@frontendxlab/opencode-computer-use 0.1.3 → 0.1.5

package/docs/index.html

@@ -61,9 +61,9 @@
           "name": "OpenCode Computer Use",
           "description": "A dual-generation OpenCode plugin for local desktop control through a persistent cua_repl JavaScript session.",
           "url": "https://opencode-computer-use.pages.dev/",
-          "softwareVersion": "0.1.1",
+          "softwareVersion": "0.1.5",
           "datePublished": "2026-09-25",
-          "dateModified": "2026-09-25",
+          "dateModified": "2026-10-30",
           "isAccessibleForFree": true,
           "downloadUrl": "https://www.npmjs.com/package/@frontendxlab/opencode-computer-use",
           "applicationCategory": "DeveloperApplication",
@@ -93,7 +93,7 @@
           "headline": "OpenCode Computer Use: Codex-style desktop control for OpenCode",
           "description": "Setup, API, security, operating-system, and troubleshooting guidance for the OpenCode Computer Use plugin.",
           "datePublished": "2026-09-25",
-          "dateModified": "2026-09-25",
+          "dateModified": "2026-10-30",
           "url": "https://opencode-computer-use.pages.dev/",
           "inLanguage": "en",
           "articleSection": "Developer tools",
@@ -146,7 +146,15 @@
               "name": "Which operating systems are supported?",
               "acceptedAnswer": {
                 "@type": "Answer",
-                "text": "Optional native runtime packages target Linux, macOS, and Windows on x64 and arm64. Live capabilities depend on OS permissions, the desktop session, and the target app; macOS and Windows still require live validation."
+                "text": "The optional native package includes Linux, macOS, and Windows binaries for x64 and arm64. Linux x64 GNOME Wayland smoke checks verified registration, inventory, persistent sessions, and semantic click/setValue on a disposable GTK3 app; capture was unavailable. Other apps and capabilities need separate checks, and macOS, Windows, and Linux arm64 still need native validation."
+              }
+            },
+            {
+              "@type": "Question",
+              "name": "Can it control another device?",
+              "acceptedAnswer": {
+                "@type": "Answer",
+                "text": "It controls the signed-in desktop on the computer running the OpenCode server and its local MCP child. Connecting from another browser or device does not switch the controlled desktop. Install and configure the package on each target computer; automatic device discovery, pairing, and remote desktop transport are not built in."
               }
             },
             {
@@ -336,6 +344,29 @@
     .matrix td { color: var(--muted); }
     .yes { color: var(--mint); font-weight: 700; }
     .pending { color: var(--signal); font-weight: 700; }
+    .capability-intro { max-width: 690px; }
+    .capability-legend { display: flex; flex-wrap: wrap; gap: 8px; margin: 17px 0 14px; }
+    .capability-legend .legend-item { display: inline-flex; align-items: center; gap: 7px; padding: 6px 9px; border: 1px solid var(--line); border-radius: 999px; color: var(--muted); background: var(--panel); font: 12px var(--mono); }
+    .capability-scroll { overflow-x: auto; margin: 16px 0 20px; border: 1px solid var(--line); border-radius: 12px; background: var(--panel); }
+    .capability-matrix { width: 100%; min-width: 760px; border-collapse: separate; border-spacing: 0; font-size: 13px; }
+    .capability-matrix th, .capability-matrix td { padding: 11px 12px; border-bottom: 1px solid var(--line); vertical-align: middle; }
+    .capability-matrix thead th { position: sticky; top: 0; z-index: 2; color: var(--text); background: color-mix(in srgb, var(--panel-2) 96%, transparent); font: 700 11px/1.2 var(--mono); letter-spacing: .06em; text-transform: uppercase; }
+    .capability-matrix thead th:not(:first-child):not(:last-child) { width: 88px; text-align: center; }
+    .capability-matrix th:first-child, .capability-matrix td:first-child { position: sticky; left: 0; z-index: 1; width: 245px; background: var(--panel); }
+    .capability-matrix thead th:first-child { z-index: 3; background: var(--panel-2); }
+    .capability-matrix td:nth-child(2), .capability-matrix td:nth-child(3), .capability-matrix td:nth-child(4) { text-align: center; }
+    .capability-matrix td:last-child { min-width: 250px; color: var(--muted); line-height: 1.45; }
+    .capability-matrix tr:last-child td { border-bottom: 0; }
+    .capability-matrix .cap-group th { position: static; padding: 9px 12px; border-bottom: 1px solid var(--line); color: var(--signal-2); background: color-mix(in srgb, var(--signal) 8%, var(--panel)); font: 750 11px/1.2 var(--mono); letter-spacing: .08em; text-align: left; text-transform: uppercase; }
+    .cap-name { display: block; color: var(--text); font-weight: 700; line-height: 1.3; }
+    .cap-code { display: block; margin-top: 3px; color: var(--faint); font: 11px/1.35 var(--mono); }
+    .cap-status { display: inline-flex; width: 30px; height: 30px; align-items: center; justify-content: center; border: 1px solid currentColor; border-radius: 999px; }
+    .cap-status svg, .legend-item svg { width: 15px; height: 15px; fill: none; stroke: currentColor; stroke-width: 2; stroke-linecap: round; stroke-linejoin: round; }
+    .cap-status.supported, .legend-item.supported { color: var(--mint); }
+    .cap-status.conditional, .legend-item.conditional { color: var(--signal-2); }
+    .cap-status.blocked, .legend-item.blocked { color: var(--danger); }
+    .capability-footnote { padding: 14px 16px; border: 1px solid var(--line); border-radius: 10px; color: var(--muted); background: color-mix(in srgb, var(--panel-2) 82%, transparent); font-size: 13px; }
+    .capability-footnote strong { color: var(--text); }
     .faq-list { margin-top: 18px; border-top: 1px solid var(--line); }
     .faq-list > div { padding: 14px 0; border-bottom: 1px solid var(--line); }
     .faq-list h3 { margin: 0 0 5px; }
@@ -370,6 +401,7 @@
       h1 { font-size: 3.45rem; }
       .cards, .builder .row { grid-template-columns: 1fr; }
       .definition-list > div { grid-template-columns: 1fr; gap: 5px; }
+      .capability-scroll { margin-inline: -2px; }
       .console { box-shadow: var(--shadow-md); }
       footer { display: block; }
       footer span { display: block; margin-top: 8px; }
@@ -381,6 +413,11 @@
   </style>
 </head>
 <body>
+  <svg class="sr" aria-hidden="true" focusable="false">
+    <symbol id="lucide-circle-check" viewBox="0 0 24 24"><path d="M22 11.08V12a10 10 0 1 1-5.93-9.14"></path><path d="m9 11 3 3L22 4"></path></symbol>
+    <symbol id="lucide-triangle-alert" viewBox="0 0 24 24"><path d="m21.73 18-8-14a2 2 0 0 0-3.46 0l-8 14A2 2 0 0 0 4 21h16a2 2 0 0 0 1.73-3"></path><path d="M12 9v4"></path><path d="M12 17h.01"></path></symbol>
+    <symbol id="lucide-circle-x" viewBox="0 0 24 24"><circle cx="12" cy="12" r="10"></circle><path d="m15 9-6 6"></path><path d="m9 9 6 6"></path></symbol>
+  </svg>
   <a class="skip" href="#content">Skip to documentation</a>
   <header class="top">
     <div class="top-inner">
@@ -389,6 +426,7 @@
         <a href="#install">Install</a>
         <a href="#first-run">First run</a>
         <a href="#api">API</a>
+        <a href="#capabilities">Capabilities</a>
         <a href="#security">Security</a>
         <a href="https://github.com/rashidtvmr/opencode-computer-use">GitHub</a>
       </nav>
@@ -425,6 +463,7 @@
         <a href="#first-run">First run</a>
         <a href="#architecture">Architecture</a>
         <a href="#api">API surface</a>
+        <a href="#capabilities">Capabilities</a>
         <a href="#webmcp">WebMCP</a>
         <a href="#options">Options</a>
         <a href="#workflow">Workflow</a>
@@ -435,7 +474,7 @@
       </nav>
 
       <article>
-        <details class="mobile-toc"><summary>On this page</summary><p><a href="#quick-answer">Quick answer</a> · <a href="#install">Install</a> · <a href="#first-run">First run</a> · <a href="#api">API</a> · <a href="#webmcp">WebMCP</a> · <a href="#security">Security</a> · <a href="#faq">FAQ</a></p></details>
+        <details class="mobile-toc"><summary>On this page</summary><p><a href="#quick-answer">Quick answer</a> · <a href="#install">Install</a> · <a href="#first-run">First run</a> · <a href="#api">API</a> · <a href="#capabilities">Capabilities</a> · <a href="#webmcp">WebMCP</a> · <a href="#security">Security</a> · <a href="#faq">FAQ</a></p></details>
 
         <section id="quick-answer" data-section>
           <h2>Short answer.</h2>
@@ -445,7 +484,8 @@
             <div><dt>MCP server</dt><dd>The local stdio server named <code>cua_repl</code>.</dd></div>
             <div><dt>Model tools</dt><dd><code>js</code> and <code>js_reset</code>, not raw desktop tools.</dd></div>
             <div><dt>Native runtime</dt><dd><code>open-computer-use</code>, running separately with OS accessibility and capture permissions.</dd></div>
-            <div><dt>Supported hosts</dt><dd>OpenCode 1 and OpenCode2 on Linux, macOS, and Windows where the native runtime and permissions are available.</dd></div>
+            <div><dt>Controlled desktop</dt><dd>The signed-in desktop on the OpenCode/MCP server's computer, including when its client connects from another device.</dd></div>
+            <div><dt>Packaged hosts</dt><dd>Linux, macOS, and Windows on x64 and arm64. Native permissions, desktop-session access, and app compatibility need validation on each host.</dd></div>
           </dl>
         </section>
 
@@ -454,18 +494,29 @@
           <p>This repository is a standalone OpenCode plugin. It contains the plugin entrypoint, the local MCP server, and the native runtime integration. The plugin registers <code>cua_repl</code>; the model sees only <code>js</code> and <code>js_reset</code>.</p>
           <div class="code"><pre><code id="clone">git clone git@github.com:rashidtvmr/opencode-computer-use.git
 cd opencode-computer-use
-npm install</code></pre><button class="copy" type="button" data-copy="#clone">Copy</button></div>
+npm ci --ignore-scripts
+node bin/opencode-computer-use-setup.js --local --v1 --source .
+node bin/opencode-computer-use-permissions.js --strict
+opencode mcp list</code></pre><button class="copy" type="button" data-copy="#clone">Copy</button></div>
+          <p><strong>A clone is not registered automatically.</strong> Install its dependencies, then run setup with <code>--source .</code> to load this checkout. Use <code>--v2</code> for OpenCode2. Use <code>--global</code> instead of <code>--local</code> to load the checkout in other projects too. Setup resolves the source to an absolute entrypoint; moving the checkout requires rerunning setup. Restart the relevant OpenCode process after changing its configuration.</p>
           <p>For a published-package install, use:</p>
+          <p class="note"><strong>Documentation version: 0.1.5.</strong> Check <code>npm view @frontendxlab/opencode-computer-use version</code> to see the registry release. Published-package commands use that version; the checkout instructions let you test source changes before publication.</p>
           <div class="code"><pre><code id="npm-install">npm install @frontendxlab/opencode-computer-use
 # pnpm install @frontendxlab/opencode-computer-use also works</code></pre><button class="copy" type="button" data-copy="#npm-install">Copy</button></div>
-          <p>The package postinstall step detects OpenCode 1 versus OpenCode2 and local versus global installation. It edits JSONC without discarding comments, avoids duplicate entries, and prints both manual formats when the choice is ambiguous. Run it explicitly with <code>npx opencode-computer-use-setup</code>, or add <code>--local</code>, <code>--global</code>, <code>--v1</code>, or <code>--v2</code> when you want to choose explicitly.</p>
+          <p>The package postinstall step detects OpenCode 1 versus OpenCode2 and local versus global installation. It edits JSONC without discarding comments and avoids duplicate entries. Global setup also edits the selected user's JSONC directly. If detection is ambiguous, automatic installation leaves the configuration unchanged and prints both manual formats. Explicit setup failures return a nonzero exit status; choose the generation and scope below to resolve ambiguity.</p>
+          <div class="code"><pre><code id="setup-explicit"># Works from any directory; select the scoped package explicitly
+npm exec --package=@frontendxlab/opencode-computer-use -- opencode-computer-use-setup --local --v1
+# Global setup, or replace --v1 with --v2 for OpenCode2
+npm exec --package=@frontendxlab/opencode-computer-use -- opencode-computer-use-setup --global --v1</code></pre><button class="copy" type="button" data-copy="#setup-explicit">Copy</button></div>
+          <p>Add <code>--dry-run</code> to preview the configuration change. The shorthand <code>npx opencode-computer-use-setup</code> is suitable when that binary is already available in the installed project; it does not identify the scoped package for a fresh download. In a clone, use the <code>node bin/...</code> commands above. Setup skips automatic package-development and CI installs.</p>
           <p>Recent pnpm releases can require explicit lifecycle-script approval. If pnpm reports <code>ERR_PNPM_IGNORED_BUILDS</code>, run <code>pnpm approve-builds @frontendxlab/opencode-computer-use</code> once, then rerun <code>pnpm install</code>. If scripts are disabled, run <code>pnpm exec opencode-computer-use-setup</code> manually. CI environments skip setup automatically.</p>
+          <p><strong>The v0.1.5 checkout includes install-time desktop onboarding.</strong> When package lifecycle scripts are allowed, <code>postinstall</code> first configures OpenCode and then runs <code>opencode-computer-use-permissions --install</code>. On macOS it runs the native doctor and opens the Open Computer Use permission onboarding when Accessibility or Screen Recording is missing; Apple still requires you to approve the protected toggles. On GNOME Linux it best-effort enables toolkit accessibility before the AT-SPI/session check. Windows provides interactive-session guidance. Set <code>OPENCODE_COMPUTER_USE_SKIP_PERMISSIONS=1</code> to opt out.</p>
           <div class="tabs" role="tablist" aria-label="OpenCode generation">
             <button role="tab" id="tab-v1" aria-controls="panel-v1" aria-selected="true">OpenCode 1</button>
             <button role="tab" id="tab-v2" aria-controls="panel-v2" aria-selected="false" tabindex="-1">OpenCode2</button>
           </div>
           <div id="panel-v1" role="tabpanel" aria-labelledby="tab-v1">
-            <p>Add the checkout to the V1 <code>plugin</code> list. An absolute path avoids ambiguity when OpenCode starts from another directory.</p>
+            <p>The published package uses the V1 <code>plugin</code> list below. For a checkout, use setup with <code>--source .</code> so OpenCode loads its actual entrypoint.</p>
             <div class="code"><pre><code id="config-v1">{
   "$schema": "https://opencode.ai/config.json",
   "plugin": [
@@ -476,7 +527,7 @@ npm install</code></pre><button class="copy" type="button" data-copy="#clone">Co
             <div class="code"><pre><code id="verify">opencode mcp list</code></pre><button class="copy" type="button" data-copy="#verify">Copy</button></div>
           </div>
           <div id="panel-v2" role="tabpanel" aria-labelledby="tab-v2" hidden>
-            <p>Use the V2 <code>plugins</code> shape when installing the checkout with OpenCode2.</p>
+            <p>The published package uses the V2 <code>plugins</code> shape below. For a checkout, use setup with <code>--v2 --source .</code>.</p>
             <div class="code"><pre><code id="config-v2">{
   "$schema": "https://opencode.ai/config.json",
   "plugins": [
@@ -499,7 +550,7 @@ var chrome = await cua.getApp("Google Chrome");
 await chrome.getAXState({ textLimit: 12000 });</code></pre><button class="copy" type="button" data-copy="#discovery">Copy</button></div>
           <div class="builder" aria-label="Build a first cua_repl call">
             <div class="row">
-              <label for="app-name">App name or PID<input id="app-name" type="text" value="Google Chrome" spellcheck="false"></label>
+              <label for="app-name">App name or ID<input id="app-name" type="text" value="Google Chrome" spellcheck="false"></label>
               <fieldset><legend>Action</legend><div class="segments" role="radiogroup" aria-label="Action">
                 <label><input type="radio" name="action-kind" value="state" checked>Read state</label>
                 <label><input type="radio" name="action-kind" value="screenshot">Screenshot</label>
@@ -518,6 +569,9 @@ await chrome.getAXState({ textLimit: 12000 });</code></pre><button class="copy"
             <li><strong>cua_repl MCP server</strong><br>Provides a persistent JavaScript evaluation surface, output bounds, request validation, and worker isolation.</li>
             <li><strong>Native runtime</strong><br>Runs <code>open-computer-use</code> as a separate child process. OS accessibility, screen capture, and input permissions remain there.</li>
           </ol>
+          <h3>Which device is controlled?</h3>
+          <p>The plugin launches its native runtime on the same computer as the OpenCode server. An attached terminal or browser on another laptop or phone still controls that server computer's desktop. The adapter has no built-in device pairing, remote URL, or cross-device discovery.</p>
+          <p>Install dependencies and configure the plugin separately on each target desktop, then grant that host's permissions in its signed-in graphical session. Copying a configuration with another machine's absolute paths, or copying <code>node_modules</code> between operating systems, does not provide that setup. A service, container, WSL instance, or detached SSH session also does not automatically inherit the host user's graphical desktop.</p>
           <div class="note">The JavaScript VM is a capability guard, not a complete security boundary. OpenCode approvals and operating-system permissions remain the enforcement layer.</div>
         </section>
 
@@ -525,19 +579,318 @@ await chrome.getAXState({ textLimit: 12000 });</code></pre><button class="copy"
           <h2>The Codex-shaped API.</h2>
           <p>The model receives a small async API inside persistent JavaScript:</p>
           <ul class="cards">
-            <li><strong>cua.getState(options?)</strong><span>List the current desktop apps and emit bounded output.</span></li>
-            <li><strong>cua.listApps(options?)</strong><span>Return structured app records without emitting by default.</span></li>
-            <li><strong>cua.getApp(nameOrPid)</strong><span>Bind an app and emit its initial accessibility state.</span></li>
+            <li><strong>cua.getState(options?)</strong><span>Return the permitted app inventory as { apps } and emit it by default. Use { emit: false } to suppress inventory output.</span></li>
+            <li><strong>cua.listApps(options?)</strong><span>Return the permitted app records as an array and emit them by default. Use { emit: false } to suppress inventory output.</span></li>
+            <li><strong>cua.getApp(nameOrID)</strong><span>Bind an app and emit its initial accessibility state.</span></li>
             <li><strong>app.getAXState(options?)</strong><span>Read a fresh semantic tree before choosing an element index.</span></li>
             <li><strong>app.getScreenshot(options?)</strong><span>Return local image bytes and optionally emit them with nodeRepl.</span></li>
+            <li><strong>app.getAXStateAndScreenshot(options?)</strong><span>Read accessibility state and any available screenshot together.</span></li>
             <li><strong>app.click(target, options?)</strong><span>Use an element index first, or a bounded coordinate when necessary.</span></li>
+            <li><strong>app.scroll(elementIndex, direction, pages?)</strong><span>Scroll an accessible element using its current snapshot index.</span></li>
+            <li><strong>app.drag(from, to)</strong><span>Drag between coordinate pairs when the native desktop supports it.</span></li>
             <li><strong>app.typeText(text)</strong><span>Send literal text through the native runtime.</span></li>
             <li><strong>app.pressKey(key)</strong><span>Send a named key or supported modifier chord.</span></li>
+            <li><strong>app.setValue(elementIndex, value)</strong><span>Set the value of an accessible control when its native interface supports it.</span></li>
             <li><strong>app.performSecondaryAction(index, action)</strong><span>Invoke an advertised accessibility action such as a context action.</span></li>
           </ul>
           <p>Use <code>nodeRepl.write(value)</code> for extra text and <code>await nodeRepl.emitImage(bytesOrDataUrl)</code> for local images. Both are bounded before crossing the worker boundary.</p>
         </section>
 
+        <section id="capabilities" data-section>
+          <h2>What it can — and cannot — do.</h2>
+          <p class="capability-intro">This is the complete model-facing computer-use surface of the current <code>cua_repl</code> adapter, plus its intentional exclusions. A green check means the adapter/native runtime exposes that path; it does <strong>not</strong> mean every application or desktop session will accept it.</p>
+          <div class="capability-legend" aria-label="Capability status legend">
+            <span class="legend-item supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg> Supported</span>
+            <span class="legend-item conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg> Conditional</span>
+            <span class="legend-item blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg> Not exposed / blocked</span>
+          </div>
+          <div class="capability-scroll" role="region" aria-label="Computer use capabilities by operating system" tabindex="0">
+            <table class="capability-matrix">
+              <thead><tr><th scope="col">Capability</th><th scope="col">macOS</th><th scope="col">Linux</th><th scope="col">Windows</th><th scope="col">What that means</th></tr></thead>
+              <tbody>
+                <tr class="cap-group"><th colspan="5">Observe & understand</th></tr>
+                <tr>
+                  <td><span class="cap-name">List visible applications</span><span class="cap-code">cua.listApps()</span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td>Discovers apps visible to the native accessibility runtime in the signed-in desktop session.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Read desktop / app inventory</span><span class="cap-code">cua.getState()</span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td>Returns the current structured app inventory with bounded output.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Bind an existing application</span><span class="cap-code">cua.getApp(nameOrID)</span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td>Binds an already running or visible app. It does not launch a new application.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Read accessibility / UI tree</span><span class="cap-code">app.getAXState()</span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td>macOS uses Accessibility, Linux AT-SPI, and Windows UI Automation. Some Wayland/app combinations expose incomplete trees.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Capture an app screenshot</span><span class="cap-code">app.getScreenshot()</span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td>Depends on capture permission plus the active compositor/capture backend.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Read state + screenshot together</span><span class="cap-code">app.getAXStateAndScreenshot()</span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td>Combines semantic state and image capture; state can still be useful when capture is unavailable.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Keep variables and app bindings</span><span class="cap-code">persistent js session</span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td>Top-level variables and app bindings survive across model turns until js_reset or a timeout reset.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Emit text and images to the model</span><span class="cap-code">nodeRepl.write / emitImage</span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td>Text and image output are bounded before crossing the worker/MCP boundary.</td>
+                </tr>
+                <tr class="cap-group"><th colspan="5">Interact with an app</th></tr>
+                <tr>
+                  <td><span class="cap-name">Click a semantic element</span><span class="cap-code">app.click(elementIndex)</span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td>Preferred input path. Requires a current actionable accessibility element.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Click a coordinate</span><span class="cap-code">app.click([x, y])</span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td>Use when semantic state is insufficient. System/global-pointer fallback is separately gated.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Type literal text</span><span class="cap-code">app.typeText(text)</span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td>Requires a writable/focused target and an input path accepted by the host desktop.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Press keys / supported chords</span><span class="cap-code">app.pressKey(key)</span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td>Host input restrictions, focus, and compositor behavior still apply.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Scroll an accessibility element</span><span class="cap-code">app.scroll(index, direction, pages)</span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td>Semantic element scrolling is exposed. Coordinate-only scrolling is intentionally rejected.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Drag between coordinates</span><span class="cap-code">app.drag([x1,y1], [x2,y2])</span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td>Coordinate/input-backend dependent; verify the resulting UI state rather than assuming success.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Set an accessibility value</span><span class="cap-code">app.setValue(index, value)</span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td>Only works when the target element/backend advertises a writable accessibility value.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Run a secondary accessibility action</span><span class="cap-code">app.performSecondaryAction()</span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td>Only actions advertised by the accessibility element/backend can be invoked.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Use global pointer fallback</span><span class="cap-code">allowGlobalPointerFallbacks</span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td><span class="cap-status conditional" aria-label="Conditional" title="Conditional"><svg aria-hidden="true"><use href="#lucide-triangle-alert"></use></svg></span></td>
+                  <td>Off by default. Must be explicitly enabled because it can move the real pointer and change focus.</td>
+                </tr>
+                <tr class="cap-group"><th colspan="5">Session, safety & recovery</th></tr>
+                <tr>
+                  <td><span class="cap-name">Run a read-only desktop session</span><span class="cap-code">safetyMode: read-only</span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td>Mutating CUA methods are blocked by the adapter before native execution.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Allow / deny specific applications</span><span class="cap-code">appAccess</span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td>Exact case-insensitive app name/ID rules are enforced before binding and actions.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Reset JavaScript bindings</span><span class="cap-code">js_reset</span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td>Clears REPL variables and bindings without closing apps or resetting their native state.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Recover from CPU-bound JavaScript</span><span class="cap-code">worker timeout + restart</span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td>A wedged JS evaluation is terminated in its worker and the JavaScript session is restarted.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Cancel timed-out native requests</span><span class="cap-code">notifications/cancelled</span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td>Cancellation is best-effort. After an uncertain mutation, observe state before acting again.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Clean up at session end</span><span class="cap-code">notifications/turn-ended</span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td>Shutdown sends best-effort lifecycle cleanup before the native child is closed.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Re-emit CUA usage guidance</span><span class="cap-code">cua.rewriteDocumentation()</span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td>Reprints the bounded API guidance inside the persistent JavaScript session.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Use safe JavaScript timers</span><span class="cap-code">setTimeout / clearTimeout</span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td><span class="cap-status supported" aria-label="Supported" title="Supported"><svg aria-hidden="true"><use href="#lucide-circle-check"></use></svg></span></td>
+                  <td>Timers exist inside the restricted session and are cancelled when the active evaluation ends or resets.</td>
+                </tr>
+                <tr class="cap-group"><th colspan="5">Intentionally unavailable through cua_repl</th></tr>
+                <tr>
+                  <td><span class="cap-name">Launch a new application</span><span class="cap-code">no model-facing method</span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><code>cua.getApp()</code> binds an existing/visible app; the adapter exposes no launch method.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Quit / force-close an application</span><span class="cap-code">no model-facing method</span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td>No quit, terminate, or force-kill application API is exposed to the model.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Move / resize native windows</span><span class="cap-code">no model-facing method</span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td>The current public CUA facade has no window-management methods.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Coordinate-only scrolling</span><span class="cap-code">app.scroll([x,y], ...)</span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td>The adapter explicitly rejects coordinate scroll; bind a semantic element instead.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Read / write clipboard directly</span><span class="cap-code">no clipboard API</span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td>There is no direct clipboard API. Normal app keyboard shortcuts may still work when the app/OS accepts them.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Use browser DOM / CDP directly</span><span class="cap-code">no DOM or CDP API</span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td>Browser windows are controlled like desktop apps through accessibility/screenshot state, not page DOM or Chrome DevTools Protocol.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Record screen video or audio</span><span class="cap-code">screenshot only</span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td>The model-facing surface can request still screenshots; it does not expose continuous screen, camera, microphone, or audio recording.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Run arbitrary shell commands</span><span class="cap-code">run_shell / exec</span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td>Deliberately omitted from the model-facing CUA API.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Read / write filesystem from JS</span><span class="cap-code">fs / require / process</span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td>Node built-ins, require, process, and filesystem access are removed from the sandbox.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Make network requests from JS</span><span class="cap-code">fetch / sockets</span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><code>fetch</code> and arbitrary networking are unavailable inside the model-facing VM.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Use dynamic imports / code generation</span><span class="cap-code">import() / eval / Function</span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td>Dynamic imports, string code generation, WebAssembly, and host-realm escapes are disabled.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Control lock / login / secure desktop</span><span class="cap-code">OS-owned surfaces</span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td>Lock/login screens, Windows UAC secure desktop, and other OS-owned consent surfaces are outside the supported session.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Bypass operating-system permissions</span><span class="cap-code">Accessibility / AT-SPI / UIA / capture</span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td>The plugin never elevates itself or bypasses native permission boundaries.</td>
+                </tr>
+                <tr>
+                  <td><span class="cap-name">Automate password managers</span><span class="cap-code">native safety denial</span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td><span class="cap-status blocked" aria-label="Not exposed or blocked" title="Not exposed or blocked"><svg aria-hidden="true"><use href="#lucide-circle-x"></use></svg></span></td>
+                  <td>The native runtime keeps its password-manager safety denial; secret stores are intentionally out of scope.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+          <div class="capability-footnote"><strong>Platform reality:</strong> macOS needs Accessibility and Screen Recording permissions. Linux needs a signed-in AT-SPI/D-Bus desktop and some Wayland applications may expose incomplete or non-actionable state. Windows needs a signed-in interactive UI Automation session. macOS and Windows are packaged targets but still require the live certification checklist before their native desktop behavior is described as verified.</div>
+        </section>
+
         <section id="webmcp" data-section>
           <h2>WebMCP, when available.</h2>
           <p>The documentation page includes a small, read-only WebMCP enhancement based on the current <code>document.modelContext.registerTool()</code> draft. Browsers without the preview API continue normally; no desktop-control or mutating tool is exposed through the page.</p>
@@ -596,14 +949,86 @@ nodeRepl.write(state);</code></pre><button class="copy" type="button" data-copy=
             <caption>Operating-system runtime targets and current validation status</caption>
             <thead><tr><th scope="col">Target</th><th scope="col">Packaged runtime</th><th scope="col">Live status here</th></tr></thead>
             <tbody>
-              <tr><td>Linux x64</td><td class="yes">Included</td><td class="yes">Read-only smoke passed</td></tr>
+              <tr><td>Linux x64</td><td class="yes">Included</td><td class="yes">GTK semantic smoke passed; capture unavailable</td></tr>
               <tr><td>Linux arm64</td><td class="yes">Included</td><td class="pending">Needs arm64 host</td></tr>
-              <tr><td>macOS arm64 and x64</td><td class="yes">Included</td><td class="pending">Needs live permissions</td></tr>
+              <tr><td>macOS arm64 and x64</td><td class="yes">Included</td><td class="pending">Needs native validation</td></tr>
               <tr><td>Windows arm64 and x64</td><td class="yes">Included</td><td class="pending">Needs UIA validation</td></tr>
             </tbody>
           </table>
+          <p><strong>Packaged targets and headless tests are separate from live desktop certification.</strong> CI exercises the JavaScript adapter with a fake native backend on Linux, macOS, and Windows. It does not prove that screenshots, focus, keyboard input, or accessibility actions work on a particular desktop. Use the repository's <code>docs/NATIVE_VALIDATION.md</code> checklist on each target. Android and iOS are not native runtime targets.</p>
           <p>macOS generally needs Accessibility and Screen Recording. Windows needs UI Automation in the interactive desktop session. Linux needs AT-SPI plus the native runtime's input and capture services. A secure desktop, lock screen, UAC surface, or missing permission is not bypassed.</p>
-          <div class="note"><strong>Current Linux finding:</strong> on a GNOME Wayland session, Chrome exposed a pseudo-window with no actionable AT-SPI children. The native runtime accepted some synthetic events without changing the window. The adapter reports that result honestly; it does not turn a no-op into a success claim.</div>
+          <h3>Installation walks you through desktop access.</h3>
+          <p>The v0.1.5+ npm/pnpm install path runs the same desktop prerequisite helper automatically. It checks the current OS, runs the native <code>doctor</code>, and gives platform-specific guidance. The helper can enable non-protected settings such as GNOME toolkit accessibility, but it never bypasses protected OS consent. On macOS, the native onboarding opens the correct System Settings panes and waits for you to approve <strong>Open Computer Use.app</strong> — not Terminal or OpenCode.</p>
+          <p>A successful <code>doctor</code> exit is not a desktop capability certificate. The current Linux command prints session guidance; still verify app discovery, accessibility state, capture, and input separately. The <code>--strict</code> helper reports native-command failures, while the live checklist establishes what actually works.</p>
+          <div class="note"><strong>Why there is still a manual step on macOS:</strong> Accessibility and Screen Recording are TCC-protected permissions. Apple does not provide a supported command that silently grants them to an ordinary npm package. Our installer automates detection, opens onboarding, opens the correct Settings destination, and verifies the result; the final privacy toggle remains yours to approve.</div>
+          <h3>Manual permission and verification commands.</h3>
+          <p>The scoped <code>npm exec</code> helper commands also work outside an installed project. The separate <code>open-computer-use</code> commands below assume its native CLI is on PATH; otherwise prefix them with <code>npm exec --package=open-computer-use@0.3.5 --</code>. In a clone, run <code>node bin/opencode-computer-use-permissions.js --strict</code>.</p>
+          <div class="tabs os-permission-tabs" role="tablist" aria-label="Operating-system permission commands">
+            <button role="tab" id="tab-os-macos" aria-controls="panel-os-macos" aria-selected="true">macOS</button>
+            <button role="tab" id="tab-os-linux" aria-controls="panel-os-linux" aria-selected="false" tabindex="-1">Linux</button>
+            <button role="tab" id="tab-os-windows" aria-controls="panel-os-windows" aria-selected="false" tabindex="-1">Windows</button>
+          </div>
+          <div id="panel-os-macos" role="tabpanel" aria-labelledby="tab-os-macos">
+            <p>macOS 14+ requires Accessibility and Screen Recording for <strong>Open Computer Use.app</strong>. The first command is the same checker used by installation.</p>
+            <div class="code"><pre><code id="permissions-macos"># Run/re-run our guided installer check
+npm exec --package=@frontendxlab/opencode-computer-use -- opencode-computer-use-permissions --strict
+
+# Native status + onboarding UI
+open-computer-use doctor
+
+# Open the exact System Settings panes manually if needed
+open "x-apple.systempreferences:com.apple.preference.security?Privacy_Accessibility"
+open "x-apple.systempreferences:com.apple.preference.security?Privacy_ScreenCapture"
+
+# Verify after approving both toggles
+open-computer-use doctor
+open-computer-use call list_apps</code></pre><button class="copy" type="button" data-copy="#permissions-macos">Copy</button></div>
+            <p class="note">If <code>doctor</code> still reports a missing permission after you enable it, close/reopen the affected app or Open Computer Use and run the check again. Do not use <code>tccutil</code> as a grant command: it can reset consent, not silently approve it.</p>
+          </div>
+          <div id="panel-os-linux" role="tabpanel" aria-labelledby="tab-os-linux" hidden>
+            <p>Linux has no universal permission toggle. The requirement is a signed-in graphical desktop with AT-SPI2/D-Bus. GNOME also exposes a toolkit-accessibility setting that our install helper enables best-effort.</p>
+            <div class="code"><pre><code id="permissions-linux"># Run/re-run our guided installer check
+npm exec --package=@frontendxlab/opencode-computer-use -- opencode-computer-use-permissions --strict
+
+# Native runtime/session notes
+open-computer-use doctor
+
+# GNOME only: manually enable and verify toolkit accessibility
+gsettings set org.gnome.desktop.interface toolkit-accessibility true
+gsettings get org.gnome.desktop.interface toolkit-accessibility
+
+# Inspect the session the runtime inherited
+printf "desktop=%s  session=%s\n" "$XDG_CURRENT_DESKTOP" "$XDG_SESSION_TYPE"
+test -n "$DBUS_SESSION_BUS_ADDRESS" && echo "D-Bus session available" || echo "D-Bus session not exported; runtime will try discovery"
+
+# Verify real desktop visibility
+open-computer-use call list_apps</code></pre><button class="copy" type="button" data-copy="#permissions-linux">Copy</button></div>
+            <p class="note">On Wayland, AT-SPI semantic actions can work while screenshots or coordinate input remain compositor-dependent. If a workflow needs reliable coordinate injection, X11 may behave more predictably; otherwise prefer element-index actions and verify state after every mutation.</p>
+          </div>
+          <div id="panel-os-windows" role="tabpanel" aria-labelledby="tab-os-windows" hidden>
+            <p>Windows UI Automation does not have a separate privacy permission switch. The important requirement is that OpenCode/Open Computer Use runs in the signed-in user desktop rather than a Windows service or session 0.</p>
+            <div class="code"><pre><code id="permissions-windows"># PowerShell
+npm exec --package=@frontendxlab/opencode-computer-use -- opencode-computer-use-permissions --strict
+open-computer-use doctor
+
+# Confirm this shell belongs to an interactive user session
+Write-Host "SESSIONNAME=$env:SESSIONNAME"
+(Get-Process -Id $PID).SessionId
+
+# Verify UI Automation can see desktop applications
+open-computer-use call list_apps</code></pre><button class="copy" type="button" data-copy="#permissions-windows">Copy</button></div>
+            <p class="note">A normal process cannot automate the UAC secure desktop. Elevated target applications can also be restricted from a lower-integrity automation process. Prefer ordinary user-session apps and keep OpenCode at the same integrity level as the target when automation is required.</p>
+          </div>
+          <h3>How to turn conditional actions into reliable ones.</h3>
+          <ul class="cards">
+            <li><strong>Fix the host first</strong><span>Run the guided permission check and make sure the native runtime can actually list the target app before debugging clicks or typing.</span></li>
+            <li><strong>Prefer semantic actions</strong><span>Use a fresh accessibility element index for click, scroll, set-value, and secondary actions. This is more portable than remembered coordinates.</span></li>
+            <li><strong>Observe after mutations</strong><span>Read a new accessibility state after navigation, dialogs, rerenders, or an uncertain timeout. Never assume a reported input event changed the UI.</span></li>
+            <li><strong>Use screenshots as a fallback</strong><span>When the accessibility tree is incomplete, a screenshot can recover visual context if the OS capture backend permits it.</span></li>
+            <li><strong>Opt into pointer fallback only when needed</strong><span><code>allowGlobalPointerFallbacks</code> can recover coordinate-only cases, but it may move the real pointer or change focus and stays off by default.</span></li>
+            <li><strong>Choose the right Linux session</strong><span>AT-SPI works best when the process can reach the logged-in desktop bus. Wayland may restrict capture/input; semantic actions are the preferred path.</span></li>
+          </ul>
+          <div class="note"><strong>Native smoke check, 2026-10-30:</strong> Ubuntu GNOME Wayland on Linux x64, Node 26.13.0, OpenCode 1.19.3, and native runtime 0.3.5 passed MCP registration, app inventory, persistent bindings, and reset checks. In a disposable GTK3 app, semantic <code>app.click</code> changed a counter from 0 to 1 and <code>app.setValue</code> changed an entry; fresh accessibility snapshots verified both results. <code>app.getScreenshot</code> returned <code>Screenshot unavailable</code>. Keyboard and coordinate input were not validated. Other app/session combinations can still expose incomplete accessibility trees; this is scoped GTK evidence, not certification of every Linux app or capability.</div>
         </section>
 
         <section id="security" data-section>
@@ -624,11 +1049,119 @@ nodeRepl.write(state);</code></pre><button class="copy" type="button" data-copy=
 
         <section id="troubleshooting" data-section>
           <h2>When the session is quiet.</h2>
-          <details><summary><code>cua_repl</code> is not listed</summary><p>Check that the plugin path is in the active OpenCode generation's configuration, restart the TUI, and run <code>opencode mcp list</code>. Do not register the same plugin and MCP server twice.</p></details>
+          <p>Start with the same three checks on every platform. They separate plugin registration problems from native desktop permission/session problems before you retry an action.</p>
+          <div class="code"><pre><code id="troubleshooting-first-checks">opencode mcp list
+npm exec --package=@frontendxlab/opencode-computer-use -- opencode-computer-use-permissions --strict
+npm exec --package=open-computer-use@0.3.5 -- open-computer-use call list_apps</code></pre><button class="copy" type="button" data-copy="#troubleshooting-first-checks">Copy</button></div>
+
+          <h3>Permission failures by operating system.</h3>
+          <div class="tabs troubleshooting-os-tabs" role="tablist" aria-label="Permission troubleshooting by operating system">
+            <button role="tab" id="tab-trouble-macos" aria-controls="panel-trouble-macos" aria-selected="true">macOS</button>
+            <button role="tab" id="tab-trouble-linux" aria-controls="panel-trouble-linux" aria-selected="false" tabindex="-1">Linux</button>
+            <button role="tab" id="tab-trouble-windows" aria-controls="panel-trouble-windows" aria-selected="false" tabindex="-1">Windows</button>
+          </div>
+
+          <div id="panel-trouble-macos" role="tabpanel" aria-labelledby="tab-trouble-macos">
+            <details open>
+              <summary><code>doctor</code> says Accessibility is missing</summary>
+              <p><strong>Likely cause:</strong> <strong>Open Computer Use.app</strong> has not been approved in Privacy &amp; Security → Accessibility, or the permission was granted to Terminal/OpenCode instead of the app-agent that performs the real automation.</p>
+              <p><strong>Fix:</strong> run <code>open-computer-use doctor</code>, use the onboarding UI, or open the Accessibility pane directly. Enable <strong>Open Computer Use</strong>, then restart the Open Computer Use app-agent/OpenCode and rerun <code>doctor</code>.</p>
+              <div class="code"><pre><code id="trouble-macos-accessibility">open-computer-use doctor
+open "x-apple.systempreferences:com.apple.preference.security?Privacy_Accessibility"
+open-computer-use doctor</code></pre><button class="copy" type="button" data-copy="#trouble-macos-accessibility">Copy</button></div>
+            </details>
+            <details>
+              <summary>Screenshots are missing or <code>screenRecording=missing</code></summary>
+              <p><strong>Likely cause:</strong> Screen Recording / Screen &amp; System Audio Recording has not been granted to <strong>Open Computer Use.app</strong>, or the already-running app-agent has not picked up the new TCC grant yet.</p>
+              <p><strong>Fix:</strong> approve Open Computer Use in the Screen Recording pane, then quit/reopen the app-agent or restart OpenCode before checking again. Accessibility text can still work while screenshots are unavailable.</p>
+              <div class="code"><pre><code id="trouble-macos-screen">open "x-apple.systempreferences:com.apple.preference.security?Privacy_ScreenCapture"
+open-computer-use doctor
+open-computer-use call list_apps</code></pre><button class="copy" type="button" data-copy="#trouble-macos-screen">Copy</button></div>
+            </details>
+            <details>
+              <summary>System Settings shows permission granted, but onboarding still says Allow</summary>
+              <p><strong>Likely cause:</strong> stale TCC/app-agent state, an old installed copy, or a development build with a different signing identity/path.</p>
+              <p><strong>Fix:</strong> first restart Open Computer Use and rerun <code>doctor</code>. Confirm you approved the current <strong>Open Computer Use.app</strong>, not <strong>Open Computer Use (Dev)</strong> or Terminal. As a last-resort reset, remove only this app's stored consent and let <code>doctor</code> request it again. These commands <em>reset</em> permission; they do not grant it.</p>
+              <div class="code"><pre><code id="trouble-macos-reset">tccutil reset Accessibility com.ifuryst.opencomputeruse
+tccutil reset ScreenCapture com.ifuryst.opencomputeruse
+open-computer-use doctor</code></pre><button class="copy" type="button" data-copy="#trouble-macos-reset">Copy</button></div>
+            </details>
+            <details>
+              <summary>The native binary will not start even after granting permissions</summary>
+              <p><strong>Likely cause:</strong> macOS is older than the native runtime's minimum supported version. Permission changes cannot fix binary compatibility.</p>
+              <p><strong>Fix:</strong> check the OS version. The current macOS runtime requires macOS 14 or newer.</p>
+              <div class="code"><pre><code id="trouble-macos-version">sw_vers -productVersion
+open-computer-use --version</code></pre><button class="copy" type="button" data-copy="#trouble-macos-version">Copy</button></div>
+            </details>
+          </div>
+
+          <div id="panel-trouble-linux" role="tabpanel" aria-labelledby="tab-trouble-linux" hidden>
+            <details open>
+              <summary><code>list_apps</code> is empty or AT-SPI cannot see desktop apps</summary>
+              <p><strong>Likely cause:</strong> the command is running outside the signed-in graphical session, toolkit accessibility is disabled, or the process cannot reach the user's D-Bus/AT-SPI session.</p>
+              <p><strong>Fix:</strong> run OpenCode from the logged-in desktop user, not a pure SSH shell, service, CI job, or unrelated user session. On GNOME, enable toolkit accessibility and verify the session variables. The native runtime also tries to discover missing session variables automatically.</p>
+              <div class="code"><pre><code id="trouble-linux-atspi">gsettings set org.gnome.desktop.interface toolkit-accessibility true
+gsettings get org.gnome.desktop.interface toolkit-accessibility
+printf "desktop=%s  session=%s\n" "$XDG_CURRENT_DESKTOP" "$XDG_SESSION_TYPE"
+printf "runtime=%s\n" "$XDG_RUNTIME_DIR"
+test -n "$DBUS_SESSION_BUS_ADDRESS" &amp;&amp; echo "D-Bus session available"
+open-computer-use doctor
+open-computer-use call list_apps</code></pre><button class="copy" type="button" data-copy="#trouble-linux-atspi">Copy</button></div>
+            </details>
+            <details>
+              <summary>Screenshot is black, omitted, or unavailable on Wayland</summary>
+              <p><strong>Likely cause:</strong> the compositor blocks the runtime's best-effort capture path. This is not an AT-SPI permission toggle and there is no universal Linux command that grants unrestricted screen capture.</p>
+              <p><strong>Fix:</strong> continue with accessibility text/semantic actions when possible. If the workflow requires reliable coordinate/screenshot automation, test the same workflow in an X11 session or a compositor/environment whose capture path works for the runtime.</p>
+            </details>
+            <details>
+              <summary>Click/type/drag reports success but the application does not change</summary>
+              <p><strong>Likely cause:</strong> AT-SPI exposed a pseudo-window or incomplete action tree, or Wayland rejected synthetic coordinate/key input. A native event being accepted does not prove the application consumed it.</p>
+              <p><strong>Fix:</strong> take a fresh state, prefer element-index accessibility actions, <code>setValue</code>, and advertised secondary actions over coordinates. Verify state after every mutation. If only coordinate synthesis is failing, compare the same workflow under X11 before treating it as an adapter bug.</p>
+            </details>
+            <details>
+              <summary>Error mentions <code>Accessible.is_text</code> or <code>is_editable_text</code></summary>
+              <p><strong>Likely cause:</strong> an older Linux native runtime is using PyGObject helpers that are not available on that distribution.</p>
+              <p><strong>Fix:</strong> update/reinstall the current native runtime. The current package line detects AT-SPI <code>Text</code>/<code>EditableText</code> through standard interfaces.</p>
+              <div class="code"><pre><code id="trouble-linux-upgrade">npm install open-computer-use@0.3.5
+open-computer-use --version
+open-computer-use call list_apps</code></pre><button class="copy" type="button" data-copy="#trouble-linux-upgrade">Copy</button></div>
+            </details>
+          </div>
+
+          <div id="panel-trouble-windows" role="tabpanel" aria-labelledby="tab-trouble-windows" hidden>
+            <details open>
+              <summary><code>list_apps</code> is empty even though <code>doctor</code> runs</summary>
+              <p><strong>Likely cause:</strong> Open Computer Use is running in a service, session 0, detached SSH context, or another non-interactive session. UI Automation only sees windows in the signed-in interactive desktop.</p>
+              <p><strong>Fix:</strong> start OpenCode/Open Computer Use from the user's normal desktop session and confirm the current PowerShell process has a user session ID.</p>
+              <div class="code"><pre><code id="trouble-windows-session">open-computer-use doctor
+Write-Host "SESSIONNAME=$env:SESSIONNAME"
+(Get-Process -Id $PID).SessionId
+open-computer-use call list_apps</code></pre><button class="copy" type="button" data-copy="#trouble-windows-session">Copy</button></div>
+            </details>
+            <details>
+              <summary>The target app is elevated and clicks/typing fail</summary>
+              <p><strong>Likely cause:</strong> Windows integrity-level boundaries can block a normal process from driving a higher-integrity application.</p>
+              <p><strong>Fix:</strong> prefer running the target as a normal user. If automation genuinely requires an elevated target, run the automation host at the same integrity level only for that explicit task and keep the elevated session narrow.</p>
+            </details>
+            <details>
+              <summary>A UAC prompt, lock screen, or sign-in screen cannot be controlled</summary>
+              <p><strong>Cause:</strong> these are Windows secure-desktop / OS-owned surfaces. This is an intentional security boundary, not a missing UI Automation permission.</p>
+              <p><strong>Fix:</strong> approve or dismiss the UAC prompt manually and return to the normal user desktop. The plugin will not attempt to bypass the secure desktop.</p>
+            </details>
+            <details>
+              <summary>App is found but an action does nothing</summary>
+              <p><strong>Likely cause:</strong> the app does not expose the expected UI Automation pattern or ignores the Win32 message fallback while backgrounded/hidden.</p>
+              <p><strong>Fix:</strong> make sure the target has a visible, non-minimized top-level window, refresh the accessibility state, and prefer semantic element actions over coordinates. Verify the resulting state instead of trusting the input call alone.</p>
+            </details>
+          </div>
+
+          <h3>General failures.</h3>
+          <details><summary><code>cua_repl</code> is not listed</summary><p>A clone alone does not register a plugin, and installing dependencies for package development deliberately skips automatic setup. From the checkout run <code>npm ci --ignore-scripts</code>, then <code>node bin/opencode-computer-use-setup.js --local --v1 --source .</code>. Choose <code>--v2</code> for OpenCode2 or <code>--global</code> to use the checkout outside this project. For a published package, use the scoped <code>npm exec</code> setup command in the install section.</p><p>Check the selected configuration path printed by setup, including any <code>OPENCODE_CONFIG</code> override. Restart the OpenCode server/TUI using that configuration and run <code>opencode mcp list</code> from the same project. Loading the plugin exposes MCP tools; it does not add a slash command. Check for an existing disabled or stale <code>cua_repl</code> entry, because the plugin preserves existing server entries by default. Avoid duplicate registration through both explicit configuration and automatic discovery.</p></details>
+          <details><summary>It works on one computer but not another</summary><p>Run setup and the permission check on each target desktop. The native runtime runs on the OpenCode server's computer, even when you connect from a different device. Reinstall dependencies for that operating system and architecture, regenerate checkout paths with <code>--source</code>, and run in the correct signed-in graphical session. There is no built-in remote-device pairing or transport. Wayland, macOS privacy permissions, and Windows session/integrity boundaries still apply.</p></details>
+          <details><summary>A Windows PATH launcher fails to start</summary><p>Use the packaged native runtime or set <code>OPEN_COMPUTER_USE_NATIVE_COMMAND</code> to the absolute <code>open-computer-use.exe</code> path. Standard npm global <code>.cmd</code> shims are resolved to the adjacent package's native executable. Other shell shims are not executed; the diagnostic explains which native runtime path is required.</p></details>
           <details><summary>Node cannot be found</summary><p>Set <code>OPENCODE_NODE</code> to an absolute Node executable before starting OpenCode, or make <code>node</code> available on the server PATH.</p></details>
-          <details><summary>The app list is empty</summary><p>Run <code>open-computer-use list-apps</code> in the same graphical session. Confirm the app is already running and that the desktop accessibility session is available.</p></details>
-          <details><summary>Screenshots are unavailable</summary><p>Screen capture depends on the OS compositor and permissions. The plugin can still provide bounded accessibility text when capture is unavailable.</p></details>
-          <details><summary>Linux input returns success but nothing changes</summary><p>Check the desktop session type and native runtime prerequisites. A pseudo-window or Wayland compositor can expose state without accepting synthetic input. Observe again before retrying a mutating action.</p></details>
+          <details><summary>The app is not found</summary><p>Run <code>open-computer-use call list_apps</code>, use the exact returned app name or ID, and confirm the app already has a visible, non-minimized window in the same graphical session.</p></details>
+          <details><summary>Element index stopped working after navigation</summary><p>Element indexes belong to a particular accessibility snapshot. Fetch a fresh state after navigation, dialogs, rerenders, or focus changes before acting again.</p></details>
           <details><summary>Global pointer fallback is rejected</summary><p>This is the expected safety gate. Enable <code>allowGlobalPointerFallbacks</code> only for an explicit diagnostic session where moving the real pointer and changing focus are acceptable.</p></details>
         </section>
 
@@ -637,7 +1170,8 @@ nodeRepl.write(state);</code></pre><button class="copy" type="button" data-copy=
           <div class="faq-list">
             <div><h3>Is OpenCode Computer Use a plugin, an MCP server, or both?</h3><p>Both layers are present. The OpenCode plugin loads the local package and registers an MCP server named cua_repl. That server exposes only js and js_reset to the model.</p></div>
             <div><h3>What do js and js_reset do?</h3><p>js evaluates JavaScript in the persistent session, so variables and app bindings survive between calls. js_reset discards those bindings but does not reset native application state.</p></div>
-            <div><h3>Which operating systems are supported?</h3><p>Optional native runtime packages target Linux, macOS, and Windows on x64 and arm64. Live capabilities depend on OS permissions, the desktop session, and the target app; macOS and Windows still require live validation.</p></div>
+            <div><h3>Which operating systems are supported?</h3><p>The optional native package includes Linux, macOS, and Windows binaries for x64 and arm64. Linux x64 GNOME Wayland smoke checks verified registration, inventory, persistent sessions, and semantic click/setValue on a disposable GTK3 app; capture was unavailable. Other apps and capabilities need separate checks, and macOS, Windows, and Linux arm64 still need native validation.</p></div>
+            <div><h3>Can it control another device?</h3><p>It controls the signed-in desktop on the computer running the OpenCode server and its local MCP child. Connecting from another browser or device does not switch the controlled desktop. Install and configure the package on each target computer; automatic device discovery, pairing, and remote desktop transport are not built in.</p></div>
             <div><h3>Does the plugin bypass operating-system permissions?</h3><p>No. It cannot control a lock screen, login screen, or UAC secure desktop. OpenCode approvals and operating-system permissions remain the enforcement layer.</p></div>
             <div><h3>Does the model get raw desktop tools or an arbitrary shell?</h3><p>No. The model sees only js and js_reset, not raw desktop tools or run_shell. The restricted JavaScript session also blocks filesystem, process, fetch, dynamic import, and code-generation access.</p></div>
             <div><h3>How do I verify the installation?</h3><p>Restart OpenCode or reopen the TUI, run opencode mcp list, and confirm that cua_repl is connected before starting a desktop task.</p></div>
@@ -651,7 +1185,7 @@ nodeRepl.write(state);</code></pre><button class="copy" type="button" data-copy=
         <strong>Default policy</strong>
         <p>Local stdio only. Global pointer fallback off. Native OS permissions enforced. Read-only and app policies are available as adapter defense in depth.</p>
         <strong>Updated</strong>
-        <p>Published September 25, 2026. Updated September 25, 2026.</p>
+        <p>Published September 25, 2026. Updated September 27, 2026.</p>
         <strong>WebMCP</strong>
         <p>Preview support registers read-only documentation tools when the browser exposes the WebMCP API. Normal browsers remain fully supported.</p>
         <strong>Repository</strong>
@@ -698,23 +1232,26 @@ nodeRepl.write(state);</code></pre><button class="copy" type="button" data-copy=
       });
     });
 
-    const tabs = [...document.querySelectorAll('[role="tab"]')];
-    const selectTab = (tab) => {
-      tabs.forEach((item) => {
-        const active = item === tab;
-        item.setAttribute("aria-selected", String(active));
-        item.tabIndex = active ? 0 : -1;
-        document.querySelector(`#${item.getAttribute("aria-controls")}`).hidden = !active;
-      });
-      tab.focus();
-    };
-    tabs.forEach((tab, index) => {
-      tab.addEventListener("click", () => selectTab(tab));
-      tab.addEventListener("keydown", (event) => {
-        if (event.key === "ArrowRight") selectTab(tabs[(index + 1) % tabs.length]);
-        if (event.key === "ArrowLeft") selectTab(tabs[(index - 1 + tabs.length) % tabs.length]);
-        if (event.key === "Home") selectTab(tabs[0]);
-        if (event.key === "End") selectTab(tabs.at(-1));
+    document.querySelectorAll('[role="tablist"]').forEach((tabList) => {
+      const tabs = [...tabList.querySelectorAll('[role="tab"]')];
+      const selectTab = (tab) => {
+        tabs.forEach((item) => {
+          const active = item === tab;
+          item.setAttribute("aria-selected", String(active));
+          item.tabIndex = active ? 0 : -1;
+          const panel = document.getElementById(item.getAttribute("aria-controls"));
+          if (panel) panel.hidden = !active;
+        });
+        tab.focus();
+      };
+      tabs.forEach((tab, index) => {
+        tab.addEventListener("click", () => selectTab(tab));
+        tab.addEventListener("keydown", (event) => {
+          if (event.key === "ArrowRight") selectTab(tabs[(index + 1) % tabs.length]);
+          if (event.key === "ArrowLeft") selectTab(tabs[(index - 1 + tabs.length) % tabs.length]);
+          if (event.key === "Home") selectTab(tabs[0]);
+          if (event.key === "End") selectTab(tabs.at(-1));
+        });
       });
     });