v1.5.2 — Linux Consumer Chrome 136

Added

• Linux consumer Chrome 136 support. download_chrome now downloads the consumer .deb from UChicago CS mirror and auto-extracts with dpkg-deb. Chrome for Testing remains as fallback.
• Linux auto-extraction in download_chrome MCP tool — extracts .deb and removes cron update scripts automatically.

Changed

• chrome136_urls.json Linux entry updated from Chrome for Testing .zip to consumer .deb with new SHA-256 hash.

v1.5.1 — Chrome Extension Proxy Auth

Fixed

• Authenticated proxy support reworked. CDP Fetch.authRequired does not work for HTTPS CONNECT tunnel auth. Replaced with Chrome extension approach (chrome.webRequest.onAuthRequired) using --proxy-server for routing and an auth-only extension for credentials. Requires Chrome < 137.

Added

• chrome_path parameter on record_session MCP tool and --chrome-path CLI flag
• download_chrome MCP tool — downloads Chrome 136 with SHA-256 verification. Windows auto-extraction via 7-Zip.

v1.5.0 — Proxy Support

Added

• Proxy support: HTTP, HTTPS, SOCKS4, SOCKS5 via --proxy CLI flag, AUTOWREC_PROXY env var, or [proxy] url in config.toml
• Authenticated HTTP proxy support (http://user:pass@host:port)
• proxy parameter on record_session MCP tool

Notes

• SOCKS4/SOCKS5 with username/password auth is not supported (Chrome limitation)

v1.4.0 — Video Recording Removed

Removed

• Video recording removed entirely (screen capture, FFmpeg clip splitting, extract_video_frames MCP tool)
• enable_video parameter, video config constants, video_recorder.py (384 lines)
• Dependencies: mss, numpy, imageio-ffmpeg

Changed

• MCP tool count: 9 → 8
• compile_workspace() signature simplified

Existing config.toml files with a [mcp] section are harmlessly ignored.

v1.3.2 — Queue Hang Fix

Two follow-ups from an out-of-band code review against v1.3.1.

Fixed (Critical)

• Sandbox queue could hang indefinitely when the worker died abruptly (os._exit() or C-extension segfault). Now polls in 100ms slices with is_alive() checks.

Fixed

• orphan_extra_info could grow unbounded — now a 4096-entry LRU with FIFO eviction

Last video-capable release. Video recording is removed in v1.4.0.

v1.3.1 — MCP Cold-Start Fix

Targeted follow-up addressing the MCP needs 3 calls to wake up report.

Added

• Server version in MCP initialize handshake via FastMCP(version=...)

Fixed

• Sandbox cold-start race that ate the AI's first execute_code and fed back a stale PONG on the second

Changed

• MCP server pre-warms the IPython sandbox in a daemon thread

v1.3.0 — Bug Fixes & MCP Token Efficiency

Bug-fix and MCP token-efficiency release driven by the v1.2 code review. Two breaking MCP tool API changes (read_transaction, read_file).

Fixed (Critical)

• Chrome-only video capture broken on Windows 11 24H2/25H2 (wmic removed)
• Stale workspace pointer survived failed recordings

Fixed

• 10 additional bugs (orphan-extra-info leak, duplicate video frames, binary verification, workspace staging, and more)

Changed (MCP — breaking)

• read_session_summary defaults to ~10-line digest (6KB → ~400B)
• read_transaction reshaped with level parameter (minimal/headers/full)
• read_file reshaped with mode parameter (stat/head/raw)

Performance

• CDP network buffer ceilings reduced (~75% Chrome memory reduction)
• HWND cached between bounds checks (~150ms → ~0.1ms per tick)
• Compact JSON writes (~25% smaller workspace)

v1.2 — Import Deadlock Fix

Critical MCP server fix. The record_session tool was completely non-functional — Chrome never launched due to a Python import-lock deadlock.

Added

• check_recording MCP tool — polls background recording status

Fixed

• Import-lock deadlock in MCP mode — record_session deadlocked against FastMCP thread pool over Python import locks
• Rich console encoding crash on Windows (cp1252 vs Unicode box-drawing)

Changed

• record_session is now non-blocking (background thread)
• Recorder import moved to server build time
• MCP server stderr wrapped in UTF-8

v1.1 — Hardening Release

Major hardening release. 50+ fixes from 19 rounds of code review. No new features — focused entirely on correctness, robustness, and security.

Added

• Binary SHA-256 verification for sandbox binaries
• Opt-in credential redaction (--redact)
• Blocklist toggle (--no-blocklist)
• Config validation with safe type casts
• 83 automated tests

Fixed

• %restore deadlock (Lock → RLock)
• Sandbox hard-timeout crash
• Binary body corruption in read_transaction
• Multi-tab CDP body capture
• Cookie value leak with --redact
• Video temp file leak
• 20+ additional fixes

Changed

• MCP server startup deferred (import time ~3500ms → ~20ms)
• make_serializable handles bytes via base64

v1.0 — Initial Release

Initial release. Browser session recorder with MCP server integration.

• Chrome CDP browser instrumentation via zendriver
• Network traffic capture (headers, cookies, bodies, timing)
• User action tracking (clicks, typing, navigation) via injected telemetry
• Optional Chrome-only video recording (Windows) with PID-based window targeting
• 8 MCP tools: record_session, read_session_summary, read_timeline, read_transaction, list_workspace_files, read_file, extract_video_frames, execute_code
• Persistent IPython execution environment with PATH-jailed binaries
• SQLite-backed ad/tracker domain blocklist with LRU cache
• CLI with record and mcp subcommands
• FastMCP server over stdio transport