chore(main): release webcmd 0.7.4

[github-actions]

🤖 I have created a release beep boop

0.7.4 (2026-08-27)

⚠ BREAKING CHANGES

• cli: webcmd browser fork is removed. Use webcmd adapter override <site>/<command>.

Features

• add adapter override and hosted fixture export (6fbbd6c)
• add advisory docs sync review for pull requests (0fed2ec)
• add advisory docs sync review for pull requests (667ed58)
• add advisory docs sync review for pull requests (8b801d3)
• add Amazon India adapter (159bf8e)
• add Amazon India adapter (eb3d5f5)
• add BMWBLOG read-only adapter (#140) (d3b03f4)
• add Claude Code plugin marketplace manifest (#273) (79527b3)
• add command tags and keywords (91776a5)
• add grayscale color palette variables to root stylesheet (7fc2b0a)
• add hosted builder profile commands (53c6c89)
• add hosted WebCMD thin client (8618070)
• add Instagram, ChatGPT, Google Images, and Trip updates (16a31fb)
• add local auth handoff protocol (ea93b63)
• add payment handoff to UPI QR scanner for District checkout and improve seat selection reliability (c734c1d)
• add payment handoff to UPI QR scanner for District checkout and… (78cf232)
• add persistent session lease domain (b18f849)
• add PyPI community plugin (00235fc)
• add PyPI community plugin (4740abd)
• add readable session identifiers (#443) (e3be378)
• add skills add and remove commands (c6dff29)
• add skills add and remove commands (3951675)
• add structured output to report and status built-ins (eb7b9dc)
• add structured output to report and status built-ins (#306) (0ee02ce)
• add support for local command execution in hosted mode (98c232c)
• add the override provenance store and merge-base copies (242cb0c)
• add tiered local web fetch (4b8b07f)
• add webcmd adapter override to fork a plugin command with provenance (78653ad)
• add Webcmd Codex plugin marketplace (b8367e0)
• add webcmd update command (eeb695b)
• add webcmd update command (ce68d92)
• added luma plugin (#195) (8de78ba)
• arbitrate persistent writes in Cloak daemon (fa0997f)
• attribute registered commands to plugin, override, or local origin (8724e47)
• bootstrap Webcmd CLI from Codex skill (975250a)
• browser run playwright sandbox (b51cac3)
• chatgpt: add GPT-5.6 Pro model target (3005517)
• chatgpt: report deep research progress (b1c6b55)
• cli: add --format to profile list and report disconnected profiles (#341) (45130c7)
• cli: add -f/--format to browser verify (2dc8ae0)
• cli: add -f/--format to browser verify (#351) (ccfc04f)
• declare hosted file arguments (997016e)
• default browser windows to background (eefceeb)
• default browser windows to background (82e7a17)
• disable browser bind command in hosted mode and remove from supported action types (0ebc9b5)
• enhance screenshot functionality to restore viewport size and support CDP overrides (0ba71d6)
• enhance screenshot functionality to restore viewport size and support CDP overrides (6caae1b)
• export AX snapshot helpers (98a0338)
• export the verify fixture evaluator for hosted consumers (00dc005)
• expose local web fetch and smart search skill (ad0f54f)
• fetch: add --raw to web fetch for selector discovery (#419) (d4ecfbc)
• filter command list by tag (d1a8dd6)
• google: add images search adapter (50d1e4f)
• hold session lease for logical adapter runs (342a22e)
• hosted: add authenticated artifact download command (#438) (0806a0d)
• hosted: add programmatic runner and MCP skill distribution (#434) (357d6e2)
• hosted: remove profile create/get and --user-id, keep list/delete (4274549)
• hosted: send sessionless browser init/verify to authoring route (#439) (41d17b2)
• hosted: workspace env/flag transport via X-Webcmd-Workspace (022b6a2)
• hosted: workspace-scoped profiles CLI transport (e7fd5f2)
• implement site memory invariants for local mode (b4db91c)
• improve docs sync review coverage and neutralize provider output (e1da494)
• linkedin: add company and connections commands (8a7fe44)
• manage hosted profiles from cli (8a5494d)
• migrate release tooling to openai (#256) (dca5bbb)
• npm: add versions command (d999c1a)
• package Webcmd as a Codex plugin (1b3d483)
• parse hosted profile rows (fcd9301)
• plugin: add TechCrunch latest news (#157) (258383d)
• plugin: add Y Combinator startup directory (#155) (acbda09)
• plugins: add community author metadata and README sync (254985c)
• plugins: add community author metadata and README sync (6bfb74b)
• publish hosted command contract (a29dbaf)
• remove bundled skill links (9eddc7b)
• report overrides needing reconciliation after a plugin update (debf878)
• return local login handoffs immediately (9749f3f)
• stage hosted browser uploads (1d6d4c6)
• store hosted credentials by reference (a0bede3)
• support hosted plugin search and install (991470e)
• surface Cloak runtime update notice in webcmd update (8f7ffba)
• surface override state in plugin list, webcmd list, and adapter status (2496d13)
• tag search commands (34b33d9)
• transfer declared files in hosted mode (be832df)
• trip: add international adapter (884332c)
• update documentation theme with custom styling, typography, and site logo (b51153b)
• update HOSTED_LOCAL_COMMANDS to derive from HOSTED_ROOT_HELP for consistency (a26fbd7)
• use atomic hosted browser commands (c8ef09b)
• youtube: added video frame capture command (#297) (beb9b2c)

Bug Fixes

• accept command search metadata in manifests (5d4fddd)
• accept hosted freshPage metadata (ef732b1)
• adapters,output: repair site drift and markdown/console output bugs (4d2d45b)
• add structured adapter status reporting (d7a5df0)
• agent-browser and playwright cli support added for benchmarks (#430) (c5f48c7)
• align Codex plugin publisher metadata (e22c2ba)
• align hosted namespace grammar (44ee906)
• allow docs sync review to comment on pull requests (77b26b2)
• allow hosted patch-version compatibility (74a1bba)
• allow overriding the verify row-shape top-level key cap (#230) (ab6b7b7), closes #218
• allow publishing an existing release tag (7ac250b)
• benchmark setup and report updated (#395) (e48cb3a)
• bound AX tree traversal (9016cd6)
• browser: add btoa/atob/TextEncoder/TextDecoder to the run sandbox (#344) (5d42052)
• browser: decode response bodies as UTF-8 text in the run sandbox (#357) (65d31cd)
• browser: default every daemon command to a background window (#328) (40a7b82)
• browser: don't reuse a dead page/context lease in browser run (#324) (ef4fda7)
• browser: harden clicks against overlays and nested targets (ccfdc70)
• browser: improve run agent ergonomics (#409) (02e0d82)
• browser: isolate persistent session pages (#312) (1e14767)
• browser: keep background Chromium profile alive (#308) (b87fa87)
• browser: name the supported alternative in unsupported-API errors (#343) (6fb9586)
• browser: repair doctor session and first cloak window (#298) (41a4109)
• browser: report the caller's line and column for browser-run compile errors (#356) (44f1c5f)
• browser: serialize undefined run results as null (#278) (1c5fffd)
• browser: tolerate pages closing during session cleanup (#329) (87131f5)
• bump LinkedIn plugin runtime floor for 0.6.0 (776d68f)
• chatgpt: use pure sleeps and cheaper polling checks (f321b93)
• Clarify plugin discovery fetch failure handling (5c04a45)
• Clarify plugin discovery fetch failure handling (27bfd35)
• classify Product Hunt verification pages (671f4d5)
• clear override provenance and merge base on adapter reset (7e676a0)
• cli: accept -f/--format and --json on every command (#425) (0b4a445)
• cli: add recovery hints for common misguesses (#410) (b2f3098)
• cli: clarify adapter authoring help (#408) (aa38134)
• cli: close eval gaps for formats, profiles, and plugins (8c5ce29)
• cli: discover adapters authored with registerCommand (#423) (fc507cd)
• cli: do not report a cross-Profile session close as already closed (#431) (4c91280)
• cli: download wait timeout must not tell agents to invent file contents (#398) (cc28460)
• cli: fail validate on unknown target instead of PASS (#366) (5d8e289)
• cli: give every site command a description and structured help (#422) (33b4ae8)
• cli: honour -f json on the error envelope (#368) (bc102a9)
• cli: label plugin search as catalog discovery, not web search (#396) (d5c7cc9)
• cli: make session close accept --session and be idempotent (#420) (78c5e96)
• cli: name the owning Profile when a Session lookup misses (#406) (f7d57c2)
• cli: never prompt in webcmd setup when stdin is not a TTY (#369) (51eb2d1)
• cli: one error envelope and exit 2 for every usage error (#424) (78ebdba)
• cli: point EMPTY_RESULT at adapter repair, not login (#401) (7952285)
• cli: popup wait timeout must not tell agents to page.goto the opener (#397) (67cad65)
• cli: reject unknown profile use instead of poisoning the default (#367) (2419b01)
• cli: remove browser fork, add adapter override to hosted mode (#361) (3919f6f)
• cli: report built-in command errors instead of crashing (#363) (ef149b1)
• cli: resolve installSource from the catalog and name the data: popup block (#429) (4fa4177)
• cli: route unknown subcommands through the shared error envelope (#427) (717c80a)
• cli: suggest the real command instead of a plugin that does not exist (#421) (0b4e36c)
• cli: unknown flags exit 2 and list valid flags (#370) (9cd0d5a)
• close plugin override review gaps (4cc9be9)
• coalesce concurrent page leases (e7e5e04)
• condition autofix auth handoff (423966e)
• correct layer numbering in README for clarity (#205) (cfba63c)
• detect overrides against installed plugins instead of the removed bundled clis (f4defbf)
• dispatch hosted browser catalog (08c9b9b)
• docs: show navigation logo (bffe1e5)
• docs: show navigation logo (1b9fad7)
• doctor: honor background window mode (6c439f8)
• doctor: honor background window mode (1322c8e)
• doctor: install browser before live timeout (#237) (826c320)
• don't let doctor crash when adapter override detection fails (29fbf8f)
• download: isolate temp files and reject duplicate download targets (#333) (4c9c322)
• extend docs sync review model timeout (f3d8584)
• facebook: support current feed and search layouts (c5eac86)
• forward waitUntil through navigate so adapters can skip the load-event wait (0744bc6)
• forward waitUntil through navigate so adapters can skip the load-event wait (3dae3a7), closes #106
• harden docs review structured output (#259) (a1a426a)
• harden local auth handoff (f08ce77)
• harden local site memory filesystem reads (11ed43f)
• honor background mode for Cloak tab targeting (d13d894)
• honor hosted credential backend env (fbcc939)
• honor waitUntil none in direct CDP navigation (3a228fa)
• honour the web fetch timeout budget end to end (#249) (#265) (023fe44)
• hosted: accept expiresAt in browser run responses (06fb90c)
• hosted: accept expiresAt in browser run responses (11c0920)
• hosted: accept object error.details from Cloud (#440) (9dacc8f)
• hosted: resolve --workspace= form and drop dead profile client code (a4a2a60)
• hosted: stop duplicating usage errors and align the subcommand list (#428) (54d2dbb)
• instagram: fetch user feed by username (06488e2)
• instagram: support nested Explore layouts (a0b37da)
• isolate logical adapter run contexts (2555450)
• keep auth handoff skills mode neutral (60dc2f5)
• keep background tabs from stealing focus (eabcd7d)
• keep background tabs from stealing focus (4e0fc60)
• keep cloak wrapper on latest free chromium line (53310bf)
• keep hosted commands on cloud (b09cfbe)
• keep hosted tests compatible with release version (33b4eae)
• keep override tests portable on windows (b8a90de)
• keep pack JSON stdout clean (087a398)
• keep site-blocked errors edge-safe (67cf5c8)
• let ~/.webcmd/clis override installed plugins (6db12aa)
• let hosted output flush before exit (6239db0)
• linkedin: bump webcmd peer-dependency floor to >=0.7.4 (#371) (412c410)
• load plugin from marketplace snapshot (347614a)
• local-cloak: honour waitUntil when opening a tab with a url (b32f527), closes #210
• local-cloak: honour waitUntil when opening a tab with a url (#316) (5a65936)
• logger: reuse normalized verbose gating (ddead50)
• make -v effective in hosted, browser, and auth commands (d1c7e00), closes #174
• make -v effective in hosted, browser, and auth commands (#315) (7a72596)
• make session release best effort (9b7fef3)
• make webcmd discovery truncation-safe (6ec6ecd)
• make Webcmd discovery truncation-safe (da888ab)
• match hosted root command grammar (93ebae0)
• narrow adapter status missing directory handling (94e6bab)
• normalize Hacker News job URLs (98ca921)
• observation: redact Basic/Negotiate/NTLM auth credentials in raw text, not just Bearer (#426) (a9ccc39)
• omit links for internal plugin authors (#214) (8276873)
• parse fenced docs review json (#260) (0644de7)
• plugin: disable lifecycle scripts during install (310fb76)
• preserve cloud parity for blocked sites and fresh pages (164d1ec)
• preserve completion and separator parity (fa33fb1)
• preserve hosted output and trace semantics (7c607f3)
• preserve hosted routing for local-only commands (d58db4d)
• preserve the local CLI contract (84dc477)
• prevent macOS background cold launch from stealing focus (c5346f8)
• prevent macOS background cold launch from stealing focus (209b6b0)
• recover Cloak sessions and arbitrate persistent writes (118cfff)
• recover closed Cloak profile contexts (3a44f36)
• reject symlinked site memory path segments (199f485)
• release safe late adapter outcomes (46ace0b)
• release: restore dependency versions (7b2c77b)
• remove antigravity SKILL.md to prevent skill manager pollution (802503c)
• require auth handoff verification (79fc72f)
• require OpenAI-generated release notes (#307) (e7ed4ce)
• resolve cloak browser version in LocalCloakRuntimeProvider and CloakSessionManager (#102) (115447b)
• restore hosted adapter availability and Product Hunt (039d08f)
• restore hosted adapter availability and Product Hunt (a6e772d)
• restrict Windows diagnostic artifacts (89e0915)
• retain daemon liveness after response timeout (b5aca5a)
• retry background Chromium launch via lsregister (#302) (3d0c33b)
• return empty adapter status as json (465af51)
• run package bin checks through Windows shell (a94574c)
• run src/browser unit tests in CI and stabilize the vendor digest (#238) (399d742)
• run verify fixture export contract in unit tests (b841842)
• scope commitHash lookup to homeDir in adapter override provenance (7d369ea)
• scope override reconciliation to updated plugins (20afd2e)
• serialize background page creation (b1bf977)
• shrink contributor avatars (c7081da)
• site-memory: lock site memory writes across processes (#321) (a740cbe)
• site-memory: retry transient Windows lock opens (#446) (157e950)
• skill: add a site-named fast path to smart-search (#248) (#269) (d8fa55a)
• stop the plugin update guard firing on npm install artifacts (#267) (7eba299)
• support multi-word plugin search (#285) (46f3ddd)
• surface adapter status json errors (38a87e1)
• sync hosted profile docs for completion (aa0805c)
• tighten Cloak page recovery boundaries (dad0d3b)
• title pre-1 minor releases (4af288d)
• traverse ignored AX intermediaries (91a1ff8)
• twitter: harden article handling and evaluated arguments (c582298)
• typos (1a25081)
• use a lighter review model (#257) (5fc7e49)
• use Impit fetch clients (36d7c13)
• utils: detect mixed-case HTML login walls (3f66a0d)
• validate each override record and assert sha256 stability in tests (518fd8f)
• validate provenance before empty reset (f799632)
• validate session lease process ids (7f76cf5)

Performance Improvements

• cache the resolved cloakbrowser version instead of re-reading it per status call (#213) (9fc42d4)

Miscellaneous Chores

• release 0.7.4 (bb6f7b3)

---

This PR was generated with Release Please. See documentation.

[rishabhraj36]

Closing this automatically generated downgrade proposal. Release PR #451 is the intended webcmd 0.7.8 release; its machine-readable Release Please body has been restored.