v0.9.7: credential capture, uncapped agents, and Grok OAuth
Added
- Accepted login capture. Betterwright can save successful browser logins into the credential vault after trusted-input checks, with headed prompts and a persistent “Never for this site” option.
Changed
- Agent runs no longer have a fixed step cap. Runs continue until completion while bounded by wall-clock and transcript limits, with cancellation propagated through model and tool calls.
Fixed
- Grok OAuth login now uses xAI's registered loopback callback. Betterwright advertises
http://127.0.0.1:56121/callbackinstead of the rejectedlocalhostvariant. Authorization codes are captured automatically by the local callback server. - Grok OAuth sessions refresh automatically. Expired access tokens use the stored refresh token, rotated refresh tokens are persisted, and the existing token is retained if xAI does not return a replacement.
Full changelog: v0.9.6...v0.9.7