Skip to main content

Changelog

All notable changes, in reverse chronological order. The full version lives in CHANGELOG.md.

Unreleased

Changed

  • docs — accuracy audit against the 16-tool surface: quickstart / cursor / agent-decision-guide / runtime-flow stale “15”/“63-tool” counts fixed (the agent-guide table gained the missing webrain_serp row); the CLI reference drops the non-existent webrain snapshot and the false click-with-selector claim; the environment reference adds the SERP / vision / stealth env vars; the agent decision guide’s tool dialect is modernized to the consolidated names; two unreferenced landing images removed.

v0.7.3

August 15, 2026

Added

  • Structured SERP APIwebrain_serp + webrain serp return typed results {position,title,url,domain,snippet} across 5 engines (duckduckgo · bing · google · brave · auto) with provider fallback, URL dedupe, pagination, safe/region, retries, request_id+ms.
  • Google/brave trusted browser flows — trusted-commands-only (no stealth JS, zero Runtime.evaluate; DOM + Accessibility discovery, trusted Input.*), consent dismissal (TRUSTED click, ~42s → ~1.2s), sequential page-turn pagination, guest-mode + warm persistent-profile launches, --remote-debugging-pipe, market defaulting, per-engine limit.
  • Anti-bot hardening — optional 2captcha solving (WEBRAIN_2CAPTCHA_KEY), serpapi.com provider (used first when limit > 10), per-request proxy for HTTP engines + launched Chrome, honest wall/fallback handling.
  • MCP surface 15 → 16 toolswebrain_serp added; interact advertises the drag action.
  • docs — landing first-load flash fix, verified-results proof band.

v0.6.2

August 12, 2026

Added

  • Native CAPTCHA v2 — trusted drag (slider CAPTCHAs) + eval_in_frame (CDP isolated world inside a reCAPTCHA/hCaptcha/Turnstile frame) → webrain_drag / webrain_eval_in_frame; reCAPTCHA v2 anchor-click fix (checkbox is top-left, ~27,37) + mouseMoved before every CDP click.
  • Vision v2webrain_vision op=ask (screenshot → local/cloud → answer, batch tiles in one request, scale upscales small captcha tiles); offline caption index; warm llama-server singleton (no ~90s cold load per call); provider failover OpenRouter → OpenAI → Fireworks → Groq → local.

Changed

  • Docs/skill rearchitecture — Mintlify nav gains an Agent group (agent/protected-sites, agent/session-strategy) + new Concepts pages (profiles, sessions); the agent decision guide and webrain_guide re-center on persistent profile + real Chrome + session (browser identity is state).
  • Obscura v0.2.0 rendering — render builds now screenshot + PDF natively; no-render builds and lightpanda still lack a paint engine.

Removed

  • Python stealth sidecarstealth_solve.py + preflight.py deleted; no Python in the repo. Challenge handling is native (vault + TOTP).

v0.6.1

August 9, 2026

Changed

  • deps: RustCrypto stack upgraded together (sha1/sha2/hmac/aes-gcm/getrandom) — they share the digest trait and must move as one; getrandom::fill replaces getrandom().
  • deps: lopdf 0.41→0.44; GitHub Actions bumped (checkout 7, upload-artifact 7, download-artifact 8, sticky-comment 3).
  • deps: Dependabot enabled — weekly version-update PRs for cargo + GitHub Actions; security alerts + automated security fixes on.
  • ci: changelog gate no longer blocks dependabot PRs.
  • chore: repo security hardening — branch protection on main, squash-only merging, auto-merge + delete-branch-on-merge, CodeQL scanning.

v0.6.0

August 8, 2026

Changed

  • MCP surface — 63 → 16 intent-based tools (map_surface router): navigate / observe / interact / extract / scrape / batch / crawl / search / pdf / download / watch / session / vision / eval / guide, each with a what / action / op / mode selector. Every capability is preserved; legacy one-action names still dispatch (backward compatible).
  • Install progress — every package download streams with a live X / Y bytes (N%) line (lifts the old 10 MiB read_to_vec cap).
  • Patchright-parity stealth — fingerprint noise ON by default (WEBRAIN_STEALTH_NOISE=0 opts out), new puppeteer-extra evasions (outerdimensions, iframe.contentWindow, media.codecs), no forged UA / Emulation.setAutomationOverride; real Chrome preferred for launch.
  • Native Cloudflare/captcha solvingwebrain_login / webrain open auto-wait challenges and claim Turnstile/reCAPTCHA/hCaptcha widgets; the Python sidecar prefers the patchright driver with interactive Turnstile solving.
  • style — cargo fmt.

v0.5.0

August 6, 2026

New Features

  • Watch any video (webrain_watch / webrain watch) — timestamped transcript (yt-dlp captions → local whisper-cli → cloud Whisper API) + ffmpeg frames, no browser. Batch sources[] in parallel.
  • Local AI, whisper-style, all OSwebrain install watch bundles ffmpeg/yt-dlp/whisper-cli + a GGUF model as self-contained mono packages; webrain install whisper pulls a model; webrain install vision bundles llama-server + Qwen3-VL-2B (GGUF + mmproj) for local vision.
  • Local vision herowatch --vision / vision:true falls back to the bundled Qwen3-VL-2B when no GROQ/OPENAI key is set (chain: Groq qwen3.6-27b → OpenAI gpt-4o-mini → local). Opt-in (API cost / model size); failure surfaces as vision_error, never fails the watch. DeepSeek’s hosted API is text-only (live-verified), so it’s excluded.
  • Install warningswebrain install watch reports what’s missing (STT key / local model / vision key / local vision) so nothing fails silently.
  • Batch eval (webrain_batch op=eval), cookies —netscape, doctor hints (relay/headless detection), screenshot path, login truth fix, antibot false-positive fix.

Changed

  • Media guidance — extract media URLs from meta[og:image|og:video], not video.src (blob: URLs).

Fixed

  • Login no longer reports logged-in falsely; download collisions; captcha false positives.

v0.4.0

August 6, 2026

New Features

  • Agent-browser interaction primitiveswebrain_select, webrain_hover, webrain_check, webrain_dialog, webrain_wait, webrain_upload on the element-index model.
  • Trusted CDP input — click/type/press via Input.* CDP events with a JS fallback; webrain_click_coords for cross-origin/reCAPTCHA; stable backend-node clicks; single-fire click; click-hang bounded on sync dialogs.
  • Extractionwebrain_flatten (Shadow DOM composed text), webrain_annotate (numbered boxes for vision models), webrain_fit (dense-content extractor).
  • Signalswebrain_add_init_script, Chrome error-page detection (chrome_error), needs_js/visible_chars on the HTTP probe, crippled bot-shell hint.
  • Docs — multi-agent delegation doctrine in the agent decision guide.

Bug Fixes

  • webrain upgrade closes other running webrain instances before scoop update, so Scoop can replace the binary.

v0.3.3

August 5, 2026

New Features

  • Added a runtime-flow architecture page (concepts/runtime-flow.mdx) - CLI entrypoint → MCP dispatcher → tool dispatch → CDP backend → engines, with a request-flow diagram and a symptom→layer failure table.
  • reference/tools.mdx gains a tool-to-code map (each tool family → implementation file, browser vs no-browser, shared vs engine-specific).
  • concepts/browsers.mdx gains an engine capability matrix (Chrome / Obscura / Lightpanda / fetch_http).
  • Light/dark logo variants for the Mintlify theme + a GitHub icon in the navbar.

Bug Fixes

  • webrain upgrade now spawns the package-manager update (brew / scoop) detached and exits, so Scoop no longer sees the upgrade command itself as a running instance of webrain and refuses to replace the binary.

v0.3.2

August 5, 2026

Documentation

  • Added a full Mintlify docs site in docs/ - overview, quickstart, installation, browsers/challenges concepts, extraction / scrape-at-scale / auth-and-login guides, a full 51-tool reference, CLI + env reference, deployment, troubleshooting, and contributing. Existing docs/*.md files left in place, untouched.
  • Added the docs/changelog.mdx changelog map, linked in the Project nav.
  • quickstart.mdx and the README now show the full MCP client setup (stdio + HTTP transports, VS Code / Claude Desktop / Cursor configs, webrain_guide verification).
  • Added a Prerequisites section to the README and docs site.
  • Added .mintignore so the ADR / legacy markdown files stay on disk but out of the Mintlify build (fixes the ADR MDX parse error).
  • Refreshed ADR-001 graph note - 875 nodes / 2287 edges, 3 entry points, 51 MCP tools, new hotspots.

Improvements

  • Upgraded skills/webrain/SKILL.md to a full agent-skill contract - richer frontmatter, When to use, recommended limits, and a 7-step end-to-end invocation flow.
  • Ran cargo fmt on the mcp session-routing match indent.

v0.3.1

August 5, 2026

New Features

  • webrain install --engine lightpanda now downloads the lightpanda binary from the lightpanda-io/browser GitHub release into the engine cache, mirroring --engine obscura; find_lightpanda() also discovers the cached build. No Windows binary - the install bails with the Docker fallback instead of silently installing Chrome.

Improvements

  • webrain install --engine <unknown> now errors clearly instead of silently installing Chrome.

Bug Fixes

  • webrain_open_session(cdp_url=…) now actually routes tools to that session - every browser tool accepts an optional session_id.
  • A browser kill/restart no longer wedges the cached backend forever - dead-socket errors drop the backend so the next call reconnects.
  • The CDP WebSocket connect retries once with a longer budget (20s), tolerating obscura’s slow cold-start handshake.

v0.3.0

August 5, 2026

New Features

  • webrain_page_info - just-in-time page context (viewport/page size, scroll position, position %).
  • webrain_save_state / webrain_restore_state - export/import a profile’s auth state (cookies + localStorage) across machines.
  • webrain -v / --version / version.

Bug Fixes

  • webrain install failed with “response body is larger than request limit” - ureq’s 10 MB cap was too small for the Chrome/Obscura engine zips; now reads via the unlimited reader.

Improvements

  • Rewrote the README - install-first, “Why webrain?”, use-cases, Scoop extras.
  • Moved the Dockerfile into docker/ and added docker-compose.yml (persistent vault/profile/cache volumes).
  • Deduped the JS→JSON parse chain in tools.rs into parse_json_str / arr_len.

v0.2.0

August 5, 2026

New Features

  • webrain upgrade - updates to the latest release (Homebrew/Scoop-aware, else self-updates the binary in place).
  • One-line installers - scripts/install.sh (Linux/macOS) and scripts/install.ps1 (Windows).
  • Submitted to the official Scoop extras bucket and published a Homebrew tap (prokopis3/homebrew-webrain).
  • Added CONTRIBUTING.md, README badges, and the Quick Start + Traditional Selectors + Commands + Updating sections.

v0.1.1

August 4, 2026

New Features

  • All-OS install one-liners (PowerShell + curl) and the working scoop bucket (prokopis3/scoop-webrain).

Bug Fixes

  • The Linux release binary now builds on ubuntu-22.04 (glibc 2.35) - the previous ubuntu-latest build required glibc 2.39.

v0.1.0

August 4, 2026

New Features

  • Cargo workspace (resolver 3, edition 2024, Rust 1.85) with webrain-core / webrain-mcp / webrain-cli; MIT license; CI + release + changelog-enforce workflows.
  • Rust CDP browser-automation agent - one BrowserBackend trait over CDP WebSocket (CdpBackend) driving Chrome, Edge, Lightpanda, or Obscura; SessionPool isolation; STEALTH_JS anti-bot injection.
  • stdio MCP server owning the CDP connection, 25-tool dispatch table.
  • Single webrain binary, match-based subcommands (no clap) mirroring the MCP tool surface.
  • Page interaction (navigate/eval/click/type/press/scroll/snapshot, multi-tab, a11y), capture (screenshot, PDF, PixelRAG vision tiles + cosine VectorStore), extraction (extract_json / extract_regex / eval), spider + web search, batch + download.
  • webrain doctor - full install diagnosis.
  • agent-browser-style engine install - webrain install downloads Chrome for Testing (and --engine obscura); webrain lightpanda / webrain obscura spawn CDP servers.