Astro-Han · Sep 23, 2026 · Sep 23, 2026 · Sep 23, 2026 · Sep 23, 2026 · Sep 23, 2026
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -136,9 +136,6 @@ jobs:
 
       - name: Test Storybook audit contracts
         run: node --test scripts/ax-tree-audit.test.mjs scripts/storybook-visual-smoke.test.mjs
-      - name: Test Computer Use script contracts
-        run: node --test scripts/computer-use/lab-root.test.mjs
-
       - name: Test script entrypoint contracts
         run: node --test scripts/script-entrypoints.test.mjs
 

diff --git a/README.md b/README.md
@@ -60,6 +60,8 @@ The [website](https://maka.apache.org/en/) walks through one turn of the log and
 
 **Build from source**: To compile and run Desktop, the TUI, or the CLI directly from a source checkout, see the [Build from source](#build-from-source) section below.
 
+**macOS Computer Use dependency**: Desktop's optional Computer Use feature bundles [Cua Driver](https://github.com/trycua/cua/releases/tag/cua-driver-rs-v0.28.2). Its top-level license is MIT; its macOS source dependency closure includes MPL-2.0 UniFFI code and CDLA-Permissive-2.0 certificate data, and the binary embeds a SIL-OFL-1.1 Inter font. The MPL and OFL components are Category B and require prominent labeling and binary-only inclusion under [ASF policy](https://www.apache.org/legal/resolved.html#category-b). See the [provenance and release audit](./docs/computer-use-provenance.md). Users do not need to install Cua separately.
+
 ## Build from source
 
 ### Requirements

diff --git a/apps/desktop/bundled-tools.json b/apps/desktop/bundled-tools.json
@@ -1,16 +1,14 @@
 {
-  "makaCu": {
-    "repo": "maka-agent/maka-cu",
-    "branch": "maka/base",
-    "commit": "4a9787d2c7f2fbc6a29b33d691916c6b84543661",
-    "expectedProtocolVersion": "maka.cu/2",
-    "binaryName": "maka-cu",
-    "binarySizeBytes": 3268832,
-    "binarySha256": "70defb1c753a8d69f7b036c2717ed788f55bb8a10112f8245a572df56a027979",
-    "buildProvenance": "local-source-build",
-    "signature": "adhoc",
-    "hardenedRuntime": false,
-    "notarization": "missing",
+  "cuaDriver": {
+    "repo": "trycua/cua",
+    "release": "cua-driver-rs-v0.28.2",
+    "archiveName": "cua-driver-rs-0.28.2-darwin-universal-binary.tar.gz",
+    "archiveSha256": "386db225a3080714a0f9f935525e61efaf46709587ef8b94dd2df81aeb2f6daa",
+    "binaryName": "cua-driver",
+    "binarySha256": "af30d29cf33bd3bbda1330be7225b18881ea4c5af6df374e08627914b5ac334d",
+    "teamIdentifier": "YCK386LBJ7",
+    "signature": "developer-id",
+    "hardenedRuntime": true,
     "distributionReady": false
   }
 }
diff --git a/apps/desktop/electron-builder.config.mjs b/apps/desktop/electron-builder.config.mjs
@@ -114,6 +114,17 @@ const baseDesktopBuilderConfig = {
       from: 'bundled-tools.json',
       to: 'bundled-tools.json',
     },
+    ...(process.platform === 'darwin'
+      ? [
+          { from: 'resources/bin/cua-driver', to: 'bin/cua-driver' },
+          { from: 'resources/licenses/cua-driver/LICENSE', to: 'licenses/cua-driver/LICENSE' },
+          { from: 'resources/licenses/cua-driver/MPL-2.0.txt', to: 'licenses/cua-driver/MPL-2.0.txt' },
+          { from: 'resources/licenses/cua-driver/Inter-OFL.txt', to: 'licenses/cua-driver/Inter-OFL.txt' },
+          { from: 'resources/licenses/cua-driver/CDLA-Permissive-2.0.txt', to: 'licenses/cua-driver/CDLA-Permissive-2.0.txt' },
+          { from: 'resources/licenses/cua-driver/NOTICE.txt', to: 'licenses/cua-driver/NOTICE.txt' },
+          { from: 'resources/licenses/cua-driver/THIRD_PARTY_NOTICES.txt', to: 'licenses/cua-driver/THIRD_PARTY_NOTICES.txt' },
+        ]
+      : []),
     {
       // The app icon is read at runtime by the BrowserWindow `icon` option
       // and by the permission-overlay card, and `files` above does not carry
@@ -239,6 +250,8 @@ const baseDesktopBuilderConfig = {
     // a test in scripts/verify-packaged-app-icons.test.mjs.
     icon: 'assets/app-icons/sky.png',
     forceCodeSigning: true,
+    // Preserve the pinned upstream Developer ID signature and binary digest.
+    signIgnore: ['Contents/Resources/bin/cua-driver$'],
     hardenedRuntime: true,
     notarize: true,
     entitlements: 'build/entitlements.mac.plist',

diff --git a/apps/desktop/resources/licenses/cua-driver/CDLA-Permissive-2.0.txt b/apps/desktop/resources/licenses/cua-driver/CDLA-Permissive-2.0.txt
@@ -0,0 +1,61 @@
+# Community Data License Agreement - Permissive - Version 2.0
+
+This is the Community Data License Agreement - Permissive, Version
+2.0 (the "agreement"). Data Provider(s) and Data Recipient(s) agree
+as follows:
+
+## 1. Provision of the Data
+
+1.1. A Data Recipient may use, modify, and share the Data made
+available by Data Provider(s) under this agreement if that Data
+Recipient follows the terms of this agreement.
+
+1.2. This agreement does not impose any restriction on a Data
+Recipient's use, modification, or sharing of any portions of the
+Data that are in the public domain or that may be used, modified,
+or shared under any other legal exception or limitation.
+
+## 2. Conditions for Sharing Data
+
+2.1. A Data Recipient may share Data, with or without modifications, so
+long as the Data Recipient makes available the text of this agreement
+with the shared Data.
+
+## 3. No Restrictions on Results
+
+3.1. This agreement does not impose any restriction or obligations
+with respect to the use, modification, or sharing of Results.
+
+## 4. No Warranty; Limitation of Liability
+
+4.1. All Data Recipients receive the Data subject to the following
+terms:
+
+THE DATA IS PROVIDED ON AN "AS IS" BASIS, WITHOUT REPRESENTATIONS,
+WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED
+INCLUDING, WITHOUT LIMITATION, ANY WARRANTIES OR CONDITIONS OF TITLE,
+NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
+
+NO DATA PROVIDER SHALL HAVE ANY LIABILITY FOR ANY DIRECT, INDIRECT,
+INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING
+WITHOUT LIMITATION LOST PROFITS), HOWEVER CAUSED AND ON ANY THEORY OF
+LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE DATA OR RESULTS,
+EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+
+## 5. Definitions
+
+5.1. "Data" means the material received by a Data Recipient under
+this agreement.
+
+5.2. "Data Provider" means any person who is the source of Data
+provided under this agreement and in reliance on a Data Recipient's
+agreement to its terms.
+
+5.3. "Data Recipient" means any person who receives Data directly
+or indirectly from a Data Provider and agrees to the terms of this
+agreement.
+
+5.4. "Results" means any outcome obtained by computational analysis
+of Data, including for example machine learning models and models'
+insights.
diff --git a/apps/desktop/resources/licenses/cua-driver/Inter-OFL.txt b/apps/desktop/resources/licenses/cua-driver/Inter-OFL.txt
@@ -0,0 +1,93 @@
+Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+https://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION & CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
diff --git a/apps/desktop/resources/licenses/cua-driver/LICENSE b/apps/desktop/resources/licenses/cua-driver/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Cua AI, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.