1.0.0 13 August 2026
First public release.
Added
- CSS inspection with cascade walking, authored-unit preservation and multi-format copy.
- Full-page screenshot engine with sticky-header pinning, lazy-load pre-scroll, animation freeze and cookie-banner dismissal.
- Markdown viewer with GFM, Mermaid, LaTeX, themes, two-file diff and clipboard rendering.
- Record, replay and export to Playwright, Puppeteer, Cypress and Selenium.
- Agent safety suite: approval gate, credential redaction, prompt-injection flagging, DOM compression, delta snapshots, time-travel timeline.
- Encrypted identity vault using AES-256-GCM.
- Device-bound licensing with a non-extractable key and a three-installation limit.
- Runtime permission broker: every optional permission is requested at first use with an explanation, and a denial returns a structured error instead of crashing.
Fixed before release
These were found by an adversarial test pass and are recorded because a fix without a record gets rediagnosed from scratch next time.
- Licence verification could be bypassed entirely. A failure to verify the signature fell back to trusting the licence payload, so any base64 blob claiming Pro was accepted. The fallback is gone; an unverifiable licence is not a licence.
- Unreadable pages were reported as empty pages. Every error from a page read was swallowed into a blank result, so an agent saw a page with no content instead of a permission failure and acted on that. Unreadable pages now fail by name.
- Dismissing Chrome's debugging banner permanently broke CDP tools. Attach state was cached with no invalidation, so once Chrome dropped the session every later command failed. The extension now notices and re-attaches.
- Link checking reported every external link as healthy. Cross-origin responses are opaque, and opaque was being counted as success. Now reported as a distinct third state.
- Cross-origin stylesheets were silently skipped, producing a rule count that looked complete. Now reported as partial with the sheets named.
- API keys and JWTs were not masked despite the data-loss-prevention claim; real key formats carry more separators than the pattern allowed.
- Snapshots were unbounded. A page with thousands of controls produced a snapshot larger than the context window it was meant to fit, and generating it was quadratic — one test took 28 minutes. Now bounded and linear.
- The approval gate logged and proceeded. It now refuses, which is what the word means.
- Broad site access and the debugger permission were requested at install. Both are now optional and requested at first use.
- The MCP transport dispatched malformed frames instead of rejecting them with the protocol's own error code.
- The licence service could over-issue activations. Counting seats and then inserting is two operations; two machines claiming the last seat both passed. The limit is now enforced inside the write.
Not included
- Camera gesture control and microphone voice control. Neither has a single-purpose story for a developer tool, and enterprise buyers block
videoCaptureandaudioCaptureat policy level. The build is verified to contain neither. - Fingerprint spoofing, user-agent rotation and anti-bot evasion. These contradict the product and are grounds for store removal.