browserzap 0.8.0 → 0.8.5

package/CHANGELOG.md

@@ -1,6 +1,77 @@
 # Changelog
 
-## 0.8.0 — the connection fix and chat (draft until the store publishes it)
+## 0.8.5 — typing that editors accept, fewer prompts (2026-11-05)
+
+A blocker fix for text input. On Medium (and in Gmail, LinkedIn, X, Slack and Notion) the agent's typing could look
+right on screen while the editor itself rejected it — Medium showed “Something is wrong and we cannot save your
+story” and BrowserZap still said “verified”. Typing now goes through Chrome's own input channel, at the caret, exactly
+as your keyboard does, and “verified” means the page kept the text.
+
+**Permissions: fewer prompts, same safety**
+- **Preparation goes ahead, a final action asks.** Attaching a file you named no longer asks. Submitting, sending,
+  deleting and paying still ask: **Approve once**, **Deny**, or the new **Always allow on this site**.
+- **Settings → Permissions.** Set each kind of action to Allow, Ask or Block, and see (and remove) the sites you
+  allowed. Block always wins; payments can only Ask or Block; the agent can never change these settings.
+
+**Settings on their own page**
+- The gear in the side panel opens a full Settings page (also Chrome's “Options” for BrowserZap): General,
+  Permissions, Plan, Help and Advanced, laid out for a wide window and for a phone-width one.
+
+**Writing in editors (found writing a real Medium story)**
+- **Every character is a real keystroke**, as Chrome sends it for your keyboard (Shift included). Medium ignored text
+  that arrived any other way while BrowserZap reported it as kept.
+- **The agent types where it clicked.** Click a title, then fill: the text goes into the title, not to the end of the
+  story. Clicking the text of an editor never asks for approval, whatever words it contains.
+- **Uploads behind a button.** `file_upload` accepts a button like “Add an image”: BrowserZap catches the file chooser
+  the page opens (no dialog appears) and attaches the file you approved — Medium, Gmail and Notion work this way.
+- **Honest results:** a list that “1. ” turned into is reported as converted, not lost; quotes the page curls are
+  “reformatted”; an icon-only toolbar button gets a name from its icon or hint (`nameSource: "hint"`).
+
+**The agent's cursor**
+- White with an orange outline, the same on light and dark pages. It stays on the element it acted on when the page
+  scrolls, and a cursor left behind by an extension reload is removed instead of shown twice.
+
+**Typing**
+- **Rich editors accept what the agent types.** BrowserZap no longer rewrites an editor's page. It clicks where the
+  caret belongs and types there, so the editor sees the same events as a person's keyboard: Medium, Gmail, LinkedIn,
+  X, Slack, Notion and comment boxes work.
+- **A whole document is never cleared.** When the editor holds several blocks (Medium's story editor), the text is
+  added at the end of the last block, and the result says so. A single block is replaced only when that is what you
+  asked for.
+- **Every keystroke is real.** Search boxes show suggestions as the agent types, autocompletes open, phone and card
+  masks format, character counters count, and shortcuts work — because the page receives real key events, not a
+  silent value change.
+- **`verified` is honest.** BrowserZap reads the field back after a moment. If the page kept the text but reformatted
+  it (a phone mask, uppercase in a controlled field), the result says “reformatted by the page”. If it did not keep it,
+  the call fails with “the page did not keep the text” instead of pretending.
+- **Background tabs behave like the tab in front.** The agent types and clicks without bringing your tab forward, and
+  without you losing your place.
+
+**Keys, hover and scrolling**
+- **Any key, and shortcuts.** `browser_press_key` now takes letters, digits and chords such as `ctrl+b`, `ctrl+k`,
+  `ctrl+a`, `ctrl+alt+1` and `ctrl+enter`. A bad key is refused before anything happens. Enter and Ctrl+Enter keep the
+  same approval rule when they would submit or send.
+- **Hover.** New `element_hover`: menus, tooltips and buttons that appear only on hover can now be reached. It is
+  read-only, and it reports what appeared.
+- **Scrolling loads more.** `browser_scroll` sends a real mouse wheel, so infinite lists and wheel-driven widgets load
+  the next page. The old behaviour is the fallback.
+
+**Tabs**
+- **Your agent keeps its tab.** If you click, type or navigate in the agent's tab, or look at another tab in its
+  group, the agent carries on in its own tab instead of stopping. Its next result says what changed while it was away
+  (address, title, whether fields were filled or emptied — never the values) and tells it to look at the page first.
+- **A tab you shared still comes back** when you close its panel. Opening or closing the panel on a tab the agent
+  opened changes nothing.
+- **Tab groups say BrowserZap.** An agent's group is titled `BrowserZap · claude-code` (or the name the agent gave
+  its session), so its tabs are easy to tell apart from another extension's groups.
+
+**Updates**
+- **Store updates install without a Chrome restart.** BrowserZap's connection to the bridge kept Chrome from ever
+  installing a downloaded update until the browser restarted. It now reloads into the new version as soon as no agent
+  is working, no side panel is open and Comment mode is off. A developer (unpacked) copy still needs its reload button.
+- **No new permissions.** Same Chrome Web Store permissions as 0.8.0.
+
+## 0.8.0 — the connection fix and chat (2026-11-04)
 
 Compared with the last public release (0.7.0). Only finished, tested work is listed. Everything is free during early
 access; nothing that keeps you safe (approvals, hand-off, Stop) will ever be paid.

package/bridge-server/server.js

@@ -73,7 +73,7 @@ const MAX_EXTENSION_MESSAGES_PER_SECOND = 500;
 // execution in the page is not part of this product.
 // Must match AGENT_ACTIONS in src/types/protocol.ts (tests/contract.test.mjs).
 const VALID_AGENT_ACTIONS = new Set([
-  'status', 'inspect', 'navigate', 'click', 'fill', 'select_option', 'wait_for',
+  'status', 'inspect', 'navigate', 'click', 'hover', 'fill', 'select_option', 'wait_for',
   'screenshot', 'press_key', 'scroll', 'pause', 'resume',
   'new_tab', 'list_tabs', 'switch_tab', 'close_tab', 'notify', 'upload',
   'console', 'network', 'say',

package/bridge-server/tools.js

@@ -171,12 +171,31 @@ const MCP_TOOLS = [
       },
     },
   },
+  {
+    name: 'element_hover',
+    description:
+      'Move the pointer over exactly one element and report what appeared (a menu, tooltip, or controls a row reveals ' +
+      'on hover). Resolves the target like element_click and refuses ambiguous, hidden or covered targets. Read-only: ' +
+      'no approval. Follow with element_click on what appeared.',
+    inputSchema: {
+      type: 'object',
+      additionalProperties: false,
+      required: ['target'],
+      properties: {
+        target: TARGET,
+        timeoutMs: ACTION_TIMEOUT,
+      },
+    },
+  },
   {
     name: 'field_fill',
     description:
       'Replace the content of one text field (or set a checkbox/radio with "true"/"false") and verify it. ' +
-      'Sensitive fields (passwords, one-time codes, card numbers, government IDs) are refused with ' +
-      'USER_ACTION_REQUIRED — ask the user to type those. The value is never logged or echoed back.',
+      'Text is typed through Chrome\'s trusted input channel at the caret, so key listeners fire and rich editors ' +
+      '(Medium, Gmail, LinkedIn, Slack) accept it. A multi-block rich editor is never cleared: the text is appended ' +
+      'at the end of its last block and the result says mode "append". Sensitive fields (passwords, one-time codes, ' +
+      'card numbers, government IDs) are refused with USER_ACTION_REQUIRED — ask the user to type those. The value is ' +
+      'never logged or echoed back.',
     inputSchema: {
       type: 'object',
       additionalProperties: false,
@@ -248,16 +267,18 @@ const MCP_TOOLS = [
   {
     name: 'browser_press_key',
     description:
-      'Press one key on the focused element. Enter inside a form counts as submitting it and follows the same ' +
-      'approval rules as element_click.',
+      'Press one key on the focused element: a named key (Enter, Tab, Escape, Backspace, Delete, the arrows, Home, ' +
+      'End, PageUp, PageDown, Space), one printable character, or either with modifiers joined by "+" — ctrl+b, ' +
+      'ctrl+k, ctrl+a, ctrl+alt+1, ctrl+enter, meta+shift+t. Enter (with or without modifiers) inside a form counts ' +
+      'as submitting it and follows the same approval rules as element_click.',
     inputSchema: {
       type: 'object',
       additionalProperties: false,
       required: ['key'],
       properties: {
         key: {
-          type: 'string',
-          enum: ['Enter', 'Tab', 'Escape', 'Backspace', 'Delete', 'ArrowUp', 'ArrowDown', 'ArrowLeft', 'ArrowRight', 'Home', 'End', 'PageUp', 'PageDown', 'Space'],
+          type: 'string', minLength: 1, maxLength: 32,
+          description: 'A named key, one printable character, or a chord: ctrl+b, ctrl+enter, ctrl+alt+1.',
         },
         modifiers: { type: 'array', maxItems: 4, items: { type: 'string', enum: ['ctrl', 'alt', 'shift', 'meta'] } },
         approvalId: { type: 'string', maxLength: 64 },
@@ -703,6 +724,7 @@ const ANNOTATIONS = {
   page_inspect: ['Inspect page', READ],
   browser_navigate: ['Navigate', { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: true }],
   element_click: ['Click element', { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: true }],
+  element_hover: ['Hover element', READ],
   field_fill: ['Fill field', { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: true }],
   select_option: ['Select option', { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: true }],
   wait_for_state: ['Wait for page state', READ],
@@ -756,6 +778,7 @@ const TOOL_TO_ACTION = {
   page_inspect: 'inspect',
   browser_navigate: 'navigate',
   element_click: 'click',
+  element_hover: 'hover',
   field_fill: 'fill',
   select_option: 'select_option',
   wait_for_state: 'wait_for',
@@ -782,7 +805,7 @@ const INTERNAL_ACTIONS = new Set(['notify']);
 
 /** Tools that act on page content and therefore carry the origin allowlist. */
 const PAGE_TOOLS = new Set([
-  'page_inspect', 'browser_navigate', 'element_click', 'field_fill', 'select_option',
+  'page_inspect', 'browser_navigate', 'element_click', 'element_hover', 'field_fill', 'select_option',
   'wait_for_state', 'screenshot_capture', 'browser_press_key', 'browser_scroll',
 ]);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "browserzap",
-  "version": "0.8.0",
+  "version": "0.8.5",
   "description": "Let your AI agent (Claude Code, Codex, Cursor or any MCP client) work in your own Chrome, with your logins, your approval and a Stop button.",
   "homepage": "https://browserzap.com",
   "bugs": {