Reado v1.13.0

Added

• Your password manager, in the browser pane. A key in the pane's toolbar lists
  the logins your vault holds for the page's origin and fills the form with one —
  including the one-time code, and including generating and saving a new login when
  you are signing up. It talks to 1Password's op or Bitwarden's bw, whichever is
  installed, so the credential comes from the vault you already trust; nothing is
  read out of a browser profile and no secret is ever cached, persisted or logged.
  (The pane is a system webview, which cannot load browser extensions — this is the
  interface both vendors ship for exactly that reason.)
• Both CLIs are listed in Extensions. 1Password's op and Bitwarden's bw
  show up under their own marks, like anything else Reado can use: installed,
  among your extensions;
  missing, as a row with the install command for your OS and whatever else the
  binary alone doesn't cover. If you run the desktop app and never knew the CLI
  existed, that is where you find out — and the browser pane points you there when
  it can't find one. Each one opens onto a guide Reado wrote — what the CLI is for,
  why the browser extension can't serve here, how to set it up, how filling works,
  and what Reado does with your password once it has it.
• A page holding a password is off limits to the agent. While any password field
  in the page has something in it, the agent's commands are refused rather than
  filtered — the refusal surfaces as a request you can allow for that page, and the
  permission lapses as soon as the page navigates. Anything Reado filled from the
  vault is redacted from what the agent reads: the .reado/ mirror, every command
  result, "send to agent". Your own inspector keeps showing the real page.
• Open in your browser. The browser pane's toolbar can hand the current page to
  your real browser — where your password manager's extension lives, since the
  in-app pane is a system webview and can't load browser extensions.

Fixed

• Undo works in the editor again. ⌘Z was being taken by the native Edit menu
  before the editor ever saw it: a predefined Undo item carries the accelerator and
  asks the system's undo manager, which knows nothing about the editor's own
  history — so the keystroke did nothing at all. Undo and Redo are now Reado's own
  menu items without accelerators, so the key reaches the editor, and the menu
  entries still work. Cut, copy and paste stay predefined, because those the editor
  really does receive.
• The address bar goes where you ask. A bare host now gets https:// (http://
  when it looks like a dev server — loopback, a .local/.test name, or an explicit
  port), and anything that isn't an address searches the web instead of silently
  failing. macOS App Transport Security no longer blocks the pane from loading a
  plain-http:// dev server reached by name (an /etc/hosts alias, a LAN IP).
• Agent navigation follows you. Navigating the pane yourself allowlists that
  origin for the agent, so a local server behind an /etc/hosts alias stops
  answering "origin not allowed"; *.localhost, ::1, 0.0.0.0 and the whole
  127.0.0.0/8 range count as loopback.

---

See the assets below to download and install Reado for your platform.
Reado updates itself automatically from signed releases.