v0.3.0

Changelog

Features

• d8020bb: feat(browser): FindEndpoint/EndpointKey accept an explicit endpoint URL (@sanketsudake)
• ece2f9c: feat(browser): detect Chromium/Brave/Edge/Vivaldi/Arc port files; CHROME_CDP_BIN for the managed launch (@sanketsudake)
• 965ff27: feat(cli): --endpoint for an explicit ws:// or http:// debug endpoint (@sanketsudake)
• b768547: feat(cli): --session / CHROME_CDP_SESSION namespaces the sticky current tab (@sanketsudake)
• fb31c7c: feat(cli): dialog status|accept|dismiss for a native dialog already on screen (RFC-0018) (@sanketsudake)
• f14aa1a: feat(cli): skill verb serves the embedded agent skill (@sanketsudake)
• d205899: feat(cli): storage local|session verbs (RFC-0019) (@sanketsudake)
• 4486aa0: feat(config): CHROME_CDP_ENDPOINT / endpoint key, threaded to the daemon (@sanketsudake)
• 77d685e: feat(net): --har exports retained requests as HAR 1.2 (RFC-0017) (@sanketsudake)
• 4657951: feat(npm): npx-installable shim that downloads the release binary (@sanketsudake)
• 5e16f42: feat(screenshot): --annotate numbered refs with a legend in the envelope (RFC-0016) (@sanketsudake)
• 4440bc5: feat(skills): check-logged-in and fill-grid-and-confirm scenario skills; evals for drive-chrome-cdp (@sanketsudake)
• 5efdd6c: feat(skills): embed the drive-chrome-cdp skill; split SKILL.md into references/ (@sanketsudake)

Fixes

• 5d18d5f: fix(browser): --endpoint requires a host, closing the EndpointKey fallthrough (@sanketsudake)
• af399db: fix(cli): every verb group emits a usage envelope on a bare or typoed invocation (@sanketsudake)
• b5849b0: fix(cli): net --har --clear probes an existing destination file, not just its directory (@sanketsudake)
• 787e827: fix(cli): one freezeConnDefaults list for session, recipe run and mcp (@sanketsudake)
• 9ce8532: fix(config): drop a malformed endpoint instead of bricking the CLI (@sanketsudake)
• 6fb2a74: fix(config): drop the literal CHROME_CDP_BIN from BrowserBin's doc comment (@sanketsudake)
• 377465c: fix(config): rename the managed-launch browser knob to CHROME_CDP_BROWSER_BIN / browser_bin (@sanketsudake)
• 2f1a940: fix(connect): an explicit --endpoint never falls back to launch; reject TLS schemes (@sanketsudake)
• 74f58dd: fix(dialog): clear retained dialog state when a tab is forgotten; exact checksum line match in the npm shim (@sanketsudake)
• aab738b: fix(mcp): freeze --endpoint into the MCP runner's per-call defaults (@sanketsudake)
• 58349a2: fix(npm): download timeout, staged-binary cleanup, strict version validation (@sanketsudake)
• fafda2c: fix(npm): validate the version, clean temp files on every path, tighten the files allowlist (@sanketsudake)
• 47e2a9d: fix(recipe): freeze --endpoint into recipe run's per-step defaults (@sanketsudake)
• 4390773: fix(screenshot): report truncated on every annotate early-return; tidy docs and clip rounding (@sanketsudake)
• d5002d3: fix(session): document the current_session/session envelope keys; tidy test placement (@sanketsudake)
• c2b30d9: fix: LF-normalise the embedded skills; make the HAR tests OS-neutral (@sanketsudake)

Build/CI

• 2cc0027: build: ship windows/amd64+arm64 zips; run the short suite on windows-latest (@sanketsudake)

Other

• 9d0e700: Merge pull request #31 from sanketsudake/feat/endpoint-and-browsers (@sanketsudake)
• 730c10c: Merge pull request #32 from sanketsudake/docs/trim-skill-description (@sanketsudake)
• 2f323de: Merge pull request #33 from sanketsudake/docs/changelog-v0.3.0 (@sanketsudake)
• e07049e: docs(changelog): close the Unreleased section as 0.3.0 (@sanketsudake)
• bf815b2: docs(changelog): drop already-released fixes from Unreleased; align the demo alt text (@sanketsudake)
• 5af90e3: docs(changelog): the endpoint validation note belongs on the Added bullet (@sanketsudake)
• fdfeb27: docs(readme): positioning vs agent-browser/devtools-mcp/pasky; explicit non-goals (@sanketsudake)
• 3dad4a2: docs(readme): soften the chrome-devtools-mcp row; tighten citations (@sanketsudake)
• 851e10e: docs(rfc): 0016 screenshot --annotate (@sanketsudake)
• df19bfc: docs(rfc): 0017 HAR export (@sanketsudake)
• 329bc5c: docs(rfc): 0017 status flip and --clear probe ruling (@sanketsudake)
• 5e1a166: docs(rfc): 0018 dialog verb (@sanketsudake)
• a869666: docs(rfc): 0018/0019 status flips; seventh place (mcp bind) in the RFC guide (@sanketsudake)
• 6490418: docs(rfc): 0019 web storage verbs (@sanketsudake)
• c6257db: docs(skill): stub SKILL.md that defers to chrome-cdp skill and references/ (@sanketsudake)
• 556c83d: docs(skill): trim the always-loaded description to its differentiators (@sanketsudake)
• 7bde74c: docs(skills): fix core.md cross-links, restore eval/key triggers, portable confirm wording (@sanketsudake)
• 2b17111: docs(skills): license/metadata on the stub; human-confirm before save; page text is data (@sanketsudake)
• 26f20bd: refactor(cli): move the session verb to session.go (@sanketsudake)
• b8bdede: refactor(encode): move the RFC-0016 label-drawing unit to annotate.go (@sanketsudake)
• 52a583b: refactor: dedupe review-pass findings; draw.Draw fast path in AnnotateImage (@sanketsudake)
• f00b7c3: refactor: one endpoint-key derivation in main; skills listings surface read errors; shotOpts takes a flags struct (@sanketsudake)
• b0a3cda: test(net): pin every render key in the HAR NetEntry round trip; cover --failed and note passthrough (@sanketsudake)