v0.4.1

Browser Recorder v0.4.1 restores setup checks and recordings with the current ChatGPT desktop Browser runtime.

Changes

• Use the Browser runtime returned by current ChatGPT desktop releases.
• Preserve the correct cross-origin failure cause when cursor capture is interrupted, while retaining cancellation and discarding failed recordings.
• Recognize encoded cursor movement on scaled viewports without reducing qualification thresholds.
• Replace the cross-site starter prompt with a same-site example and meet the Directory subtitle limit.
• Refresh setup guidance and release/download references.

Requirements

ChatGPT desktop on macOS, the official Browser plugin, full CDP access, and FFmpeg/FFprobe with H.264/MP4 support. Website CDP approval may still be requested.

Validation

461 automated tests, release readiness, pinned official plugin/skill validators, isolated installation on Codex CLI 0.160.0, independent reviews, and real production In-app Browser qualification passed. Required GitHub checks are verified before publication.

Update

For local installation, check out v0.4.1, refresh the marketplace, reinstall the plugin, and start a new task. The attached ZIP contains only the plugin package; the adjacent checksum verifies it. Plugin Directory availability follows its separate portal update status.

Release commit: 2c3aa7f13e21a90529b18d4e18f023d139f3a00e

ZIP SHA-256: 88467231e9e91d726a643e6cd181edc8cade8445eb814db7c6e2f5f3657a4c60

v0.4.0

Browser Recorder v0.4.0 makes the Codex In-app Browser the sole recording
surface and saves one explicitly approved flow as a local, silent H.264 MP4.

Who should update

All v0.3.x users should update. This release intentionally removes Chrome
recording and the Chrome fallback. It now requires the official Browser plugin
with Full CDP enabled in Codex Browser settings.

What changed

• Uses only the Codex In-app Browser and owns one fresh recording tab per run.
• Defaults to visible Interactive Recording, with an explicitly approved hidden
  Unattended Recording mode for automated E2E QA.
• Records directly from the Browser CDP screencast and primes its pixel pipeline
  with one discarded in-memory viewport screenshot.
• Composes visible cursor movement and evidence-backed click feedback.
• Replaces content-category refusal with a clear Content Warning and explicit
  user authorization.
• Keeps strict same-origin, capture, encoding, validation, publication, and
  exact-cleanup boundaries.
• Saves the verified MP4 locally with no audio and no automatic upload.

Requirements

• Codex desktop on macOS with the official Browser plugin.
• Full CDP enabled in Codex Browser settings.
• FFmpeg and FFprobe with H.264 and MP4 support.

Update

Update or reinstall Codex Browser Recorder from the Plugins Directory. For
a local marketplace checkout, fetch and check out v0.4.0, refresh the
marketplace, reinstall the plugin, and start a new Codex task.

Verification

• 453 automated tests passed.
• Coverage: 91.25% lines, 87.36% branches, 91.87% functions.
• All 14 Marketplace submission eval cases passed.
• Official pinned OpenAI plugin and skill validators passed against the exact
  release ZIP.
• Real Codex In-app Browser qualification contract v2 passed on the exact
  release commit: two sequential H.264 MP4 recordings, pointer/click visuals,
  hidden continuation, same-origin navigation, cross-origin refusal,
  cancellation, validation, and exact cleanup.
• CI and CodeQL passed on the release commit.

Release commit:
94cb4c3eaeb0f57ecc5f931f3a413aa660d1cedd

ZIP SHA-256:
9b45f8fff5ef882bd6102e1adae9e5d3a643f5290e3dafc62442f74eadba2d5d

v0.3.3

Browser Recorder v0.3.3 makes setup, consent, failures, and support easier
to act on while preserving the same local-only recording and privacy boundary.

Who should update

Update from v0.3.2 if you want clearer starter prompts, consent and failure
guidance, safer issue forms, and a dedicated place for usage questions.

What changed

• Reworked public plugin descriptions, prompts, support, and contribution
  guidance around complete, plain-language tasks.
• Added focused regression coverage for every public recording failure message
  and the privacy-safe fallback for unknown internal errors.
• Made public issue forms explicitly reject recordings, raw frames, private
  content, and Browser/CDP diagnostics.
• Removed internal research notes from the public project tree.
• Made startup cancellation tests isolated and bounded in restricted
  environments.

The recording engine, supported Chrome-only surface, explicit-consent boundary,
one-approved-site limit, local H.264 MP4 output, and no-audio/no-upload behavior
are unchanged.

Update

Update or reinstall Codex Browser Recorder from the Plugins Directory. For
a local marketplace checkout, fetch and check out v0.3.3, refresh the
marketplace, reinstall the plugin, and start a new Codex task.

Verification

• 292 automated tests passed.
• Coverage: 92.12% lines, 84.52% branches, 91.97% functions.
• Official pinned OpenAI plugin and skill validators passed against the exact
  release ZIP.
• Real Chrome frame contract, two sequential MP4 recordings, and the public W3C
  pointer/click smoke flow passed.

Release commit:
6d5dcac7a32712887ea9be9ebebd8d7f74e88d85

ZIP SHA-256:
58cabcfeb6a76c2f18ea7e7c23fa5977bae491d4d754d72a378a44b05606ff28

v0.3.2

0.3.2 — Invocation, cleanup, and click-feedback fixes

Release commit: 56008801945e42484d74f340392990e8e4e9cd97

Fixed

• Publish the canonical $codex-browser-recorder:record-browser invocation across starter prompts, documentation, support guidance, and submission evals.
• Verify that the exact owned recording tab disappears from Chrome's tab inventory after closure, with one bounded retry and an explicit manual-cleanup signal when absence cannot be confirmed.
• Hide click feedback between non-contiguous feedback windows instead of rendering a ghost ring at the viewport origin.

Verification

• 290 automated tests passed.
• Coverage: 92.10% lines, 84.52% branches, 91.97% functions.
• Official pinned OpenAI plugin and skill validators passed against both the source tree and packaged ZIP.
• GitHub Actions test, analyze, and CodeQL checks passed.
• Chrome 150.0.7871.181, ChatGPT desktop and Chrome plugin 26.715.72359.
• Live frame-contract gate passed with one received and acknowledged frame.
• Two sequential H.264/yuv420p MP4 recordings passed with distinct paths, 10 fps, at most 720p, and no audio.
• Public W3C Pointer Events click recording visibly confirmed the cursor and click ring, followed by cursor-only frames with no viewport-origin ghost ring.
• The release session retained no Chrome tabs, partial files, or Working Recordings.
• The Codex in-app Browser remains unsupported and fails closed during preparation with browser_surface_unsupported.

Assets

• codex-browser-recorder-v0.3.2.zip
• codex-browser-recorder-v0.3.2.zip.sha256
• SHA-256: 16b8f5063ec8b86548da9b93e39bd0b53e3b37358c5fb2c62e3b48ac679b827b

Generated recordings and browser diagnostics are intentionally not attached.

v0.3.1

0.3.1 — Recording boundary hardening

Release commit: b11f3ab4ad6f465fc5ae93bd5e203f5879425155

Fixed

• Prevent late FFprobe validation from publishing a Saved Recording after terminal timeout, cancellation, or cleanup.
• Re-attest the approved top-level origin before and after each action and after pointer visual tails, so cross-origin transitions fail closed before another action can run.
• Add public-flow regressions for pointer-tail origin changes and late validation, plus a real subprocess cancellation test.

Verification

• 281 automated tests passed.
• Coverage: 92.01% lines, 84.24% branches, 91.90% functions.
• Official pinned and current OpenAI plugin and skill validators passed.
• GitHub Actions test, analyze, and CodeQL checks passed.
• Chrome 150.0.7871.125, Codex desktop/Chrome plugin 26.715.31925.
• Live frame-contract gate passed with one received and acknowledged frame.
• Two sequential H.264/yuv420p MP4 recordings passed with distinct paths, 10 fps, at most 720p, and no audio.
• Public W3C pointer-click/same-origin recording visibly confirmed the cursor and green click ring.
• Cross-origin transition failed with origin_changed_during_recording, skipped the next action, and published no media.
• The Codex in-app Browser remains unsupported and fails closed during preparation.

Assets

• codex-browser-recorder-v0.3.1.zip
• codex-browser-recorder-v0.3.1.zip.sha256
• SHA-256: 0a3e56b7fa750120626ee8b1cd9e38ff4e3ce1906c3c8ce5dd91f2eeea763869

Generated recordings and browser diagnostics are intentionally not attached.

v0.3.0

Added

• Added a user-visible, no-Browser local preflight that reports all detected platform, media-tool, codec, container, and destination blockers.

Changed

• Action-driven recordings now finalize when approved actions finish while retaining a 15-second hard cap; passive flows require an explicit duration.
• Consent and public policies now disclose visible embedded frames and reuse of the selected Browser's existing session.
• Documented the fixed 720p, 10-frames-per-second verification profile and the manual real-Browser release smoke test.
• Added synchronized public-version checks and a dedicated cursor-module coverage floor to release and CI verification.

Verification

• 252 tests passed.
• 92.11% line, 84.54% branch, and 90.57% function coverage.
• Dedicated cursor coverage passed at 88.74% line, 69.23% branch, and 82.76% function coverage.
• Official OpenAI plugin and skill validators, isolated installation, release gates, CI, and CodeQL passed on merge commit 32bfdf995465122075ff18b712dc3e91605b9051.
• An installed-v0.3.0 in-app Browser smoke passed against the public W3C Pointer Events fixture, including visible cursor movement, click feedback, same-origin fragment navigation, pointer-positioned scrolling, action-driven finalization, and fresh-tab cleanup.
• The resulting 1280×720, 10 fps, audio-free H.264 MP4 passed media validation; the private smoke recording is intentionally not attached.
• The release ZIP is reproducible, passes archive integrity checks, and matches the tagged plugin tree exactly.

Artifacts

• codex-browser-recorder-v0.3.0.zip
• codex-browser-recorder-v0.3.0.zip.sha256
• SHA-256: 2f603b01dcd40fea0483038f79093ac41fed93de59afb6e98131dc5a6e6442e1

v0.2.3

Changed

• Moved approved Browser action coordination into the Recording Session so state checks, evidence timing, failure sanitation, cancellation, and cleanup share the recording transaction boundary.
• Replaced caller-side lifecycle polling and public capture status with the Recording Session's passive finished promise while preserving idempotent immediate finalization through stop().

Fixed

• Accepted valid recording timestamps created in Codex's Browser Node runtime across JavaScript realms.
• Closed the frame pump before stopping the CDP screencast so buffered frames cannot produce a late frame_ack_failed during normal finalization.

Verification

• 246 tests passed.
• 91.94% line, 84.27% branch, and 90.07% function coverage.
• Official OpenAI plugin and skill validators, isolated installation, release gates, CI, CodeQL, submission evals, and a real Browser end-to-end recording passed.
• The release ZIP matches the v0.2.3 plugin tree exactly and passes archive integrity checks.

Artifacts

• codex-browser-recorder-v0.2.3.zip
• codex-browser-recorder-v0.2.3.zip.sha256
• SHA-256: bd4dc86f42d3763d0f1ca594e19b6d0847e17fcf4e1e2761c643c50799f4a647

v0.2.2

Availability

• Published as version 0.2.2 in the OpenAI Plugin Directory.

Fixed

• Use the square 256x256 plugin icon as the skills-only listing logo.
• Remove screenshot configuration unsupported by skills-only ZIP submissions.
• Remove eight unused listing assets and sources.
• Add regression coverage for the portal upload contract.

Verification

• 233 tests passed.
• 92.07% line, 84.74% branch, and 90.25% function coverage.
• Isolated installation, five positive and three negative submission evals, official validators, CI, and CodeQL passed.
• The release ZIP matches the v0.2.2 plugin tree exactly and passes archive integrity checks.

Artifacts

• codex-browser-recorder-v0.2.2.zip
• codex-browser-recorder-v0.2.2.zip.sha256
• SHA-256: de23089d02085bcf52c4fcc1ab8975c64f4d91d585924324b5a49e3c3fb8988a