0.9.2

0.9.2 — 2026-10-27
Tidier tab strip: the tab in front is always 35% wider than the others, whatever it holds, and the width change is a quick linear animation. When tabs overflow, the rest share the full width, the + chat and + terminal buttons sit before the dropdown, and hovering it opens the list at once.
Tab dropdown: hover a row for a close button; a tab you pick from the list stays in the strip when you switch to another visible tab; chats show a chat icon, and the hidden-tab count is yellow.
Gemini terminals: New terminal offers Gemini CLI beside Claude Code and Codex, and any agent added later.
Dragging terminals to reorder them works again. The Chrome side panel and the Exchange website get all of this too.

0.9.1 — 2026-10-27
Terminal tabs in the chat: open a real shell, or Claude Code or Codex in their own CLI, as a tab beside your conversations — from the tab strip's +, New Chat or AI Browser: New Terminal. It uses your own default shell profile, copy and paste work as in a terminal, and links open in the browser. macOS and Windows; Linux is not supported yet.
Agents that use your terminal: Ask agent or + → Terminal… pins a terminal to a conversation. Its agent can read the screen and wait for a command to finish; typing into the terminal asks you first, Watch only lets it read and never type, and Pause agent input stops it at once. Your own typing always comes first.
Insert into a terminal: the terminal toolbar's + puts a page address, an element, a screenshot, a file, the editor's selection or page markers into an agent CLI's prompt, without pressing Enter.
Terminals on the website: with AI Browser › Chat: Remote Terminal on and an encrypted connection, the Exchange website can watch terminals you mark Allow website access and, after Take control, type into them — with a key bar for phones. Off by default; your typing in VS Code takes control back.

0.9.0 — 2026-10-23
Exchange server: share a chat and a browser tab with a self-hosted website, and send messages, stop turns, pick elements, add markers and click through the page from any device. The connection is encrypted end to end and opened from VS Code, so nothing has to listen on your machine.
One chat on every surface: the VS Code chat, the Chrome side panel and the website now follow the same rules. A control that a surface cannot use is greyed out with the reason, and updates arrive as small patches instead of whole states.
Git state on the website: commits, branch switches and staged changes made in VS Code appear on the website straight away.
Attach the current page: the Chrome side panel and the website offer the page you are looking at as a dashed suggestion. One click attaches it, together with a note telling the agent which browser_* tools reach it.
Google Chrome from the website: the website's globe menu can open Chrome on the VS Code machine. Its Browser panel now labels each tab as Chrome or VS Code.
Fixes: a chat tab no longer stays marked as shared in Chrome after Chrome is closed. Agents can no longer send copy, cut or paste shortcuts, which would have exposed your clipboard.

0.8.10 — 2026-10-23
More browser actions: native hover, drag, keyboard shortcuts and text insertion join the MCP tools. Clicks support double and right clicks and refuse covered, disabled or ambiguous targets.
Shadow DOM and transformed frames: snapshots and actions reach open and closed author Shadow DOM. Pointer actions account for scaling, rotation, skew, CSS zoom and perspective in nested and cross-site iframes.
Optional humanized input: curved pointer movement, varied pauses and character-by-character Unicode typing, including joined emoji. Enable humanize per action; no additional model or browser plugin is needed.
Safer input delivery: native actions run in sequence per tab, use bounded waits and release held keys or mouse buttons on cancellation. Cross-process frames verify pointer targeting before a click, without replaying issued clicks.