Thirteen changes in this release. Delegated agent runtimes, a live activity icon, provider discovery that reads real evidence, and a Sheets path that needs no OAuth credentials of its own.
extension 0.9.91 · mcp 0.11.0 · chrome 116+ · node 24 · MIT
Install: Get FSB from the Chrome Web Store when available, or download the attached extension ZIP for manual installation.
Related work: PR #108 · PR #116
01
Toolbar activity icon
Four animated modes for reading, browser driving, capability calls, and trigger watching.
Watch/capability/read/drive priority ordering.
Frames are pre-rendered per state at ~15fps and swapped through chrome.action.setIcon.
Per-tab claims, 60-second activity expiry, service-worker recovery, lazy frame generation, deduplication, and backpressure.
Old action badge removed.
02
Grok Build delegated runtime
Pinned Grok Build 1.0.4 compatibility.
Private FSB profile and isolated HOME, GROK_HOME, and XDG directories.
SuperGrok browser OAuth connect/continue/disconnect.
Strict login-host and sensitive-URL validation.
ACP session negotiation, tool discovery, FSB-only MCP roster, and cached-token authentication.
Process-tree cancellation, ACP session deletion, journal recovery, and cleanup blocking after unsafe failure.
Ambient provider keys, proxy variables, telemetry destinations, and unrelated agent environments are stripped.
03
Delegation lifecycle and tab ownership
MCP clientInfo is captured, combining clicked, installed, and connected evidence.
API providers are separated from delegated-agent providers; recommendation order is connected → installed → clicked → xAI.
API key/model values survive switching between provider kinds.
Provider preflight refreshes stale compatibility/authentication.
Immutable provider identity is bound to consent and activation.
Start failures expose normalized reasons such as unavailable adapter, spawn failure, drift, route loss, cancellation, and cleanup failure.
Sidepanel shows checking/starting states and uses ordinary automation presentation for healthy tasks.
Provider/owner chip and visible takeover controls were removed.
Input is disabled when another automation owns the active tab.
04
Claude Code adapter
Task-only CLI invocation with a private static FSB profile.
Strict MCP configuration and process-tree termination.
Runtime journals and orphan recovery.
Dangerous auto-approval/yolo flags are forbidden.
Still needs genuine authenticated CLI-to-browser UAT, POSIX/Windows cancellation, crash recovery, and long-running endurance evidence.
05
Secure reverse channel and native host
Authenticated ext:request, ext:response, and ext:event channel.
Loopback-only host/origin checks and rotating session pairing secret.
Native host can install, wake, diagnose, and uninstall the MCP daemon.
It wakes serve only and never directly starts an agent.
macOS, Linux, Windows x64, and Windows ARM64 packaging/registration paths exist.
06
Model discovery and request compatibility
Hosted-provider models are live-discovered with stale-response cancellation and cache bypass.
Saving/testing is blocked until a valid returned model is selected.
LM Studio URL normalization and /v1/models discovery require no API key.
Multiple LM Studio models require explicit selection; missing saved models block startup.
OpenAI Chat Completions now use max_completion_tokens.
GPT-5 and o* reasoning models omit incompatible sampling/logprob options.
xAI, OpenRouter, Custom, and LM Studio retain their compatible request shapes.
07
Google Sheets without extension OAuth credentials
Five operations: spreadsheet metadata, read values, update, append, and clear.
Uses the signed-in Google Sheets page session through gapi.
Bounded UI fallback exists when page APIs are unavailable.
Mutations are serialized per tab and verified through formula-bar/readback evidence.
Local changes remove the GViz read fallback.
Sheet URLs, titles, ranges, formulas, and values are redacted from recording/log surfaces.
08
MCP recording, journals, and replay
MCP tool calls carry task/run/call correlation and resolved tab identity.
Journals are compressed, integrity-sealed, size-bounded, retained automatically, and privacy-scrubbed.
Replay is task-scoped and supports logical multi-tab recordings.
Player supports pause/resume, five speeds, and forward-only seeking.
Failed or truncated sessions remain inspectable but require approval or are non-replayable.
09
Screenshots and multimodal provider handling
Viewport, full-page, region, and element capture.
Optional overlays and mobile/touch emulation.
FIFO per-tab CDP lease; external debugger ownership is never force-detached.
Four screenshots and 25 MiB maximum per model turn.
Native image content plus a private managed PNG for MCP callers.
OpenAI-compatible, Anthropic, and Gemini attachment formats, with text-only fallback on unsupported-image responses.
10
Voice input
Voice input defaults on and is configurable under Advanced.
Dedicated microphone-permission helper.
SpeechRecognition and Whisper transcription paths.
Disabling voice aborts active capture/transcription and closes the helper.
11
Capability catalog, triggers, uploads, and safety gates
Current validation sees 2,319 descriptors.
T1 validation covers 1,879 rows: 1,312 ready and 567 guarded fail-closed.
Only five writes are active; 560 writes remain guarded.
Sensitive-origin and payment operations require explicit mutation consent.
Trigger watchers support blocking/detached operation and service-worker recovery.
Upload paths are validated against sensitive-path restrictions.
12
Settings and knowledge graph
Select controls no longer clip.
Control-panel scrolling is contained.
Expanded 3D knowledge graph and broader site-guide categories.
13
Showcase, dashboard, privacy, and release metadata
Extension/showcase version 0.9.91; MCP package 0.11.0.
Six locales—en, es, de, ja, zh-CN, and zh-TW—with synchronized SEO and hreflang metadata.
/stats remains client-rendered and excluded from sitemap/prerender/LLM crawler lists.
Public stats, telemetry budgets, GPC/opt-out, IP-geo aggregation, PhantomStream viewer, websocket recovery, and no-IP-leak paths have regression coverage.
Chrome minimum raised to 116; root Node requirement raised to 24.
Repository and package metadata remain MIT licensed.
Windows-invalid Finder Icon\r artifact removed.
Validation performed · passed
✓ Full npm test
✓ npm run validate:extension
✓ MCP TypeScript build and native-host boundary checks
✓ Focused provider/model/delegation/Sheets group: 83/83
✓ Replay, screenshots, voice, toolbar, native-host group
✓ Grok Build adapter and OpenAI request tests
✓ Showcase production build
✓ Localization: 1,318 units across five translated locales with no drift
✓ Showcase crawler smoke: 126/126
✓ Catalog/origin/payment/write-readiness gates
✓ Workspace-preservation checks after MCP builds
Full changelog: extension-v0.9.90...extension-v0.9.91
Made by Lakshman Turlapati · FSB ▽0.9.91
