GLouv · Oct 1, 2026 · Oct 2, 2026 · Oct 2, 2026 · Oct 2, 2026 · Oct 2, 2026
diff --git a/.github/workflows/side.yml b/.github/workflows/side.yml
@@ -0,0 +1,50 @@
+name: side
+
+# Udgiver computermcp.dev fra docs/ og sætter GitHub-stjernerne ind, mens siden bygges
+# (scripts/stjerner.py). Ingen script og intet tredjepartskald i browseren: tallet står
+# i HTML'en. Det opdateres ved hvert skub til main og én gang i døgnet.
+#
+# SLÅET FRA indtil to ting er gjort, begge af en der ejer repoet:
+#   1. Settings > Pages > Source = «GitHub Actions» (i dag: «Deploy from a branch», main /docs)
+#   2. Repo-variablen SIDE_VIA_ACTIONS = true (Settings > Secrets and variables > Actions > Variables)
+# Uden variablen springes jobbet over (ikke rødt), og den klassiske udgivelse kører som før.
+# Tilbage: sæt variablen til false og Source tilbage til «Deploy from a branch».
+
+on:
+  push:
+    branches: [main]
+    paths: ['docs/**', 'scripts/stjerner.py', '.github/workflows/side.yml']
+  schedule:
+    - cron: '17 5 * * *'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+concurrency:
+  group: pages
+  cancel-in-progress: false
+
+jobs:
+  udgiv:
+    if: vars.SIDE_VIA_ACTIONS == 'true'
+    runs-on: ubuntu-latest
+    environment:
+      name: github-pages
+      url: ${{ steps.udgiv.outputs.page_url }}
+    steps:
+      - uses: actions/checkout@v4
+      - name: Stjernerne ind i siden
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          n=$(gh api "repos/${{ github.repository }}" --jq .stargazers_count)
+          python3 scripts/stjerner.py docs/index.html "$n"
+      - uses: actions/configure-pages@v5
+      - uses: actions/upload-pages-artifact@v3
+        with:
+          path: docs
+      - id: udgiv
+        uses: actions/deploy-pages@v4
diff --git a/.gitignore b/.gitignore
@@ -18,6 +18,7 @@ videos/*/.hyperframes/
 # blev TAVST holdt uden for repoet - sitet ville faa en <video> uden fil, og
 # lokalt saa alting rigtigt ud fordi filen laa paa disken.
 !docs/demo.mp4
+!docs/hero-10.mp4
 .dialog-kvittering
 
 # MCPB-bundle build-output (bygges on demand med scripts/build-mcpb.sh)

diff --git a/README.md b/README.md
@@ -1,6 +1,6 @@
 # Computer MCP
 
-<img src="docs/demo-poster.jpg" alt="A screenshot with the password field painted black, a consent dialog naming the app, and the audit log underneath" width="820">
+<img src="docs/demo-poster.jpg" alt="Gate 1: a secure field painted black in memory before the screenshot is written. Gate 2: the menu bar icon turns orange and asks before a file goes to the Trash; password managers are refused. Gate 3: a log line where typed text is a length and a salted fingerprint." width="820">
 
 **Computer use you can actually leave running.**
 
@@ -122,7 +122,7 @@ claude mcp add computer -- npx -y @agent360/computer-mcp
 ```
 
 ```jsonc
-// Cursor, VS Code, Codex CLI, Windsurf - mcp.json
+// Cursor, VS Code, Codex CLI - mcp.json
 {
   "mcpServers": {
     "computer": { "command": "npx", "args": ["-y", "@agent360/computer-mcp"] }

diff --git a/docs/404.html b/docs/404.html
diff --git a/docs/apple-touch-icon.png b/docs/apple-touch-icon.png
diff --git a/docs/blog/driving-macos-from-an-ai-agent.html b/docs/blog/driving-macos-from-an-ai-agent.html
diff --git a/docs/blog/index.html b/docs/blog/index.html
diff --git a/docs/blog/screenshot-password-leak.html b/docs/blog/screenshot-password-leak.html
diff --git a/docs/demo-poster.jpg b/docs/demo-poster.jpg
diff --git a/docs/demo.mp4 b/docs/demo.mp4
diff --git a/docs/docs/capability-matrix/index.html b/docs/docs/capability-matrix/index.html
diff --git a/docs/docs/install-claude-code/index.html b/docs/docs/install-claude-code/index.html
diff --git a/docs/docs/install-claude-desktop/index.html b/docs/docs/install-claude-desktop/index.html
diff --git a/docs/docs/install-codex/index.html b/docs/docs/install-codex/index.html
diff --git a/docs/docs/install-copilot/index.html b/docs/docs/install-copilot/index.html
diff --git a/docs/docs/install-cursor/index.html b/docs/docs/install-cursor/index.html
diff --git a/docs/docs/install-vscode/index.html b/docs/docs/install-vscode/index.html
diff --git a/docs/docs/uninstall/index.html b/docs/docs/uninstall/index.html
diff --git a/docs/docs/when-not-to-use/index.html b/docs/docs/when-not-to-use/index.html
diff --git a/docs/favicon.ico b/docs/favicon.ico
diff --git a/docs/hero-10.jpg b/docs/hero-10.jpg
diff --git a/docs/hero-10.mp4 b/docs/hero-10.mp4
diff --git a/docs/index.html b/docs/index.html
diff --git a/docs/learn/computer-use-mcp/index.html b/docs/learn/computer-use-mcp/index.html
diff --git a/docs/learn/mcp-security/index.html b/docs/learn/mcp-security/index.html
diff --git a/docs/learn/owasp-mcp-top-10/index.html b/docs/learn/owasp-mcp-top-10/index.html
diff --git a/docs/llms-install.md b/docs/llms-install.md
@@ -34,7 +34,7 @@ OpenAI Codex:
 codex mcp add computer -- npx -y @agent360/computer-mcp@latest
 ```
 
-Any other client (Cursor, VS Code, Windsurf, Cline) - write this into that
+Any other client (Cursor, VS Code, Cline) - write this into that
 client's MCP config:
 
 ```json
@@ -51,14 +51,14 @@ client's MCP config:
 ## Step 2 - pick the mode BEFORE the first run
 
 This is the decision that matters. The default is `allow`, so an agent can be left
-running; password managers, terminals, quitting and closing still ask. Set
+running; terminals, quitting and closing still ask, and password managers are refused. Set
 `CMCP_MODE` in the server's `env` block:
 
 | `CMCP_MODE` | What the agent can do | Use it when |
 |---|---|---|
 | `readonly` | Only the 14 read tools are listed. The write tools do not exist as far as the model is concerned. | You are evaluating, or the agent only needs to look. **Start here.** |
-| `ask` | The first write opens a dialog; one yes grants the session. Password managers ask every single time, terminals and editors once per session. | You want to approve before anything is touched. |
-| `allow` | **Default.** Writes proceed without asking. Still logged. Password managers still ask every time, terminals and editors once per session. | Normal use: an agent you can leave running. |
+| `ask` | The first write opens a dialog; one yes grants the session. Password managers are refused (with CMCP_BACKGROUND=0 they ask every time), terminals and editors ask once per session. | You want to approve before anything is touched. |
+| `allow` | **Default.** Writes proceed without asking. Still logged. Password managers are still refused (with CMCP_BACKGROUND=0 they ask every time), terminals and editors ask once per session. | Normal use: an agent you can leave running. |
 
 Recommend `readonly` for a first install and say why: nothing can go wrong, and
 the user can see the tool list before granting anything.

diff --git a/docs/llms.txt b/docs/llms.txt
@@ -1,17 +1,18 @@
 # Computer MCP
 
-> A macOS computer-use MCP server with the guardrails on by default. Password
-> fields are blacked out while the screenshot is still in memory, no click or
-> keystroke happens until a human approves, and every call is written to an
-> log that only grows. No account, no API key, no model inside it. MIT.
+> A macOS computer-use MCP server that works in the windows behind yours. Password
+> fields are blacked out while the screenshot is still in memory, deletions
+> and sending a message ask a person first, password managers are refused, and every call
+> is written to a log that only grows. No account, no API key, no model inside
+> it. Free, local, MIT.
 
 # FORBEHOLD
 VERSION: npx serves 0.1.0, which has 12 tools. The 32 tools described below are
 the source: they are built and tested but not published yet. Do not tell a user
 that a tool is available after an npx install unless it is one of the twelve.
 # /FORBEHOLD
 
-Install: `npx @agent360/computer-mcp` (ships a signed universal binary; no Swift needed)
+Install: `npx @agent360/computer-mcp` (ships a universal binary with an ad-hoc signature, not notarized; no Swift needed)
 Repository: https://github.com/Agent360dk/computerMCP
 npm: @agent360/computer-mcp
 Registry name: io.github.Agent360dk/computer-mcp
@@ -33,7 +34,8 @@ for, because that machine also holds passwords, keys and production terminals.
    windows of listed password managers are painted opaque black on the bitmap
    in memory. The unredacted image is never written to disk.
 2. Consent where it matters. Default mode `allow`: ordinary writes proceed
-   and are logged. Password managers ask every time regardless of mode or
+   and are logged. Password managers are refused in the default background
+   mode and ask every time with CMCP_BACKGROUND=0, regardless of mode or
    prior approval; terminals and editors ask once per app per session;
    quitting, closing and destructive-looking menu items ask every time.
    `CMCP_MODE=ask` adds a dialog before the first write. An unanswered
@@ -49,10 +51,11 @@ for, because that machine also holds passwords, keys and production terminals.
 
 - CMCP_MODE=readonly - write tools are not listed at all
 - CMCP_MODE=ask - the first write opens a dialog that grants the session;
-  password managers ask every time, terminals and editors once per session
+  password managers are refused (with CMCP_BACKGROUND=0 they ask every time),
+  terminals and editors once per session
 - CMCP_MODE=allow - DEFAULT; writes proceed without asking, still logged;
-  password managers still ask every time, terminals and editors once per
-  session, and that is not configurable
+  password managers are still refused (with CMCP_BACKGROUND=0 they ask every
+  time), terminals and editors once per session, and that is not configurable
 
 ## The 32 tools, 14 of them read-only
 

diff --git a/docs/logo-400.png b/docs/logo-400.png
diff --git a/docs/logo.svg b/docs/logo.svg
diff --git a/docs/og-forside.jpg b/docs/og-forside.jpg
diff --git a/docs/og-image.jpg b/docs/og-image.jpg