v0.3.0

What's Changed

New

• feat(run): let the child ask for values by name over a private socket by @LeeSwallow in #146

Changed

• feat(app): ask an Authenticator port before protected commands by @LeeSwallow in #151

Fixed

• fix(extension): recover from rejected popup calls and check command answers by @LeeSwallow in #158
• fix(app): offer browser rules, start hidden when opening is refused, and wipe edited values by @LeeSwallow in #173
• fix(prototype): retry the supervisor lock while open hands it over by @LeeSwallow in #180

Security

• fix(guard): hide filled inputs in screenshots by @LeeSwallow in #144
• fix(core): wipe age import and export plaintext on every early return by @LeeSwallow in #174
• fix(host): keep the filled reply out of serde_json::Value by @LeeSwallow in #184

Docs and plugin

• docs: mark what v0.2.0 already ships in the roadmap by @LeeSwallow in #148
• docs: tidy design docs and roadmap before 0.3.0 by @LeeSwallow in #188

Under the hood

• chore(guard): measure masking throughput by @LeeSwallow in #145
• refactor(design-check): group rules into folders and remove hidden panics by @LeeSwallow in #159
• refactor(core): split session open and name stored status strings by @LeeSwallow in #160
• refactor(guard): split Guard and GuardedBrowser by responsibility and withhold when the masker cannot be built by @LeeSwallow in #165
• test(broker): give the ego probe test room on a loaded machine by @LeeSwallow in #166
• refactor(extension): split webext port implementations and share the item name rule with Rust by @LeeSwallow in #168
• refactor(core): group vault and transfer use cases into folders by @LeeSwallow in #164
• refactor(broker): group browser modules and share one DOM helper by @LeeSwallow in #162
• refactor(domain): split vault and session vocabulary into context modules by @LeeSwallow in #172
• test: wait for page conditions instead of fixed sleeps in Chrome tests by @LeeSwallow in #178
• refactor(supervisor): split control command parsing and record every start and capture failure by @LeeSwallow in #176
• refactor(cli): read kind arguments from the registry and split command modules by @LeeSwallow in #175
• refactor(app): move the window's rules into domain and core and send them as DTO fields by @LeeSwallow in #181
• test: warm up Chrome before the real-browser tests and write fake browser files whole by @LeeSwallow in #183
• refactor(mcp): move surface rules into core and guard and share tool plumbing by @LeeSwallow in #177
• refactor(cli): wait for a handed-over site through core by @LeeSwallow in #185
• refactor(app): route window clicks and forms through handler tables by @LeeSwallow in #186
• build(deps): update vitest and web-ext past critical advisories by @LeeSwallow in #187
• chore(release): 0.3.0 by @LeeSwallow in #189

Full Changelog: v0.2.0...v0.3.0