Repository navigation
Scope v1.1.0
Scope 1.1.0 — Find the request. Check the change.
Scope 1.1.0 adds structured desktop traffic filters, an offline HAR comparison
tool for CI and a smaller allocation footprint during native session imports.
Existing capture, replay, archive formats and free features remain available.
Structured traffic search
Find failed POST requests with filter: method=POST status>=500, narrow to an
exact host, search plain request/response text, or combine lifecycle and edited
conditions. Filters run before pagination. Ordinary text keeps its previous
literal behavior, and inline syntax help includes examples.
Offline API change evidence
The source archive includes the dependency-free tools/har-compare Node CLI.
Compare saved HAR files, select exact operations, ignore volatile JSON fields
per endpoint and author explicit allowed-status/required-field/type contracts.
Export deterministic JSON, escaped offline HTML and JUnit for a CI job.
Exit 0 means no configured regression, 1 identifies regression candidates,
and 2 means the analysis was invalid or incomplete. An unchanged HTTP 500 can
pass observation mode; author a status requirement to reject it. Repeated calls
pair by encounter order, so reordered/request-body-dependent calls may remain
ambiguous. Reports omit captured scalar values, headers, cookies and query data;
readable host/path/field labels still require review before sharing. --labels ids
reduces labels rather than guaranteeing anonymity.
Leaner native imports
Native import now consumes its already-owned exchange JSON tree instead of
cloning the complete tree. Validation and the atomic SQLite transaction remain.
Recorded bounded Linux debug-profile tests with 64 MiB of decoded bodies show
about 31–33% lower absolute process peak RSS. These measurements are not a
release-build speed claim or a general memory bound. Streaming remains future work.
Reproduction, raw measurements and limitations
Packages and verification
The release targets macOS arm64, Windows x64 and Linux x64, with a source ZIP,
platform build manifests and SHA-256 checksums. The HAR CLI is available from
the source ZIP and requires Node 22.22.3 or newer. Optional native Frida binaries
remain separate upstream installations and are not bundled in public packages.
Verify the downloaded asset against SHA256SUMS.txt and inspect its platform
build manifest for the exact source commit. Cross-platform CI covers locked
workspace/frontend tests, packaging and headless desktop/stdio MCP smoke; the
HAR workflow independently checks hostile report handling and Chromium/CSP.
Verified release candidate
All three release builds passed their locked workspace/frontend tests, packaging,
resource checks and real desktop/stdio MCP smoke. The separate fresh-main HAR
workflow passed its hostile-report and Chromium/CSP checks, and all CodeQL
analyses passed. Platform manifests identify exact source commit
0a953ca7f3d5b7bcd67d4445a7ae6dcf42e76fcb; downloaded asset SHA-256 checks passed.
The final macOS arm64 ZIP was independently checked and its actual packaged app
passed signature/version/architecture checks. In an isolated local test, the app
captured six synthetic localhost requests; structured search returned the exact
HTTP 401 match, rejected an invalid status predicate, and recovered when filters
were cleared. Response-body inspection worked and the app closed cleanly. Its
bundled MCP executable passed capture, redaction/authentication boundaries,
replay-denial, persistence/restart and session-isolation checks.
Windows/Linux interactive installers and Android/device capture were not tested
for 1.1.0; those interactive paths remain experimental. The macOS package is
ad-hoc signed, without Apple notarization. Existing dependency limitations are
listed in the dependency record.
Back up important captures before upgrading. Bodies remain buffered up to 16 MiB
each; WebSocket frames, trailers, HTTP/3 and large-session streaming are not added.
AGPL-3.0-or-later. Third-party licenses and notices remain included.