbec uninstall.sh
Check out latest releases or
releases around trycua/cua nightly-cua-driver-rs-v0.38.1-nightly.20261025.40174952744

Don't miss a new cua release

NewReleases is sending notifications on new releases.

Get notifications