Release notes▽0.9.91
Thirteen changes in this release. Delegated agent runtimes, a live activity icon, provider discovery that reads real evidence, and a Sheets path that needs no OAuth credentials of its own.
extension 0.9.91mcp 0.11.0chrome 116+node 24MIT
▽0.9.91
watching a trigger
API
capability call
reading the DOM
driving the browser
01
Toolbar activity icon
- Four animated modes for reading, browser driving, capability calls, and trigger watching.
- Watch/capability/read/drive priority ordering.
- Frames are pre-rendered per state at ~15fps and swapped through chrome.action.setIcon.
- Per-tab claims, 60-second activity expiry, service-worker recovery, lazy frame generation, deduplication, and backpressure.
- Old action badge removed.
02
Grok Build delegated runtime
- Pinned Grok Build 1.0.4 compatibility.
- Private FSB profile and isolated HOME, GROK_HOME, and XDG directories.
- SuperGrok browser OAuth connect/continue/disconnect.
- Strict login-host and sensitive-URL validation.
- ACP session negotiation, tool discovery, FSB-only MCP roster, and cached-token authentication.
- Process-tree cancellation, ACP session deletion, journal recovery, and cleanup blocking after unsafe failure.
- Ambient provider keys, proxy variables, telemetry destinations, and unrelated agent environments are stripped.
checkingstartingrunning
input disabled · another automation owns this tab
03
Delegation lifecycle and tab ownership
- MCP clientInfo is captured, combining clicked, installed, and connected evidence.
- API providers are separated from delegated-agent providers; recommendation order is connected → installed → clicked → xAI.
- API key/model values survive switching between provider kinds.
- Provider preflight refreshes stale compatibility/authentication.
- Immutable provider identity is bound to consent and activation.
- Start failures expose normalized reasons such as unavailable adapter, spawn failure, drift, route loss, cancellation, and cleanup failure.
- Sidepanel shows checking/starting states and uses ordinary automation presentation for healthy tasks.
- Provider/owner chip and visible takeover controls were removed.
- Input is disabled when another automation owns the active tab.
04
Claude Code adapter
- Task-only CLI invocation with a private static FSB profile.
- Strict MCP configuration and process-tree termination.
- Runtime journals and orphan recovery.
- Dangerous auto-approval/yolo flags are forbidden.
- Still needs genuine authenticated CLI-to-browser UAT, POSIX/Windows cancellation, crash recovery, and long-running endurance evidence.
extensionnative host
ext:request →
← ext:response
ext:event →
loopback only · pairing secret rotated
05
Secure reverse channel and native host
- Authenticated ext:request, ext:response, and ext:event channel.
- Loopback-only host/origin checks and rotating session pairing secret.
- Native host can install, wake, diagnose, and uninstall the MCP daemon.
- It wakes serve only and never directly starts an agent.
- macOS, Linux, Windows x64, and Windows ARM64 packaging/registration paths exist.
/v1/models
gpt-5
o4-mini
qwen3-coder (lm studio)
max_completion_tokens
06
Model discovery and request compatibility
- Hosted-provider models are live-discovered with stale-response cancellation and cache bypass.
- Saving/testing is blocked until a valid returned model is selected.
- LM Studio URL normalization and /v1/models discovery require no API key.
- Multiple LM Studio models require explicit selection; missing saved models block startup.
- OpenAI Chat Completions now use max_completion_tokens.
- GPT-5 and o* reasoning models omit incompatible sampling/logprob options.
- xAI, OpenRouter, Custom, and LM Studio retain their compatible request shapes.
append via page sessionreadback verifiedredacted in logs
07
Google Sheets without extension OAuth credentials
- Five operations: spreadsheet metadata, read values, update, append, and clear.
- Uses the signed-in Google Sheets page session through gapi.
- Bounded UI fallback exists when page APIs are unavailable.
- Mutations are serialized per tab and verified through formula-bar/readback evidence.
- Local changes remove the GViz read fallback.
- Sheet URLs, titles, ranges, formulas, and values are redacted from recording/log surfaces.
0.5×1×2×4×8×
tab 1tab 2tab 3
08
MCP recording, journals, and replay
- MCP tool calls carry task/run/call correlation and resolved tab identity.
- Journals are compressed, integrity-sealed, size-bounded, retained automatically, and privacy-scrubbed.
- Replay is task-scoped and supports logical multi-tab recordings.
- Player supports pause/resume, five speeds, and forward-only seeking.
- Failed or truncated sessions remain inspectable but require approval or are non-replayable.
viewportfull pageregionelement
09
Screenshots and multimodal provider handling
- Viewport, full-page, region, and element capture.
- Optional overlays and mobile/touch emulation.
- FIFO per-tab CDP lease; external debugger ownership is never force-detached.
- Four screenshots and 25 MiB maximum per model turn.
- Native image content plus a private managed PNG for MCP callers.
- OpenAI-compatible, Anthropic, and Gemini attachment formats, with text-only fallback on unsupported-image responses.
SpeechRecognitionWhisper
10
Voice input
- Voice input defaults on and is configurable under Advanced.
- Dedicated microphone-permission helper.
- SpeechRecognition and Whisper transcription paths.
- Disabling voice aborts active capture/transcription and closes the helper.
2,319
descriptors
1,312 ready567 guarded
5 writes active560 guarded
11
Capability catalog, triggers, uploads, and safety gates
- Current validation sees 2,319 descriptors.
- T1 validation covers 1,879 rows: 1,312 ready and 567 guarded fail-closed.
- Only five writes are active; 560 writes remain guarded.
- Sensitive-origin and payment operations require explicit mutation consent.
- Trigger watchers support blocking/detached operation and service-worker recovery.
- Upload paths are validated against sensitive-path restrictions.
12
Settings and knowledge graph
- Select controls no longer clip.
- Control-panel scrolling is contained.
- Expanded 3D knowledge graph and broader site-guide categories.
▽0.9.91
enesfrdejazh
mcp 0.11.0chrome 116+node 24
13
Showcase, dashboard, privacy, and release metadata
- Extension/showcase version 0.9.91; MCP package 0.11.0.
- Six locales with synchronized SEO and hreflang metadata.
- /stats remains client-rendered and excluded from sitemap/prerender/LLM crawler lists.
- Public stats, telemetry budgets, GPC/opt-out, IP-geo aggregation, PhantomStream viewer, websocket recovery, and no-IP-leak paths have regression coverage.
- Chrome minimum raised to 116; root Node requirement raised to 24.
- Windows-invalid Finder Icon\r artifact removed.