Run the checks no automated test covers, on a real Mac #129

These checks have never run on a real Mac, and no automated check covers them. Everything else that shipped is covered by npm run live-check, by unit tests, or by agents using the tools every day.

Tick a check when it passes. If one fails, open a bug and link it here. Close this issue when every box is ticked.

• Automated run: npm run live-check reports PASS for every check.

Safety. If one of these fails, a clipboard is lost or a mouse button stays held down.

• Kill the MCP client while desktop_insert is pasting into TextEdit. Afterwards the clipboard holds either the original contents, or the inserted text with the reservation held. Older contents are never restored over a newer copy. (Add temporary clipboard paste and lifecycle validation #3)
• Quit Desktop Tools right after an insert that returned unknown, then relaunch it. desktop_clipboard_write is still refused until the receiving app quits. (Add temporary clipboard paste and lifecycle validation #3)
• Paste an image into a plain-text TextEdit document. The result is unknown with clipboard_ownership: "reserved", and quitting TextEdit releases the reservation. (feat: paste an image or files into a native text area with desktop_insert, or leave the clipboard replaced on request #99)
• Kill the client during a 5 s desktop_press, and again during a 5 s desktop_drag. Both times the button is up within about 7 s, and a later click works. (feat: hover and press-and-hold #45, Finish native pointer delivery and validation #2)
• Turn on Pause All Input. desktop_click and desktop_clipboard_write are refused, while desktop_windows and desktop_inspect still work. Resuming lets the same click through, and a relaunch starts unpaused. (feat: pause all input from the app menu #100)

Never run on macOS 27. These were built from documentation or from how older macOS versions behave.

• Notifications: desktop_notifications reads a banner, and desktop_notification_action close, open and an app action (Reminders "Mark as Completed") each do what they say. If they don't, record the banner's AX roles and action names. (feat: list notifications and act on one through Notification Center's custom actions #74)
• Spaces: desktop_switch_space switches. A window on another Space reports availability.reason: other_space, and switching to that Space recovers it. (feat: list Spaces and switch a display's Space #66, Explain native inspection failure when the desktop or target window becomes unavailable #1)
• desktop_fullscreen enters full screen, then exits back to a desktop Space. (feat: enter or exit native full screen for one window #78)
• Two displays, one left of or above the main one: desktop_click, desktop_scroll and desktop_drag on the second display land where intended. Rearranging the displays between inspect and click gets the click refused. (Finish native pointer delivery and validation #2)
• desktop_system_key volume, mute, play/pause and brightness keys work. (feat: press media, volume and brightness keys as system-defined events #80)
• Slack or VS Code: the first desktop_inspect turns on web accessibility and lists the app's web fields, and the window still moves and resizes normally. (feat: turn on Chromium and Electron web accessibility before inspect and read, once per app launch #107)
• Approved Agents: a new agent's first action shows the prompt. Allow lets it through, and Revoke and Forget work from the menu. (feat: ask once per agent before it controls the Mac, and keep agent input off Desktop Tools' own UI (#24) #120)
• Codex: with the [mcp_servers.desktop] entry from docs/mcp.md, desktop_apps, desktop_inspect and one desktop_type complete. (Ship a signed Desktop Tools app for agents outside Ace #27)

Unknowns to answer. These aren't pass/fail; write the answer here.

• Numbers and Excel: does desktop_set_cell find an editable control in a cell, or refuse with CELL_NOT_EDITABLE? (feat: write one table cell by row and column, confirmed by reading the table again #92)
• desktop_close on a Finder window once returned unknown although the window closed. Does that still happen? (Ace: agents can't use Ace's own menus and dialogs when Ace embeds the host #4)

The focus bug (#23) and background paste into web apps (#5) have their own issues.