v0.5.3

Features

• claims: cooperative tab ownership across agents — browser.claim_tab, browser.release_tab, browser.my_tabs, plus claimed_by / claimed_by_me on browser.list_tabs. Action tools auto-claim free tabs and reject when another agent holds the tab. TTL by inactivity, auto-release on IPC disconnect, full audit trail via browser.events.
• extension: redesigned popup with English copy, brand-aligned visual, pulsing status dot, gradient action button.
• updates: in-place self-update from the setup UI — press u in the Updates screen to stop the running primary and run npm install -g automatically.
• release: self-serve PR-based release tooling — npm run release -- <bump> creates a release branch + PR, finalize workflow tags and creates the GitHub Release on merge.

Security

• Cleared all open CodeQL alerts: switch-dispatch over closed tool-name union (unvalidated-dynamic-method-call), assertSafeNpmName validates the registry URL parameter (file-access-to-http), sanitizeLogValue strips control characters from IPC bridge logs (log-injection), removed unused imports.

Configuration

• multi-agent + auto-reelect default ON for fresh installs; on-disk config only carries explicit overrides.