Add allowlisted macOS and Windows computer use

.gitignore

@@ -5,6 +5,7 @@ __pycache__/
 *.egg-info/
 build/
 dist/
+packaging/cache/
 .coverage
 
 # Local secrets (live-smoke BYO keys) — never committed

README.md

@@ -47,6 +47,7 @@ Under the hood:
 - **Produce real deliverables** - documents, spreadsheets, reports, and web pages land as files you can open and share.
 - **Work from Slack** - mention `@OpenWorker` in a channel; a session opens on your desktop, the work happens with your tools, and the answer comes back as a thread reply.
 - **Use your everyday tools** - 25+ integrations including GitHub, Slack, Jira, Notion, Linear, HubSpot, Outlook, monday.com, Gmail, and Google Calendar, plus your **terminal and local files**. Any tool reachable over [MCP](https://modelcontextprotocol.io/) plugs in too, with per-tool control.
+- **Control selected desktop apps** - opt in on macOS or Windows under Settings → Computer use, choose exact application paths, and approve every program launch and input action.
 - **Run on a schedule** - automations for recurring work: a morning brief, a weekly report, a standing watch over a channel. Runs land in the app with full transcripts.
 - **Ask before acting** - writes, sends, and shell commands are approval-gated. Unattended runs park their asks in an inbox instead of acting on their own.
 

coworker/connectors/catalog_copy.py

@@ -30,6 +30,9 @@
     "browser": "A built-in browser agents drive to read pages and act on "
     "websites — separate from your personal browser, with actions subject to "
     "approval.",
+    "computer": "Operate explicitly allowed Windows applications through a local "
+    "native accessibility driver. OpenWorker reads fresh window state before each "
+    "action and keeps program launches and desktop input behind approval.",
     "github": "Work with issues, pull requests, repository files, and CI "
     "status. One click installs the OpenWorker GitHub App on the repositories "
     "you pick; mention the agent on an issue or PR and it answers from your "
@@ -89,6 +92,11 @@
         "Clicks, types, and uploads files only inside that session.",
         "Never touches your personal browser or its logins.",
     ],
+    "computer": [
+        "Reads visible window structure and screenshots only from programs you allow.",
+        "Asks before opening a program, clicking, typing, or pressing a key.",
+        "The bundled driver policy denies access to other applications and does not expose shell or file-control tools.",
+    ],
     "github": [
         "Reads code, issues, pull requests, and CI on repositories you grant.",
         "Creates issues, replies, and reviews pull requests.",