v0.5.10

• Required native radio groups stop blocking once an option in the same form is selected.

• Step frames are PNG images of the page before the action, with a fresh secret-visibility check.

• Eval commands reject nonpositive concurrency and repeat counts before starting a run.

• Eval scores retain slow provider calls and recovered request failures, with full time and cost, for every arm.
  Task versions include the shared grading rule; historical published results keep their original selection bias.

• Keep HTTP error status in browsing observations and recovery. Failed links are withheld on unchanged
  source pages, and an unfinished run reports the observed session failure rather than a guessed site restriction.

• Empty reads no longer excuse repeated navigation or form cycles; reads that add evidence still do.

• Retire cancelled CDP waits so their late replies are not reported as duplicate responses.

• A supplied TYPESAFE_API_KEY selects direct Jev; otherwise OpenRouter is primary, with Vercel AI Gateway
  supported as a backup or explicit primary. FASTBROWSE_JEV_SOURCE overrides automatic selection.

• Compare fastbrowse and hosted Browser Use on stateful mock workflows with shared site-state grading,
  explicit authorization instructions, fresh cloud browsers and recorded per-attempt results.

• Password changes require a separate new_password secret and authorization to submit. Replacement values
  never pass through a model, and current passwords are not reused as replacements.

• Downloaded text is readable with citations to the response URL. Model context is bounded; artifacts retain
  the full file. Download navigations no longer fail with ERR_ABORTED.

• Counts accept complete leaf list items and fields at record boundaries, while missing page evidence still
  blocks completion. Reads retain quoted context needed for later actions, including a code read on another page.

• An audit suite for the terminal, MCP and embed surfaces. python -m fastbrowse.audit runs a tiered
  matrix of contract and behaviour cases, each carrying the status, exit code and per-check evidence it must
  produce, and writes one JSON report plus a Markdown roll-up. Tier 0 covers the terminal contract without
  calling a model; the paid tiers are refused unless --spend is passed.

• The CLI assigns a distinct nonzero exit code to each stopped status and documents the mapping in --help.
  JSON, embedding and MCP results report the resource and limit behind a budget stop.

• --cloud overrides local browser defaults from the environment. Secret configuration errors report both
  missing variables and missing origins, and a login without stored credentials explains the scoped --secret syntax.

• Read nested gateway errors, recover from input-size refusals, and redact echoed API keys before shortening errors.