v0.10.0

Changed

• The Python client (browser-daemon-client) now has the daemon's version and is
  published to PyPI by the same release (vX.Y.Z tag), starting with 0.10.0.

Added

• Extensions: the toolbar badge message takes a tone, icon swaps the
  button's picture (a PNG data URL), manifests can declare shortcuts that the
  view catches (before the page gets them) and sends to the toolbar frame, and
  the frame hears the rbw version of the node's secret agent (rbw message) to
  warn about a mismatch. A logins request may carry the master password to
  unlock with (rbw unlock --stdin on the node, never logged; refused in
  shared tabs and publicly shared sessions). Needed by rbw 2.37.0's vault bundle:
  deploy this before it.

• POST /api/run runs a Playwright script or a list of steps (goto, click,
  fill, wait, text, screenshot, ...) in a profile's browser, a session or a
  throwaway browser, and answers with the result, so clients such as Home
  Assistant integrations need no Playwright of their own. Runs are forwarded
  to the node that has the profile, need the cluster secret, and each runs in a
  Node.js process under Node's permission model. Off unless the node has
  --run-node and --playwright-core (NixOS: run.enable). See
  docs/run.md.

• browser-daemon-client, an async Python client with nothing but aiohttp
  (python/, the flake's packages.browser-daemon-client): runs, sessions,
  tabs and a page's login, for Home Assistant integrations and scripts.

• /api/peers/{node}/... also forwards the session list, a session, a node's
  tabs (/json/list) and a page's login (POST /api/pages/{id}/auth), so a
  client can reach every node through one.