1# Changelog
2
3All notable changes to this project will be documented in this file.
4
5## [Unreleased]
6
7## [0.30.0] - 2026-06-27
8
9### Added
10
11- **CEF input tuning and touchpad navigation**: Added CEF scroll sensitivity settings plus deliberate two-finger back/forward swipe navigation with edge detection, threshold controls, and an on-screen progress indicator.
12- **Pane ejection to windows**: Pane Mode can move the active pane into a new browser window with the `eject-pane-to-window` action.
13- **Native history sidebar**: `Ctrl+H` now toggles a GTK history sidebar with grouped history, search/filtering, paging, keyboard navigation, configurable width, and live refresh when history changes.
14- **Favicon refresh and resolution pipeline**: Favicons are discovered, converted, cached, refreshed, and resolved through a path-aware cache with safer fallback behavior.
15- **Noctalia external theme integration**: Dumber can follow Noctalia `colors.json` palettes with live reload, last-good fallback, and an advanced Dumber-specific JSON theme format.
16
17### Changed
18
19- **Runtime configuration handling**: Engine, privacy, CEF/WebKit tuning, and clipboard settings now flow through typed runtime snapshots so active and newly acquired browser views use current settings consistently.
20- **History loading performance**: History timelines use stable cursor pagination bounded by row count, improving large-history loading and “load more” behavior.
21- **Navigation URL normalization**: Omnibox, dmenu, tab, and pane navigation now share consistent handling for existing local paths and `file://` URLs.
22- **Packaging and release checks**: AUR metadata now declares the CEF runtime dependency, `make check` verifies generated systemview assets, and GoReleaser validates the embedded compressed systemviews WASM before packaging.
23- **Tooling and dependencies**: Updated CEF bridge, Go dependencies, GitHub Actions, and pinned local lint/static analysis tooling.
24
25### Fixed
26
27- **CEF rendering stability**: CEF now respects effective HiDPI scale for zoom, keeps viewports synced during resize, and handles Vulkan/navigation handoff paths more reliably.
28- **Browser resource cleanup**: Closing tabs and windows now releases their WebViews through the normal lifecycle path, reducing leaked browser resources.
29- **Idle inhibition cleanup**: Fixed a portal signal cleanup race that could crash when idle-inhibitor connections were cleared.
30- **Session and filter maintenance**: Session cleanup now uses process liveness instead of ending unrelated active sessions, and content-filter updates better detect manifest changes while pruning obsolete cached parts.
31- **Pane operation safety**: Invalid split directions and failed pane moves are validated before mutating pane state.
32- **Loading/error states**: Failed main-frame navigations now leave loading skeletons and content state cleanly.
33- **Updater resilience**: Self-update checks retry transient request failures, including temporary DNS errors.
34- **WebKit fallback stability**: WebKit systemview message routing now snapshots base context safely under concurrent updates.
35
36### Security
37
38- **External scheme launch hardening**: External protocol redirects from page navigation no longer launch desktop handlers from untrusted paths or corrupt browser navigation state.
39- **Sensitive URL redaction**: Diagnostic logs redact URL paths, query strings, and fragments, and persistent log files/directories use user-private permissions.
40- **Local boundary hardening**: Filter downloads, manifest parsing, cache writes/lookups, systemview bridge access, and history query limits now enforce stricter path, size, trust, and validation boundaries.
41
42## [0.29.0] - 2026-05-27
43
44### Added
45
46- **CEF as the default browser engine**: New installs and configs without an explicit engine now use CEF by default. WebKit remains available by setting `engine.type = "webkit"`.
47- **CEF browser backend**: CEF is now available as a full browser engine with audio output, shared downloads, context menus, file dialogs, popups, zoom, and system view support.
48- **System views rewrite**: The old Svelte `webui/` has been replaced by native/WASM-backed system views for config, history, and favorites.
49- **Standalone omnibox launcher**: `dumber omnibox` now opens the omnibox in a standalone window.
50- **Fresh browser windows**: Browser launches can now open in dedicated fresh windows.
51- **GTK UI font setting**: GTK chrome now has its own configurable UI font.
52
53### Changed
54
55- **CEF runtime integration**: CEF now uses `purego-cef2gtk`, a codec-enabled runtime path, deterministic runtime discovery, and XDG-scoped user data.
56- **CEF rendering defaults**: CEF uses a GPU-first Wayland render stack by default, with Vulkan/DMABUF presentation, EGL fallback, adaptive OSR frame rate, and fractional-scale handling.
57- **Unified browser plumbing**: Downloads, context menus, internal pages, favicons, clipboard handling, and browser launch flows now share more code across WebKit and CEF.
58- **Window-scoped tabs and browsing contexts**: Tab shortcuts, popup handling, OAuth windows, and native browser windows now track the owning window/context more consistently.
59- **Omnibox behavior**: The default order can be persisted, most-visited history uses a 30-day window, hover callbacks are lighter, and standalone launch behavior is more reliable.
60- **Logging cleanup**: Session log cleanup can cap log files by count as well as age.
61- **Tooling and dependencies**: Go/runtime dependencies, GitHub Actions, golangci-lint, PipeWire audio dependencies, and AUR metadata were refreshed.
62
63### Fixed
64
65- **CEF rendering stability**: Hardened OSR browser creation, live resize repainting, viewport sync, popup surfaces, and bounded size observation.
66- **CEF input and focus**: Improved clipboard, keyboard focus, tab shortcuts, global shortcut release behavior, gesture callback release, and ghost shortcut suppression.
67- **CEF file dialogs and local files**: Hardened GTK file-dialog callbacks, GIO cleanup, file-dialog edge cases, and zoom for local `file://` URLs.
68- **CEF popups and OAuth**: Improved popup lifecycle cleanup, native popup content widgets, pane-hosted popup fallback cleanup, and OAuth auto-close behavior.
69- **Desktop integration**: Browser MIME handler sync and browser launch error redaction are more reliable.
70- **Session and pane resilience**: Stale pane restore paths, nil workspace pane views, and popup restore cleanup are safer.
71
72## [0.28.0] - 2026-03-27
73
74### Added
75
76- **Engine abstraction layer**: Introduced a major architectural refactor that decouples the browser engine layer from the UI. The new `Engine` interface and supporting infrastructure make it possible to support alternative rendering engines beyond WebKit in the future. Users with custom configurations should run `dumber config migrate` to transition to the new engine configuration format (`[engine]/[engine.webkit]` structure). The migration is automatic and backwards-compatible.
77- **Website data access permission**: New permission dialog and system for controlling access to website persistent data. Users can now grant or deny individual websites access to cookies, localStorage, and other persistent storage.
78- **Content blocker large filter set support**: Filter sets exceeding WebKit's 150k rule limit are now properly handled by compiling each part file as a separate WebKit filter, enabling support for comprehensive filter lists. Filter file discovery is now dynamic via manifest instead of a hardcoded list.
79- **Content blocker debug logging**: Added load-failed signal logging to help diagnose content blocker and filter compilation issues.
80
81### Changed
82
83- **Database backend modernization**: Replaced the WASM-based `ncruces/go-sqlite3` with native `purego-sqlite` via pure FFI (no WASM runtime, no CGO required). This simplifies the build process and improves startup performance by removing the SQLite WASM initialization precompile step.
84- **Keyboard and input system overhaul**: Complete rewrite of keyboard routing with native dead key and compose sequence support. The new unified key routing system properly handles accent input with bubble-phase handling and input method fallback, restricted to editable targets with accessibility fallback.
85- **Omnibox ghostwriter reliability**: Reimplemented the ghost text system to eliminate letter-eating on fast typing. Replaced the goroutine/token/coalescer machinery with synchronous ghost computation, a guard flag for programmatic `SetText`, debounced echo detection, and stale input checks.
86- **Omnibox URL intent matching**: Improved URL detection to prioritize URL-like input on Enter, normalize bare IPs to HTTP for local/tailnet services, and handle leading whitespace correctly. Explicit omnibox selections are now always honored over ghost input.
87- **Permission system hardening**: Strengthened permission origin handling to use the live page URI from the signal's WebView for all permission lookups. Exported metadata key constants replace raw string literals. Cookie policy default now correctly aligns with Epiphany ITP model.
88- **GTK binding upgrades**: Migrated from `jwijenbergh/puregotk` to `bnema/puregotk` with `ebitengine/purego`. Signal callbacks now receive `*glib.Error` instead of raw `uintptr`, providing actual error messages in load-failed and download-failed logs. Fixes `g_object_new_with_properties` use-after-free via `[]string` keepalive.
89
90### Fixed
91
92- **WebView accent picker**: Fixed double-character input and focus loss in the WebView accent picker during rapid typing.
93- **Async callback safety**: Hardened async callbacks with URI validation and timer generation counters to prevent stale callbacks from executing on the wrong WebView.
94- **Modal phase synchronization**: Made `setControllerPhase` synchronous and dispatched modal timeouts via the GTK main thread to prevent race conditions.
95- **Keyboard routing thread-safety**: Resolved thread-safety issues and nil-guard checks in keyboard routing.
96- **Application shortcuts restoration**: App shortcuts are now restored when WebView has focus.
97- **Favicon caching**: Fixed stacked title bar favicons to populate from cache on stack creation, guarded against nil texture overwriting a good favicon, and prevented swap on pool reuse.
98- **SIGABRT crash on permission requests**: Fixed a crash that occurred when the permission-request signal was emitted during rapid pane teardown.
99- **Panic logging in safeGLibType**: Recovered panics are now logged instead of silently swallowed.
100
101## [0.27.2] - 2026-02-17
102
103### Changed
104
105- **Toolchain compatibility updates**: Bumped the project to Go 1.26, updated puregotk dependencies, and upgraded golangci-lint to v2.9.0 to keep CI aligned with the new Go version.
106- **Maintenance**: Internal refactor to OAuth popup timing.
107- **README wording cleanup**: Tightened README copy and standardized uBlock casing.
108- **Repository hygiene**: Removed an accidentally tracked plan file that is already covered by `.gitignore`.
109
110### Fixed
111
112- **Floating pane Escape handling**: Pressing `Escape` now hides the floating pane only when it is currently visible.
113- **OAuth popups now close reliably after sign-in**.
114- **Auto-close only affects the OAuth window** so other popups are not dismissed unexpectedly.
115
116## [0.27.1] - 2026-02-12
117
118### Fixed
119
120- **Release CI hotfix**: Removed invalid `disable_immutable` from GoReleaser config so release workflows run correctly.
121
122### Changed
123
124- **Release workflow compatibility**: Fixed Flatpak upload behavior for `workflow_dispatch` triggers.
125
126## [0.27.0] - 2026-02-12
127
128### Added
129
130- **Unexpected-close crash reports**: Automatically detects prior abrupt sessions on startup and generates per-session crash reports (JSON + Markdown) with metadata, core-dump diagnostics, and redacted log tails. Reports are capped at 20 to prevent unbounded disk growth.
131- **`dumber crashes` CLI**: New CLI surface to list, view, and extract GitHub issue payloads from crash reports (`dumber crashes`, `dumber crashes show latest`, `dumber crashes issue latest`).
132- **Crash report UI notification**: Startup toast guides users to run `dumber crashes issue latest` when unexpected-close reports are detected.
133- **Unexpected-close GitHub issue template**: Structured issue template for reporting crashes with crash report payload, context, and reproduction steps.
134- **Session exit classification runbook and diagnostics docs**: Added dedicated operational documentation for abrupt/clean exit classification and troubleshooting paths.
135- **Session/bootstrap resilience coverage**: Added tests and supporting logic for startup markers, WebKit stack bootstrap, and exit classification handling.
136- **Omnibox async guard tests**: Added focused tests for ghost text async/state safety and normalization behavior.
137- **Floating pane (persistent overlay pane)**: `Alt+F` toggles a workspace floating pane that preserves its session state while hidden.
138- **Floating pane profiles**: Optional URL profiles under `workspace.floating_pane.profiles` with user-defined shortcut keys to open/focus named floating sessions.
139- **Floating pane documentation**: Added reference docs describing floating behavior, shortcuts, and configuration.
140- **Installer prerelease/version selection**: `install.sh` supports `DUMBER_PRERELEASE=1` to install the latest prerelease and `DUMBER_VERSION=<tag>` to install a specific release.
141
142### Changed
143
144- **WebKit/puregotk compatibility refresh**: Updated bindings and call sites for `github.com/bnema/puregotk-webkit v0.0.10` and latest puregotk replacement, including signal ID/type handling updates.
145- **Dependencies updated**: Bumped key runtime/developer dependencies, including `go-sqlite3`, `bubbles`, and related transitive modules.
146- **Omnibox behavior tuning**: Refined ghost suggestion ranking/selection behavior and dynamic result sizing tied to pane height.
147- **Autocomplete architecture cleanup**: Centralized completion flow and ghost positioning helpers for more consistent behavior across async paths.
148- **Omnibox keyboard/navigation UX**: Added `Alt+h/j/k/l` pane navigation while omnibox is open and improved chrome height scaling/debouncing on GTK main thread.
149- **Config normalization hardening**: Normalization now coerces invalid profile/appearance values to safe defaults.
150- **Loading skeleton redesign**: Reduced logo from 512px to 256px, added version label below a discrete 32px spinner. Sizes extracted to constants so tests use `mock.Anything` and don't break on dimension changes.
151- **Aggressive WebView reuse policy**: `reusePolicyAggressive` now actually differs from `reusePolicySafe` by allowing reuse regardless of navigation activity, relying on `ResetForPoolReuse` to clear state.
152- **Multiple GUI instances**: GTK app is now non-unique, allowing independent `dumber` launches in parallel.
153- **Config schema/validation**: Added `workspace.floating_pane.*` config keys to schema and validation, including URL/profile shortcut validation.
154- **Config migration for shortcut actions**: Migration now merges newly added `workspace.shortcuts.actions.*` defaults into existing user action maps without overwriting user-defined entries.
155
156### Fixed
157
158- **Hover focus stealing from new split panes**: New pane creation now locks hover focus until the user intentionally moves the mouse, replacing the 300ms time-based suppression that could expire before GTK layout completes. Synthetic enter events from widget rearrangement no longer steal focus from freshly created panes.
159- **Stacked pane title desync on navigation**: Titles in the stacked title bar now sync immediately on `LoadCommitted` and when switching panes, preventing stale titles after background navigation.
160- **Session marker file accumulation**: `writeShutdownMarker` now removes the matching startup marker (embedding its timestamp for classification), and a new `sweepPairedMarkers` sweep in background cleanup removes old marker trios past the configured age.
161- **Retry delay exceeding max**: `retryDelayForAttempt` now clamps the final delay (base + jitter) to `retryMaxDelay` so backoff never overshoots the hard cap.
162- **Inconsistent WebView termination in pool**: `PrewarmFirst`, `PrewarmAsync`, `prewarmSync`, and `RefreshScripts` now call `DestroyWithPolicy(terminatePolicy)` instead of bare `Destroy()`, matching `Release` behavior.
163- **Pool metrics counted on failed creation**: `acquireCount`, `acquirePoolMisses`, and `acquireTotalNanos` are now incremented only after `createWebView` succeeds.
164- **Redundant crash page URI sanitization**: Removed double `sanitizeCrashPageOriginalURI` call inside `buildCrashPageHTML`; the caller already sanitizes.
165- **Racy skeleton version global**: Replaced plain `string` with `atomic.Value` so concurrent reads/writes to `skeletonVersion` are safe.
166- **Inline ghost suggestion stability**: Reworked ghostwriter flow to keep suggestions selected (not auto-committed), with stronger token guards and stale-callback protection.
167- **GTK thread-safety in omnibox**: Removed unsafe off-main-thread widget reads in async flows.
168- **Review follow-ups (Copilot/CodeRabbit)**: Fixed custom-scheme GET handling for empty WebKit methods, synchronized pool close/send paths, aligned WebKit signal ID storage types, and marshalled OAuth parent refresh reloads back to the GTK main loop.
169- **Persistence/update safety edges**: Enforced positive visit-count deltas in SQLite repos, removed redundant filter cache directory creation, canceled pending snapshot timer on `SetReady`, and made updater retry-loop exhaustion explicit.
170- **Logging/dedup consistency**: Unified abrupt-session marker stat warnings under structured session logging and reduced favicon warning dedup growth by using a global cache-dir warning key plus callback coverage tests.
171- **Omnibox input/ghost correctness**: Enforced minimum typed input before ghost suggestions, trimmed leading spaces before URL interpretation, deferred omnibox auto-open until layout is ready, and fixed width/layout edge-cases.
172- **History/autocomplete edge-cases**: Normalized FTS queries containing slashes and capped `about:blank` visit-count inflation.
173- **Navigation/history robustness**: Added pane history cleanup hooks, batched/capped visit increment fallback, and idempotent `NavigateUseCase.Close()`.
174- **WebView lifecycle/reset correctness**: Reset pooled WebView transient state more thoroughly and improved callback/signal wiring consistency.
175- **Navigation safety guards**: Added `CanGoBack` protection in navigation policy handling and corrected back-forward-list signal disconnection target.
176- **Crash handling and retry edge-cases**: Hardened crash-page routing safety, updater retry semantics/documentation, and related infra error paths.
177- **Filtering/snapshot/session reliability**: Fixed race/error-handling paths in filtering updates, snapshot persistence, and session startup marker processing.
178- **WebView pool shutdown race**: Re-check `closed` flag after `createWebView` in `Acquire` to prevent leaking WebViews when pool closes during creation.
179- **Updater transient error detection**: Broadened `isRetryableRequestError` to detect `ECONNRESET`, `ECONNREFUSED`, `ENETUNREACH`, `EHOSTUNREACH`, and `EADDRNOTAVAIL` syscall errors, plus `net.Error.Temporary()` and `url.Error` wrappers.
180- **Session lock probe accuracy**: `markAbruptExits` now uses non-blocking flock instead of `os.Stat`, correctly distinguishing active sessions (lock held) from stale ones (lock acquirable) and skipping on permission/IO errors.
181- **Crash page "Stay on this page" UX**: Button no longer navigates to `dumb://home/crash`; it now stays on the crash page as its label suggests.
182- **Visit increment fallback overflow**: `IncrementVisitCountBy` now returns an error when delta exceeds the fallback cap instead of silently dropping increments.
183
184### Security
185
186- **External scheme launch guard**: Restricted external URL scheme launching to user-gesture initiated navigations.
187
188## [0.26.1] - 2026-01-25
189
190### Fixed
191- **Popups not working in split panes**: Fixed `window.open()` and `target="_blank"` links not functioning in split panes. Popup handling was not being set up for WebViews created via `EnsureWebView`.
192
193### Changed
194- **WebView callback setup refactoring**: Consolidated duplicate callback setup code into single `setupWebViewCallbacks` function. `EnsureWebView` now delegates to this function instead of inline setup. Made `setupPopupHandling` private since no external callers remain.
195
196## [0.26.0] - 2026-01-24
197
198### Added
199- **Visual keybindings editor**: New Keybindings tab in `dumb://config` allows editing all keyboard shortcuts via a visual UI. Supports key capture, reset to defaults, and per-binding reset. Fixes #123.
200- **Keybindings hot reload**: Changed keybindings take effect immediately without restarting the browser.
201- **Ordered config file**: Config file sections are now written in alphabetical order for better readability and deterministic output.
202- **Inline ghost text autocompletion**: Omnibox now shows inline ghost text suggestions from history as you type. Accept with Right Arrow (full) or Ctrl+Right (word). Properly aligned with entry text.
203- **Omnibox click-outside-to-close**: Omnibox automatically closes when clicking outside its bounds.
204- **GTK/WebKit log capture**: New `logging.capture_gtk_webkit_logs` config option to capture GTK and WebKit logs for debugging.
205- **Startup performance tracing**: Added startup trace logging for cold start performance analysis and optimization.
206
207### Changed
208- **Simplified keybinding syntax**: Keybindings now use symbol syntax (`[`, `]`, `{`, `}`) instead of verbose GTK names (`bracketleft`, `braceleft`). Fixes #122.
209- **BREAKING: Global shortcuts config structure**: `workspace.shortcuts` changed from individual string fields to unified `Actions` map with `ActionBinding` (keys + description). Existing custom shortcuts in config.toml will be replaced with defaults. Use the new Keybindings UI to reconfigure.
210- **Keybindings clean architecture**: Refactored keybindings handler to follow ports/adapters pattern. Business logic moved from handler to use cases, config access via gateway adapter instead of global singleton.
211- **Deferred startup initialization**: Non-critical initialization (WebView pool prewarm, etc.) now deferred until after first navigation starts for faster cold start.
212- **Omnibox search ranking**: Improved domain matching boost and FTS5 period handling for better search result relevance.
213
214### Upgrade Notes
215> **Recommended**: Delete your `config.toml` and restart dumber to regenerate a fresh config with the new keybinding structure and alphabetically sorted sections. Your settings will reset to defaults, but you can reconfigure keybindings via the new visual editor at `dumb://config` → Keybindings tab.
216
217### Fixed
218- **Config save/read race condition**: Fixed UI scale and other config values returning stale data after save. Implemented atomic file writes (temp file + rename) and `skipNextReload` flag to prevent fsnotify-triggered reload from overwriting correct in-memory config with stale viper cache.
219- **WebUI lint warnings**: Added ESLint Svelte plugin and resolved 33 lint errors and 14 `any` type warnings across all components. Created `dumber.d.ts` for proper TypeScript types for WebKit bridge communication.
220- **Session snapshot FK constraint**: Fixed SQLite foreign key constraint violation when snapshot service tried to save before session was persisted to database. Added ready flag and callback notification pattern.
221- **Stacked pane index out of bounds**: Fixed crash when domain model and UI got out of sync during stacked pane operations. Added bounds checking and proper rollback when UI updates fail.
222- **Noisy gesture navigation logs**: Mouse button back/forward navigation errors (expected when no history) now log at debug level instead of error level.
223- **Omnibox ghost text race conditions**: Fixed stale ghost text appearing due to race conditions. Query now passed through the entire autocomplete chain.
224- **Omnibox ghost text clipping**: Ghost text now properly clips to entry bounds and aligns vertically with input text.
225- **Ghost text on history scroll**: Disabled ghost text suggestions when scrolling through history with arrow keys after user has typed.
226- **Popup WebView hierarchy**: Fixed popup WebViews not being inserted into GTK hierarchy before create signal returns.
227- **OAuth popup timeout**: Added 30-second safety timeout for OAuth popup handling to prevent stuck popups.
228- **External page background**: Reset WebView background to white for external pages to prevent dark theme color bleeding into light-themed sites.
229- **Localhost URL normalization**: Fixed localhost URL handling and improved download handler architecture for cleaner code.
230- **Svelte 5 Proxy serialization**: Fixed keybinding bridge serialization to handle Svelte 5 Proxies and added conflict detection.
231
232## [0.25.0] - 2026-01-08
233
234### Added
235- **File download handling**: Downloads from websites now save to the user's download directory with toast notifications for start/complete/failed states. Configurable via `downloads.path` (defaults to `$XDG_DOWNLOAD_DIR` or `~/Downloads`).
236- **Print shortcut**: `Ctrl+Shift+P` opens the print dialog for the current page. Fixes #99.
237
238### Changed
239- **Flatpak files location**: Moved flatpak-related files to `flatpak/` directory. Fixes #101.
240- **Navigation shortcuts**: `Ctrl+Left/Right` now triggers back/forward navigation, `Alt+Left/Right` moves focus between panes. Fixes #98.
241- **Update notification**: Simplified update toaster message for AUR/Flatpak users - no longer shows "manual install required". Fixes #109.
242
243### Fixed
244- **SPA mouse navigation**: Fixed unreliable back/forward mouse button navigation in Single Page Applications. WebKit's `BackForwardList` doesn't track JavaScript History API (`pushState`/`replaceState`) navigation. Now uses JavaScript `history.back()`/`history.forward()` as fallback when WebKit native navigation is unavailable.
245- **Accent picker freeze**: Fixed UI freeze when selecting an accent by pressing Enter or Escape. The deadlock was caused by the callback (which calls `Hide()`) being invoked while holding the mutex that `Hide()` also needs to acquire.
246- **Stacked pane title mismatch**: Fixed title bar showing wrong page title after closing panes in a stack. Refactored stacked pane management to use proper use cases, ensuring domain model stays in sync with UI.
247- **Flatpak favicons**: Fixed favicons not displaying in omnibox for Flatpak installs by ensuring cache directory exists before saving. Fixes #105.
248- **Flatpak desktop launcher**: Fixed .desktop file not launching application from app launchers by adding locale environment variables. Fixes #104.
249- **Flatpak update notifications**: Skip GitHub update checks for Flatpak and AUR installs (use package manager instead). Fixes #107.
250- **Active border with stacked panes**: Hide active pane border when only one pane area is visible (stacked panes count as one). Fixes #108.
251- **Setup command for AUR**: `dumber setup` now detects AUR and Flatpak installations and locates the correct .desktop file. Fixes #102.
252
253### Removed
254- **dev/ directory**: Removed development scripts directory. Fixes #103.
255
256## [0.24.0] - 2026-01-06
257
258### Added
259- **Auto-copy on selection**: Text selected in web pages is automatically copied to the clipboard (like zellij/tmux). Shows brief "Copied to clipboard" toast notification. Configurable via `clipboard.auto_copy_on_selection` (default: true). Fixes #83.
260- **Font availability detection**: On first run, detects available system fonts using fontconfig (`fc-list`) and selects the best font from a fallback chain instead of hardcoding `Fira Sans` / `Fira Code`. Fallback chains: sans-serif (Fira Sans, Noto Sans, DejaVu Sans, Liberation Sans, FreeSans), serif (Noto Serif, DejaVu Serif, Liberation Serif, FreeSerif), monospace (Fira Code, JetBrains Mono, Noto Sans Mono, DejaVu Sans Mono, Liberation Mono, FreeMono). Falls back to generic CSS fonts if none available. Fixes #85.
261- **Stacked pane close buttons**: Close buttons in stacked pane title bars allow closing individual panes directly. Includes proper signal cleanup on removal.
262- **AUR git package CI**: Automated CI workflow to publish `dumber-browser-git` AUR package on push to main branch.
263
264### Changed
265- **Flatpak runtime**: Bumped to GNOME 49 runtime.
266- **Focus method refactored**: `Focus()` now delegates to `ApplyFocusChange()` to ensure stack index is updated when focusing stacked panes.
267
268### Fixed
269- **Flatpak locale crash**: Attempted fix for crash on systems with certain locale configurations by adding proper locale data to the Flatpak bundle.
270- **Stacked pane vertical splits**: Vertical splits from stacked panes now correctly split around the entire stack instead of just the active pane.
271- **Pane border focus**: Fixed stale border remaining on previously hovered pane when using keyboard navigation to switch focus. Fixes #89.
272- **Geometric focus navigation**: Fixed focus jumping to wrong pane when navigating left/right in complex layouts. Navigation now prioritizes panes at the same vertical level (for left/right) or horizontal level (for up/down).
273- **Link status overlay auto-hide**: Link URL overlay now automatically hides after 10 seconds of inactivity instead of staying visible indefinitely. Timer resets when hovering new links. Fixes #82.
274- **Omnibox multi-word search**: History search now matches all words in query (AND logic) and searches both URL and title fields. Prefix matching enabled (e.g., "git iss" matches "github.com/issues"). FTS5 special characters are now sanitized to prevent syntax errors. Results interleave URL and title matches for better balance. Fixes #87.
275
276## [0.23.2] - 2025-12-31
277
278### Added
279- **AUR packaging support**: Dumber is now available on the Arch User Repository (AUR).
280  - `dumber-browser-bin`: Pre-built binary package from GitHub releases (recommended).
281  - `dumber-browser-git`: Build from source, tracks latest git.
282  - Install with `yay -S dumber-browser-bin` or `paru -S dumber-browser-bin`.
283  - Automatic AUR updates via GitHub Actions (1 hour delay after Flatpak build for safety).
284- **Pacman/AUR install detection**: Self-updater is disabled when installed via pacman/AUR (uses `pacman -Qo` to detect package ownership). Shows specific message: "use your package manager instead".
285- **Improved update error messages**: Self-update now shows specific messages for Flatpak ("use 'flatpak update'") and pacman/AUR ("use your package manager") installs instead of generic "binary not writable" error.
286
287## [0.23.1] - 2025-12-30
288
289### Added
290- **Flatpak packaging support**: Dumber is now available as a Flatpak bundle for easy installation with all dependencies included.
291  - `dumber.flatpak` bundle attached to each GitHub release.
292  - Install with `flatpak install --user dumber.flatpak`.
293  - Includes Wayland, GPU, audio, webcam, and PipeWire permissions.
294  - Automatic builds via GitHub Actions on every release.
295- **Flatpak runtime detection**: Skip pkg-config runtime checks when running inside Flatpak sandbox (GNOME runtime provides all dependencies).
296- **Self-updater disabled in Flatpak**: Binary self-update is disabled when running as Flatpak (use Flatpak update mechanisms instead).
297
298## [0.23.0] - 2025-12-30
299
300### Added
301- **macOS-style accent picker**: Long-press (400ms) on keys with accent variants (e, a, o, u, i, c, n, s, y, z) shows a popup with accented character options. Select with number keys 1-9, arrow keys + Enter, or click. Works in omnibox, find bar (Ctrl+F), and web page inputs. Implements dead keys/compose sequence alternative for users who can't use system-level input methods.
302- **Performance profiles (WebKit tuning presets)**: New `performance.profile` setting (`default`, `lite`, `max`, `custom`) plus WebUI support for selecting and editing performance tuning values.
303- **dmenu history enhancements**: New `dumber dmenu --days N` (time-window history) and `--most-visited` (sort by visit count).
304
305### Changed
306- **Color scheme detection architecture**: Refactored theme preference detection into a priority-based `ColorSchemeResolver` with multiple detectors (libadwaita/GTK/gsettings/env) and a change notification API for consistent dark-mode behavior.
307- **dmenu history limiting**: dmenu history limiting is now time-based (days) instead of a fixed max item count.
308- **WebKit dependency**: Bumped `github.com/bnema/puregotk-webkit` to `v0.0.9`.
309
310### Fixed
311- **Dark mode detection on internal pages**: Fixed `dumb://home` and other internal pages showing light theme despite system being in dark mode. Refactored color scheme detection to use a priority-based resolver with proper initialization ordering. The libadwaita detector (highest priority) is now correctly enabled only after `adw.Init()` completes, ensuring WebViews created during bootstrap get the correct theme preference.
312- **External site form theming artifacts**: Removed injected `color-scheme` overrides that caused odd styling in some forms/inputs on regular websites.
313- **WebKit memory pressure stability**: Fixed an assertion by applying strict memory thresholds before conservative thresholds when configuring WebKit’s memory pressure handlers.
314- **Web process termination on perf tuning**: Removed the “memory kill” threshold because it could terminate the web process immediately in some environments.
315- **`dumb://` scheme context mismatch**: Fixed internal pages sometimes using a different WebKit context than expected by always using the default context.
316- **Accent picker Escape behavior**: Fixed cases where Escape wouldn’t dismiss the accent picker after mouse interaction by restoring focus appropriately.
317- **dmenu history days edge case**: Fixed `dumber dmenu --days 0` to mean “all history”, and added validation for invalid day values.
318
319## [0.22.0] - 2025-12-28
320
321### Added
322- **Omnibox bang shortcuts UI**: Typing `!` in the omnibox now shows all configured bangs (search shortcuts) with filtering and Enter-to-autocomplete, plus a header badge when a bang is recognized.
323- **Loading skeleton with app logo**: New panes show a centered 512x512 faded app logo with a spinner while loading, replacing the blank/white flash. Uses `--muted` theme color for the spinner.
324- **App logo favicon for internal pages**: `dumb://` URLs now display the dumber logo as favicon in history, favorites, omnibox suggestions, and dmenu/rofi. WebUI and CLI tools share consistent branding.
325- **Omnibox favorite indicator**: History items that are also bookmarked now display a yellowish left border and subtle background tint in the omnibox. Uses parallel async loading to avoid blocking browser startup.
326- **Mode indicator toaster**: Visual notification showing current modal mode (PANE MODE, TAB MODE, SESSION MODE, RESIZE MODE) at bottom-left corner with mode-specific colors. Configurable via `workspace.styling.mode_indicator_toaster_enabled` (default: true).
327- **Config migration system**: Detects missing config keys when new settings are added in updates and provides tools to add them.
328  - `dumber config status`: Shows config file path and number of new settings available.
329  - `dumber config migrate`: Lists missing keys with types/defaults and adds them to config file.
330  - GUI toast notification on startup when new settings are available (configurable via `update.notify_on_new_settings`).
331- **CLI self-update command**: New `dumber update` command to check for and install updates from the command line.
332  - Interactive spinner animation during check and download phases.
333  - `--force` / `-f` flag to skip version check and reinstall the current version.
334  - Reuses existing auto-update infrastructure (check, download, stage, apply on exit).
335  - Theme-aware styling consistent with other CLI commands.
336- **Config open command**: New `dumber config open` command to open the config file in your preferred editor. Uses `$EDITOR`, then `$VISUAL`, with fallback to nano/vim/vi.
337- **Config schema command**: New `dumber config schema` command that displays all configuration keys with their types, defaults, descriptions, and valid values. Supports `--json` flag for machine-readable output.
338- **CLI gen-docs command**: New `dumber gen-docs` command to generate documentation from CLI command definitions. Supports man pages (installed to `~/.local/share/man/man1/`) and markdown formats. Use `--format markdown` for markdown output or `--output` for custom directory.
339- **Move pane to tab**: New pane-mode actions to move the active pane to another tab.
340  - `Ctrl+P → m`: Opens a tab picker modal.
341  - `Ctrl+P → M`: Moves the active pane to the next tab (creates a new tab if needed).
342  - New config: `workspace.switch_to_tab_on_move` (default: true).
343
344### Changed
345- **Cold start optimization**: Reduced startup time by ~150ms (29% faster) through parallel initialization.
346  - New `internal/bootstrap` package encapsulates all startup orchestration.
347  - `RunParallelInit()` runs 5 goroutines concurrently: directory resolution, pkg-config check, GStreamer check, theme manager creation, and SQLite WASM pre-compilation.
348  - WebView pool prewarming creates one WebView synchronously so first `Acquire()` is instant.
349  - Async session cleanup: stale session marking runs in background, doesn't block startup.
350  - `StartupTimer` logs timing for each bootstrap phase (parallel init, DB/WebKit, app creation).
351  - Database initialization runs in background goroutine while WebKit stack initializes on main thread.
352  - Database path now resolved via `config.GetDatabaseFile()` following clean architecture.
353  - Added connection pool settings optimized for SQLite (`SetMaxOpenConns(1)`, keep-alive).
354  - Reduced `mmap_size` from 30GB to 256MB (reasonable for browser history DB).
355  - Added `PRAGMA foreign_keys = ON` for referential integrity.
356- **Startup deferrals**: Runtime/media checks and SQLite WASM precompile now run after first paint, and DB initialization uses lazy repositories when auto-restore is off to cut cold-start latency further.
357- **Console logging**: Standardized console timestamps to `HH:MM:SS` across bootstrap and session logging.
358
359### Fixed
360- **Omnibox favorite toggle reactivity**: Fixed space key toggle in omnibox not updating UI reactively. Now properly toggles favorites (add if not favorite, remove if favorite) with immediate visual feedback (yellow indicator) and toast notifications. Business logic moved to `ManageFavoritesUseCase.Toggle()` for testability.
361- **Config migration type matching**: Fixed migration incorrectly matching keys of different types (e.g., `_width` int keys with `_color` string keys) during rename detection, preventing value swapping.
362- **Config migrate removes deprecated settings**: Fixed `dumber config migrate` not removing deprecated settings from the config file. Previously deprecated keys were preserved but unused; now they are properly deleted. Supports TOML, YAML, and JSON config formats.
363- **Fullscreen video tab bar**: Fixed tab bar remaining visible during fullscreen video playback. Now hides automatically when entering fullscreen and restores based on normal visibility logic when exiting.
364- **Dark mode navigation flash**: Fixed a brief white flash between the loading skeleton and page content when navigating in dark mode.
365- **Progress bar stuck state**: Added 30-second timeout to progress bar to auto-hide if page load stalls and never completes.
366- **OAuth popup login**: Fixed parent page going blank after OAuth popup closes (e.g., Google login on claude.ai, notion.com). Related WebViews share a web process with their parent; destroying the popup was terminating the shared process, killing the parent. Now skips `TerminateWebProcess()` for popup WebViews.
367- Startup: defer WebView pool prewarm until after initial tab creation to reduce cold-start navigation latency.
368- README CLI examples: updated to match current commands/flags (`purge --force` only, `logs` usage, `sessions list --limit`, removed deprecated `--dmenu` root flag).
369
370## [0.21.0] - 2025-12-26
371
372### Added
373- **Configurable new-pane defaults**: New `workspace.new_pane_url` (default: `about:blank`, supports `dumb://`) and `omnibox.auto_open_on_new_pane` (default: false).
374- **Consume-or-expel panes (very alpha)**: Niri-style pane consume/expel operation to merge a leaf into a sibling stack or expel a stacked pane into a split. Default global shortcuts: `Alt+[` / `Alt+]` (and `Alt+Shift+[` / `Alt+Shift+]`).
375- **Zellij-style pane resize mode**: New modal resize mode (`Ctrl+N`) to adjust split sizes with keyboard (`h/j/k/l` or arrow keys, `+/-` smart resize). Shows a per-pane border indicator and keeps the timeout alive while you resize.
376- **Mouse-driven pane resizing**: Drag split dividers with the mouse; split ratios are persisted in session snapshots (rounded to 2 decimals) and restored on resurrection.
377- **Dynamic window title**: Window title now displays the active pane's page title in format `<Page Title> - Dumber`. Updates when switching tabs/panes or navigating. Truncated at 255 characters.
378- **Link URL status overlay**: Shows destination URL in bottom-left corner when hovering over links, images, or media elements. Standard browser UX pattern with 100ms show delay to avoid flicker and 150ms CSS fade transitions. Configurable via CSS.
379- **Local file path support**: `dumber browse test.html` now correctly opens local HTML files by converting existing file paths to `file://` URLs. Supports absolute paths, relative paths, and `~/` home directory expansion.
380- **Auto-update system**: Automatic update checking and self-updating binary replacement following clean architecture.
381  - **Update check on startup**: Async check against GitHub releases API (configurable via `update.enable_on_startup`, default: true).
382  - **Toast notifications**: Non-intrusive auto-dismiss notifications for update availability.
383  - **Auto-download**: Optional background download with binary staging (configurable via `update.auto_download`, default: false).
384  - **Binary self-update**: Atomic binary replacement on clean exit with `.old` backup. Only works if binary is user-writable (e.g., `~/.local/bin/`).
385  - **CLI update check**: `dumber about` now displays update availability.
386  - **Version-less release archives**: Goreleaser now produces `dumber_linux_x86_64.tar.gz` (version in directory inside) enabling stable GitHub `/releases/latest/download/` URLs.
387- **Session management & resurrection**: Zellij-inspired session management system allowing users to save, list, and restore browser sessions.
388  - **Automatic session snapshots**: Debounced state saving (configurable interval, default 5s) captures tabs, panes, splits, stacks, URLs, titles, and zoom levels.
389  - **Session Manager modal**: Access via `Ctrl+O → s/w` or `Ctrl+Shift+S` to browse and restore sessions with inline preview of tabs and panes.
390  - **Session mode**: New modal mode (`Ctrl+O`) with purple border indicator, similar to pane/tab modes.
391  - **CLI session commands**: `dumber sessions` opens interactive TUI browser; `dumber sessions list` shows saved sessions; `dumber sessions restore <id>` resurrects a session in a new window; `dumber sessions delete <id>` removes a session.
392  - **Session purging**: Integrated into `dumber purge` command for cleaning up old session data. Simplified UI with single "Sessions" toggle instead of individual selection.
393  - **Automatic session cleanup**: Sessions are automatically cleaned up on startup based on `max_exited_sessions` (default: 50) and `max_exited_session_age_days` (default: 7 days).
394  - **Configuration options**: `session.auto_restore`, `session.snapshot_interval_ms`, `session.max_exited_sessions`, `session.max_exited_session_age_days`, plus session mode shortcuts and styling.
395
396### Fixed
397- **Alt/Ctrl+number shortcuts on non-QWERTY keyboards**: Fixed Alt+1-9/0 tab switching and Ctrl+1-9/0 omnibox shortcuts not working on AZERTY, QWERTZ, Dvorak, and other non-QWERTY keyboard layouts. Uses hardware keycodes as fallback when keyval lookup fails, enabling shortcuts to work based on physical key position regardless of layout.
398- **Idle inhibition leak on pane close**: Fixed D-Bus idle inhibit request not being released when closing a pane/tab while in fullscreen or playing audio. The inhibition would remain active until the app exited. Now properly tracks fullscreen and audio state and releases inhibition before destroying WebView.
399- **Audio-based idle inhibition**: Extended idle inhibition to also activate when a page is playing audio (e.g., video/music playback), not just in fullscreen mode. Uses WebKit's `notify::is-playing-audio` signal. The inhibitor uses refcounting, so both fullscreen and audio can be active simultaneously.
400
401## [0.20.1] - 2025-12-25
402
403### Fixed
404- **Stacked pane favicon and title updates**: Fixed favicon and title not updating in stacked pane title bars by tracking pane IDs in StackedView and properly routing update events to the correct pane.
405- **WebKit process leak on pane close**: Fixed zombie WebKit web processes not being terminated when panes were closed. `WebView.Destroy()` now properly calls `TerminateWebProcess()` and unparents GTK widgets, freeing GPU resources (VA-API, DMA-BUF, GL contexts). This should significantly improve video playback stability and reduce memory usage when opening/closing many panes.
406- **White flash on navigation**: Eliminated white page flash when navigating in dark mode by setting WebView background color to match theme and hiding WebView until content commits.
407- **Dark mode detection on websites**: Fixed `prefers-color-scheme: dark` detection by improving matchMedia query normalization and adding proper event listener stubs. Sites like Reddit now correctly detect dark mode preference.
408- **Alt+number tab switching**: Fixed Alt+1-9 shortcuts not working when WebView has focus by using GtkShortcutController with global scope instead of EventControllerKey.
409- **System locking during fullscreen video**: Added idle inhibition via XDG Desktop Portal when WebView enters fullscreen mode. Prevents system from locking/sleeping during fullscreen video playback on Wayland (works with all compositors: GNOME, KDE, sway, hyprland, etc.).
410- **Navigation performance**: Significantly faster page navigation through multiple optimizations:
411  - Async history recording via background worker (SQLite writes no longer block GTK main thread)
412  - LRU cache for per-domain zoom levels (repeat visits skip database queries)
413  - Async favicon preload (cache lookup doesn't block navigation start)
414  - Progress callback throttling at ~60fps (reduces UI callback overhead)
415  - Increased WebView pool prewarm from 2 to 4 for faster initial tab creation
416
417### Changed
418- **Custom color picker and confirm dialogs**: Replaced native GTK color picker and confirm dialogs with custom Svelte components using bits-ui AlertDialog. Fixes Wayland compatibility issues where native dialogs would not display properly (fixes #12).
419- **GSK renderer default**: Changed default from `vulkan` to `auto` to let GTK choose the best renderer and avoid potential DMA-BUF synchronization conflicts with WebKit.
420- **Removed invalid GStreamer config**: Removed `video_buffer_size_mb` and `queue_buffer_time_sec` config options as these were not valid GStreamer environment variables (they are element properties that cannot be set via env vars).
421
422### Added
423- **Performance config section**: New `performance` config section with `zoom_cache_size` (default: 256) and `webview_pool_prewarm_count` (default: 4) for tuning. Not exposed in UI but can be set in config file.
424- **Clean-architecture rewrite (pure Go)**: Major refactor to a ports/adapters style architecture with explicit `domain`, `application` (use cases), `infrastructure`, and `ui` layers.
425- **New CLI commands**: `doctor` (runtime dependency checks), `about` (build info), `setup` (desktop integration), plus expanded `purge` with an interactive TUI.
426- **WebUI config improvements**: Search shortcut management (CRUD) and reset-to-defaults support.
427- **Find-in-page**: New find UI and shortcut handling.
428- Migrated GUI stack to `puregotk` + `puregotk-webkit` and disabled CGO for pure Go compilation.
429- **Omnibox rewrite**: Replaced injected Svelte/JS omnibox with a native GTK4 widget overlay.
430- Startup defers non-critical work, adds DNS prefetching and a warmed WebView pool for faster tab/pane creation.
431- SQLite WAL checkpoints happen less frequently to reduce contention.
432- Content filters skip caching invalid rules; EasyList parser prefers if-domain over unless-domain.
433- Workspace border overlays can now receive pointer input.
434- Session-based logging and session management for CLI/GUI runs.
435
436## [0.15.0] - 2025-11-29
437
438### Added
439- **Inline URL suggestions**: Fish/zsh-style ghost text completion in omnibox. As you type, shows grayed-out URL completion from history. Accept with Right Arrow (full) or Ctrl+Right (word). Ctrl+Y also accepts full suggestion. Uses trie-based prefix search with debounced queries for smooth typing.
440- **Filter list auto-update**: Async version checking using HTTP HEAD request with ETag. 2-minute startup delay, skips if checked within 24 hours. Stores version per filter list.
441- **Configurable filter lists**: New `content_filtering.filter_lists` config option. Defaults include EasyList, EasyPrivacy, and uBlock filters (annoyances, quick-fixes).
442- **Demo video**: Added feature showcase video to README (docs/media/dumber-demo.mp4).
443- **Page load progress bar**: Thin animated indicator at window bottom showing web page loading progress. Tracks WebView load events with gradient animation, auto-hides when complete.
444- **Omnibox initial history display**: Configurable behavior when opening empty omnibox via `omnibox.initial_behavior` ("recent", "most_visited", "none"). Shows initial history on open and when input is cleared. Default: recent visits.
445- **Omnibox keyboard blocking**: Prevent page scripts from stealing focus while omnibox is active.
446- **Configurable border widths**: Added `pane_mode_border_width` and `tab_mode_border_width` configuration options (default: 4px) for full border customization.
447- **Content filter caching**: Centralized content blocking service compiles filters once and caches them for instant reuse across all WebViews.
448- **CLI purge enhancements**: Separate `--cookies` and `--history` flags for granular data deletion.
449- **URL normalization**: Consistent URL storage across browser, CLI, and favicon services (strips trailing slashes, normalizes schemes).
450
451### Fixed
452- **Filter compilation race condition**: Fixed concurrent map crash when multiple filter lists compile simultaneously by using local converter instead of shared state.
453- **Omnibox search performance**: Debounce search with 2-character minimum threshold to prevent UI freeze on first keystroke. Applies to both URL/history search and find-in-page modes.
454- **Omnibox flash on load**: Load the injected GUI bundle at document-start and initialize the omnibox as soon as DOM is ready, ensuring it is ready without briefly flashing during page startup or new pane creation.
455- **Zoom toast suppression**: Suppress zoom toast notifications during browser initialization to prevent UI flash.
456- **Cosmetic filter injection**: Inject rules immediately and fix selector normalization for better ad blocking.
457
458### Changed
459- **Refactor keyboard blocking**: Move logic to main-world.ts, reduce handler.go verbosity.
460- **Border overlay architecture**: All borders (active pane, pane mode, tab mode) now use GTK overlay pattern preventing layout shifts when borders appear/disappear. Removed inactive border styling - only active panes show borders.
461- **Simplified border configuration**: Removed `inactive_border_width`, `inactive_border_color`, `show_stacked_title_border`, and `border_radius` config options. All borders are now overlay-based with no layout impact.
462- **Remove Turnstile workaround**: Removed temporary Cloudflare Turnstile CORS allowlist (no longer needed).
463
464## [0.14.1] - 2025-11-18
465
466### Added
467- **Inline tab rename**: Press `Alt+T` then `r` to rename tabs directly in the tab bar. Enter saves, Escape cancels. Tab buttons temporarily allow focus during rename, then restore original focus behavior to prevent interfering with WebView keyboard input.
468- **Cloudflare Turnstile CAPTCHA support**: Temporary CORS allowlist workaround for `challenges.cloudflare.com` to bypass WebKit's incomplete COEP credentialless implementation. Allows Turnstile-protected sites to function properly. Configurable via `enable_turnstile_workaround` (default: true).
469- **Global content filtering toggle**: New `content_filtering.enabled` config option to completely disable ad blocking when needed. Whitelist system remains available for granular control. Defaults to enabled for backward compatibility.
470
471### Fixed
472- **Search shortcut placeholders**: Support both `{query}` and `%s` placeholder formats in search shortcuts, allowing users to use either style. Also fixed domain-only URLs (e.g., "github.com") being incorrectly treated as search queries.
473- **OAuth popup handling**: Fixed OAuth popups not functioning in stacked panes and split operations by ensuring `setupPopupHandling()` is called in all pane creation code paths (finalizeStackCreation, CloseStackedPane, splitNode).
474- **WebView ID message parsing**: Fixed JSON unmarshaling errors when frontend sends numeric webviewId values instead of strings. Message handler now gracefully normalizes both string and numeric webviewId formats with fallback parsing logic.
475- **Video codec fallback**: Unblocked VP8 codec to allow fallback for ad segments, preventing playback interruptions when ads use different codecs than main content.
476- **Video buffering**: Increased buffer sizes (64 MB, 20s) to handle bursty Twitch/AV1 segments and improve streaming reliability on variable bitrate platforms.
477
478### Changed
479- **Console output cleanup**: Disabled WebKit console.log() messages to stdout to prevent page script spam. DevTools console (F12) still shows all messages.
480- **Content filtering configuration**: Refactored `content_filtering_whitelist` into structured `content_filtering` config with `enabled` boolean and `whitelist` array for better organization.
481
482## [0.14.0] - 2025-11-18
483
484### Added
485- **Zellij-style tab system**: Each tab contains an independent workspace with panes, splits, and stacks. `Ctrl+T` enters tab mode with modal keyboard control (`n`=new, `x`=close, `l/h`=navigate). `Alt+1-9/0` for direct tab switching. `Ctrl+Tab`/`Ctrl+Shift+Tab` for next/previous tab. Tab bar auto-hides with single tab. Orange border indicator (distinct from blue pane mode).
486- **International keyboard layout support**: Hardware keycode-based shortcuts for `Alt+number` keys work across all keyboard layouts (QWERTY, AZERTY, QWERTZ, etc.). Physical key position used instead of character mapping.
487- **Click-to-activate stacked panes**: Click on any collapsed title bar to instantly activate that pane. Uses GTK4 gesture clicks for native interaction feel.
488- **Title bar visual separators**: Subtle 1px borders between stacked title bars. Theme-aware colors automatically adjust for light/dark mode.
489- **UI scaling for title bars**: New `workspace.styling.ui_scale` config option (default: 1.0). Scales font size, padding, height, and favicon size. Range: 0.5 to 3.0 (e.g., 1.2 = 120% size).
490- **Favorites system**: Full favorites management with keyboard controls and persistent storage. Press `Tab` to switch between History and Favorites views. Press `Space` to add/remove items. Yellow border indicates favorited items in History view. View mode persists across sessions. Database-backed with RAM-first caching for performance.
491- **Omnibox quick navigation**: Press `Ctrl+1` through `Ctrl+9` to instantly navigate to the first 9 results, or `Ctrl+0` for the 10th. Works in both History and Favorites views. Visual number hints appear on each item. Keyboard layout independent (works on QWERTY, AZERTY, QWERTZ, etc.).
492- **Middle-click and Ctrl+click link handling**: Links can now be opened in new workspace panes using standard browser gestures (middle-click or Ctrl+left-click). New panes split in the configured direction (default: right) and respect `workspace.popups.placement` configuration. Implemented via WebKit's `decide-policy` signal to intercept navigation actions before they occur.
493- **Configurable pane border styling**: Added `workspace.styling.inactive_border_width`, `workspace.styling.inactive_border_color`, and `workspace.styling.show_stacked_title_border` config options. Active and inactive borders default to 1px to prevent layout shift, with only color changing on focus. Borders use GTK theme variables by default and support smooth CSS transitions.
494- **Configurable default search engine**: Added `default_search_engine` config option with explicit URL template format. DuckDuckGo is now the default (was Google). Users can set any search engine with `%s` placeholder (e.g., `default_search_engine = "https://duckduckgo.com/?q=%s"`).
495
496### Changed
497- **Target="_blank" and gesture link behavior**: Links with `target="_blank"`, Ctrl+click, and middle-click now open in stacked panes mode by default instead of split-right. New config option `workspace.popups.blank_target_behavior` (values: "split", "stacked", "tabbed") controls this behavior separately from JavaScript popups. Prevents browser exit when closing parent pane by marking _blank panes as popup-type.
498- **Config format**: TOML is now the default format (JSON/YAML still supported). Action bindings inverted to `action→keys` structure for maintainability with O(1) runtime lookup. Added comprehensive validation.
499- **Code cleanup**: Removed dead code files and emojis from GUI modules
500- **Bridge architecture**: Unified main-world to isolated-world bridge system with comprehensive documentation. Single dispatcher for all window function bridges (omnibox, favorites, toasts). Better separation between CustomEvents (shared between worlds) and window functions (require bridging).
501- **Omnibox spacing**: Increased vertical spacing between suggestion items from 0.65rem to 0.85rem for better readability
502- **Smart Escape key**: First press clears input text, second press closes omnibox. Empty input closes immediately.
503
504### Fixed
505- **Ctrl+Tab shortcuts**: Fixed focus cycling behavior, now properly switches between tabs
506- **Active tab visibility**: Fixed identical styling - active tab now clearly visible with distinct gray shade
507- **AZERTY keyboard support**: Alt+number shortcuts now work on all keyboard layouts using hardware keycodes
508- **Keyboard layout detection**: Fixed always detecting "en" - now correctly detects fr/de/etc layouts
509- **Zoom visual glitch**: Fixed zoom level for next page being applied before navigation completed, causing visible zoom change on current page. Zoom now applies on load-committed event instead of URI change.
510- **Toast notifications**: Fixed toast notifications not appearing for copy URL (Ctrl+Shift+C) and clipboard operations. Event name was `dumber:showToast` but ToastContainer listens for `dumber:toast`.
511- **Page reload shortcuts**: Restored `Ctrl+R`, `Ctrl+Shift+R`, `F5`, and `Ctrl+F5` shortcuts. They were registered but not actually wired to the window-level handler.
512- **Bootstrap initialization**: Fixed omnibox component not mounting due to invalid toast function check in isolated world. Toast functions now bridge correctly via CustomEvents, allowing omnibox to initialize properly.
513- **Empty state display**: History view now hides empty state when input is empty, showing it only when user has typed and no results are found. Favorites view always shows empty state with helpful hints.
514
515## [0.13.0] - 2025-10-24
516
517### Added
518- **Color scheme config**: `appearance.color_scheme` setting to force dark/light theme (`"prefer-dark"`, `"prefer-light"`, `"default"`)
519- **DNS prefetch**: Added capability to prefetch DNS for links to speed up future requests
520- **Page cache (bfcache)**: Enabled WebKit back/forward cache for instant navigation
521- **Smooth scrolling**: Enabled WebKit smooth scrolling for better UX
522- **JSON Schema**: Auto-generated config schema for IDE autocompletion and validation
523- **Parallel cache loading**: Zoom, certificate, and fuzzy caches load concurrently at startup (<100ms target)
524- **Certificate validation cache**: In-memory cache for TLS certificate decisions with graceful shutdown flushing
525
526### Changed
527- **Database performance**: Enabled WAL mode with optimized PRAGMAs (64MB cache, memory-mapped I/O, 5s busy timeout) for 70k reads/sec, 3.6k writes/sec
528- **Zoom performance**: In-memory cache eliminates database reads during page transitions
529- **History writes**: Batched writes with background processor (flush every 5s or 50 items) to reduce I/O overhead
530- **BREAKING: Keyboard shortcuts**: All shortcuts now use `ctrl+` instead of `cmdorctrl+`. Existing configs with `cmdorctrl` still work via backward compatibility. Delete `~/.config/dumber/config.json` to regenerate with new defaults.
531- **Cache management**: Graceful cache flushing on shutdown prevents data loss; startup timing instrumentation with performance warnings
532
533### Fixed
534- **Graceful shutdown deadlock**: Resolved GTK main loop deadlock on Ctrl+Q by removing mutex locks and GTK calls after main loop exit
535- **CSS provider error handling**: Now properly handles errors from GTK CSS provider with logging
536- **Cache operations**: Added context timeouts to cache flush and history queue operations for graceful failure
537- Command typos now show proper error instead of opening in browser
538- History queue now uses buffered channel to prevent blocking on shutdown
539
540## [0.12.1] - 2025-10-18
541
542### Added
543- **Favicon refactoring**: WebKitGTK FaviconDatabase as single source of truth, removing fragile file-based cache and ico/bmp conversion dependencies
544  - Native favicon detection and automatic PNG export at 32x32 for CLI (dmenu)
545  - SVG favicon rasterization support
546  - Async texture loading with callbacks for non-blocking UI updates
547  - FaviconService handles favicon collection across all panes
548
549### Changed
550- Removed old favicon cache system (go-ico, go-bmp dependencies)
551- Simplified omnibox favicon handling: uses database favicon_url only
552
553### Fixed
554- Mouse button navigation: Added support for hardware mouse buttons 8/9 (back/forward)
555- Touchpad gestures: Two-finger horizontal swipe for back/forward navigation
556- Web app shortcuts: Ctrl+C, Ctrl+V, Ctrl+A now work in Gmail, VSCode web, etc.
557- Dark mode flash on startup: Set GTK dark theme preference and WebView background color before window/content creation
558- Cmd+Q and window close button now trigger graceful shutdown instead of killing the browser process
559- WebView cleanup: Properly destroy WebViews to prevent memory leaks and duplicate handler registrations when closing stacked panes
560- CLI help: Running `dumber` without arguments now shows available commands (use `--gui` or `browse` to launch GUI)
561
562## [0.12.0] - 2025-10-16
563
564### Added
565- **Native favicon support**: WebKit FaviconDatabase integration with automatic detection and caching for all panes
566- ENV=dev support to isolate test builds from production config/data in .dev/dumber/ directory
567- Content filtering whitelist config (Twitch enabled by default)
568- `dumber config` command to open config file in $VISUAL/$EDITOR or print path with `--path`
569- **Native WebKit popup lifecycle**: Implemented WebKit's create/ready-to-show/close signals for proper popup management, eliminating manual WebView creation that bypassed WebKit's internal architecture
570- **Popup behavior configuration**: Added `popup_behavior` config with four modes: `split` (default), `stacked`, `tabbed`, and `windowed` for user control over popup placement
571- **Backend-driven pane mode**: Complete rewrite of pane mode from JavaScript to Go backend with native keyboard handling. Ctrl+P enters mode, x/l/r/d/u/arrows for actions, Escape exits. Blocks all other keys during mode.
572- **Pane mode visual border**: Zellij-style border around workspace root when pane mode is active, replacing old toast notification system. Uses GTK margins with configurable `pane_mode_border_color` (defaults to #FFA500 orange). Window background color shows through margins to create visible border effect
573
574### Changed
575- **Popup architecture refactoring**: Removed ~280 lines of JavaScript window.open interception in favor of WebKit's native popup signals. Popups now follow WebKitGTK's expected lifecycle instead of being intercepted and manually created
576- **GUI bootstrap refactoring**: Extracted 400+ lines of common initialization logic into reusable bootstrap.ts module shared between injected pages and special schemes (homepage, etc.)
577- **Workspace pane mode**: Moved ~450 lines of JavaScript state machine to Go backend for more reliable keyboard handling and eliminated race conditions between webviews
578
579### Fixed
580- **TLS certificate validation restored**: Re-implemented persistent certificate error handling (broken during gotk4 migration)
581  - Interactive three-option dialog: "Go Back", "Proceed Once (Unsafe)", and "Always Accept This Site"
582  - SQLite-based hostname decision storage (hostname-only matching - GIO certificate properties are unstable)
583  - Smart expiration: "Proceed Once" temporary (not stored), "Always Accept" persists for 30 days
584  - Automatic cleanup of expired validations on application startup
585  - **Known issue**: Accepted certificates not pre-loaded into WebKit session on startup - stored decisions only apply when TLS error occurs again
586- **Content blocking restored**: Re-implemented WebKit native ad/tracker blocking (broken during gotk4 migration) using UserContentFilterStore API
587- **Script injection spam**: Fixed 100+ duplicate "Sending color palettes" messages by injecting scripts only in top frame instead of all iframes
588- **Favicon race conditions**: Eliminated duplicate downloads and file handle errors via mutex protection and proper handler registration
589- **Homepage theme switching**: Fixed color palette application for proper light/dark mode transitions
590- **Workspace pane borders**: Hide active pane border when only one pane exists to match Zellij UX
591- Enabled missing WebKitGTK6 features: WebRTC, MediaSource, LocalStorage, WebAudio, MediaStream, Clipboard
592- Cosmetic filter duplicate injection in frames
593- Config file duplicate keys (snake_case/camelCase) by using Viper's SafeWriteConfigAs
594- Config not reading newly created default config file
595- Config writing to disk on every load/reload
596- **Popup SIGSEGV crashes**: Eliminated segmentation violations during popup lifecycle by respecting WebKit's signal-based popup management. Fixes OAuth popup crashes and GTK bloom filter corruption
597- **GTK focus event duplicates**: Added timestamp-based deduplication to prevent multiple focus enter/leave events in the same millisecond from WebKitGTK nested widgets
598- **Popup close behavior**: Fixed app exit when closing popups by excluding them from remaining pane count check
599- **Pane mode border cleanup**: Fixed border persisting after pane splits by saving container reference when applying margins. Ensures proper cleanup even when workspace tree structure changes during split operations
600- **Stacked pane active border**: Fixed active border incorrectly appearing on stacked pane containers instead of individual panes
601- **Stacked pane creation**: Fixed premature Realize() call causing widget lifecycle issues during stack creation
602- **Browser exit on last pane close**: Fixed browser not properly quitting when closing the last webview via Ctrl+P x by calling GTK main loop quit instead of window close
603- **Zoom level persistence restored**: Fixed per-domain zoom settings not being saved to database (broken during gotk4 migration). Added missing `notify::zoom-level` signal connection in setupEventHandlers to properly persist zoom changes
604
605## [0.11.0] - 2025-10-07
606
607### Added
608- **Auto-open omnibox on blank panes**: Omnibox automatically opens when a new pane is created with about:blank, providing immediate search/navigation access
609- **Configurable default zoom**: Added `default_zoom` config (defaults to 1.2/120%). Per-domain zoom still overrides this
610- **Pin/favorite sites**: Pin websites from history or quick access to prioritize them in "Jump back in" section. Uses localStorage persistence with star icons for pin/unpin actions
611- **Zellij-style stacked panes**: Added Ctrl+P → 's' to stack panes instead of splitting, with Alt+Up/Down navigation between stacked panes. Features collapsed page title bars showing  for inactive panes and full WebView interaction for the active pane. Includes GTK4 CSS styling for proper visual feedback
612- **Stacked pane favicons**: Title bars display site favicons with async caching. Click title bars to switch between stacked panes
613- **Color palette configuration**: Light and dark color palettes now configurable in `appearance` config with semantic tokens (background, surface, text, muted, accent, border). Injected as CSS custom properties at document start
614- **Search shortcut badges**: Visual badges in omnibox input showing active shortcut prefix (e.g., "gh:", "npm:") with description labels
615- **Search shortcuts API**: Frontend bridge to fetch search shortcuts from backend `/api/config` endpoint with automatic normalization
616
617### Changed
618- **Terminal-style UI theme**: Monospace fonts (JetBrains Mono, Fira Code), sharp corners (no border-radius), dashed borders, adjusted shadows and spacing throughout omnibox components
619- **History suggestions**: Use favicon from database when available, omit automatic search shortcuts from suggestions (rely on explicit prefix commands)
620- **Search shortcuts defaults**: Updated defaults to include ddg, go, mdn, npm packages while reordering others
621- **Chrome user agent**: Updated to version 141.0.0.0 for better site compatibility
622- **CSS color system**: Removed hardcoded theme colors, now use dynamic CSS custom properties from Go-injected palette
623- **History item layout**: Removed "• domain" from titles, now highlight domain within the full URL using same color as title text
624- **Quick access logic**: Removed 20-item limit, now shows all sites with 2+ visits (pinned sites bypass visit requirement)
625- **History pagination**: Show 15 items initially (up from 10) with "Show N more" button
626- **Homepage layout**: Redesigned with improved visual hierarchy and dynamic color tokens
627- **Favicon handlers**: All webviews now register favicon change handlers for consistent caching across panes
628
629### Fixed
630- **Mobile URL overflow**: Fixed long URLs breaking layout on narrow screens by adding proper width constraints and CSS fixes
631- **GTK shortcut GLib-CRITICAL error**: Fixed NULL string assertion in shortcut callback system
632- **SVG favicon handling**: Skip SVG favicons to prevent conversion errors (no raster conversion dependencies)
633- **Focus management architecture**: Refactored workspace focus system from `active` field to `currentlyFocused` with dedicated FocusManager for improved reliability and consistency across pane operations
634- **Stacked pane focus conflicts**: Fixed focus stealing issues in stacked panes by implementing focus-aware navigation that preserves active pane when spawning siblings
635- **WebView title updates**: Enhanced webview title change handling to properly update stacked pane title bars in addition to database storage
636- **GTK4 widget lifecycle**: Improved widget parenting/unparenting operations with proper GTK4 validation and automatic cleanup to prevent critical warnings
637- **Stacked pane close behavior**: Fixed remaining pane becoming non-interactable (gray background) when closing stacked panes via Ctrl+W or Ctrl+P+X. Added proper widget visibility restoration and focus management during stack-to-regular conversion
638- **Stacked pane title updates**: Fixed collapsed panes not showing current page titles when switching between stacked panes. Now follows Zellij-style layout where hidden panes display their up-to-date page titles in title bars with correct positioning above and below the active pane
639
640## [0.10.0] - 2025-09-24
641
642### Added
643- **Print functionality**: Added Ctrl+Shift+P shortcut to open native print dialogs from any pane. Ctrl+P is blocked at WebKit level to prevent conflicts with pane mode shortcuts
644- **WebKit native favicon detection**: Implemented WebKit's built-in favicon database for automatic favicon detection and URI storage. Enhanced favicon support for all formats (PNG, SVG, ICO) without external dependencies
645
646### Changed
647- **Homepage redesign**: Brutal design with component-scoped styling, dynamic height matching, inline domain-URL layout with fade effects, and tighter spacing
648
649### Fixed
650- **WebView teardown and memory management**: Implemented comprehensive cleanup system to prevent crashes during WebView destruction. Added JavaScript teardown functionality with cleanup handlers for all event listeners, intervals, and global state. Enhanced pane cleanup with proper controller detachment and GTK widget detachment sequencing. Added WebView validity checks before JavaScript evaluation and improved workspace manager pane closing logic with better popup handling
651- **Ctrl+W pane closing**: Fixed Ctrl+W shortcut to properly close active panes including popups. Implemented active WebView detection and proper popup vs regular pane handling via OnWorkspaceMessage for consistent cleanup
652- **WebView script injection segfault**: Fixed segmentation violation when injecting JavaScript into destroyed WebViews during message handling. Added IsDestroyed() safety check to prevent GTK widget corruption
653- **Alt+Arrow workspace navigation**: Fixed Alt+Arrow keys not working for pane navigation after WebView focus changes. Implemented C-level to GTK4 shortcut bridge that ensures workspace navigation works consistently across all panes
654- **Global shortcuts protection**: Fixed window shortcuts (Ctrl+L, Ctrl+F, F12) not working in new panes due to overly aggressive webpage protection. Window shortcuts now properly bubble up to GTK while pane shortcuts remain blocked from webpages. Resolves omnibox and developer tools not responding to keyboard shortcuts in newly created panes
655- **Omnibox keyboard event isolation**: Fixed keyboard event leakage from omnibox to underlying webpages that caused unintended page actions (e.g., typing 's' in omnibox triggering GitHub search). Implemented WebKit-level main-world event blocking that activates when omnibox opens, preventing page JavaScript from receiving keyboard events while preserving native GTK shortcuts (Ctrl+L, Ctrl+F, etc.) and omnibox functionality
656- **Active pane detection**: Replaced complex pane ID abstraction with persistent webview IDs, fixing omnibox unresponsiveness after navigation. Omnibox now works immediately after page navigation without requiring mouse movement
657- **Workspace architecture**: Simplified focus tracking by removing URI change handlers and pane ID injection complexity, improving reliability and reducing codebase by 85 lines
658- **WebView ID propagation**: Added webview ID request/response mechanism for stub builds to ensure JavaScript side knows its webview ID for proper focus validation
659- **Workspace theme integration**: Fixed white borders on inactive panes by implementing dynamic border colors based on GTK theme preference (dark mode: #333333 borders, light mode: #dddddd borders)
660- **GTK window background**: Added theme-aware window and pane background colors to prevent white bleeding through transparent elements
661- **Print dialog window handling**: Fixed GTK window destroy errors during WebView cleanup by only destroying windows when CreateWindow was actually enabled
662- **Modifier key logging noise**: Filtered out Ctrl, Shift, Alt, and Super key presses from accelerator miss logging to reduce console spam
663
664## [0.9.0] - 2025-09-22
665
666### Added
667- **Zellij-style workspace management**: Complete pane splitting system with binary tree layout, focus tracking, and Zellij-inspired keybindings (Ctrl+P for pane mode, arrow keys for splits, 'x' to close)
668- **Multi-pane WebView architecture**: Container-based widget management with proper reparenting, lifecycle handling, and per-pane controllers
669- **Window-level global shortcuts**: Centralized shortcut handling to prevent conflicts between multiple WebView instances
670- **Workspace configuration**: New config section with Zellij controls toggle, pane mode bindings, tab shortcuts, and popup behavior settings
671- **Configurable workspace styling**: Pane border appearance (width, color, transition duration, radius) now customizable via config with proper viewport stability
672- **Popup handling for tiling WM**: Complete popup window support where popups open as workspace panes instead of floating windows, respecting tiling window manager design principles
673- **Universal popup auto-close**: Popup windows (OAuth, window.open(), etc.) automatically close when JavaScript calls window.close(), providing standard browser behavior adapted for workspace panes
674- **Advanced popup deduplication system**: Intelligent duplicate popup prevention with SHA256 fingerprinting and 200ms debounce window to eliminate popup spam
675- **OAuth auto-close integration**: RFC 6749 compliant OAuth callback detection with automatic popup closure for seamless authentication flows
676- **Cross-WebView popup communication**: localStorage-based parent-popup bridge enabling proper `window.opener` functionality in tiling workspace environment
677- **WebView identity tracking**: Unique WebView ID system for precise popup targeting and enhanced debugging capabilities
678
679### Improved
680- WebKit integration now forces GPU compositing by default while still honoring explicit config overrides.
681- Smooth scrolling is enabled (when supported) so wheel and gesture animations feel closer to Chromium/Firefox.
682- Title updates, zoom persistence, and domain zoom lookups are now done off the GTK main thread with results marshalled back safely, eliminating UI hitches during navigation.
683- Added optional DOM-level zoom (enabled by default) to avoid native viewport rescaling; falls back to WebKit zoom if the CSS path fails.
684- DOM zoom now seeds the saved level before the first paint and reuses it during document-start scripts, preventing pages from flashing back to 100%.
685- Native accelerator bridge debounces duplicate GTK key events earlier, so Ctrl±/Ctrl+0 only fires once per physical key press.
686- Omnibox-triggered navigations now reuse the navigation controller, so saved zoom levels are applied before first paint and redundant lookups are avoided.
687- Configuration loading writes the missing `use_dom_zoom` flag into existing config files so DOM zoom defaults persist without manual edits.
688- Omnibox UI now relies on shared Tailwind theme tokens and the injected color-scheme service for light/dark parity.
689- Omnibox overlay now self-heals if hostile pages remove the injected shadow host, ensuring Ctrl/Cmd+L works everywhere.
690- Navigation shortcuts changed from Alt+Arrow to Ctrl/Cmd+Arrow for better workspace compatibility.
691- GUI components now support workspace-aware focus management with pane-specific event handling.
692- **Global zoom shortcuts**: Unified zoom handling at window level (Ctrl+/=/0/-) ensuring zoom applies to currently active pane in multi-pane workspace
693- **Workspace focus management**: Enhanced focus throttling (100ms) and active state tracking to prevent infinite loops and conflicts between panes
694- **Popup management**: Intelligent popup vs tab detection based on window features, with improved auto-close logic for OAuth and login flows
695- **Console logging**: WebView ID context injection for better debugging and log correlation across multiple panes
696
697### Changed
698- **Zoom shortcuts architecture**: Moved from per-WebView registration to centralized window-level handling for consistency with other global shortcuts
699
700## [0.8.0] - 2025-09-17
701
702### Added
703- **GTK color scheme bridge**: Dedicated document-start module keeps WebKit theme in sync with GTK preferences and exposes unified runtime updater
704- **Color scheme build pipeline**: Separate Vite entry produces reusable `color-scheme.js` asset shared between native and injected contexts
705- **Complete Svelte 5 GUI migration**: Omnibox and find components migrated from raw JavaScript to modern Svelte 5 with runes
706- **Tailwind CSS v4 integration**: Unified design system with PostCSS and JIT compilation
707- **TypeScript keyboard service**: Centralized shortcut management with full type safety
708- **Click-anywhere-to-close**: Omnibox closes when clicking outside for better UX
709- **Homepage Svelte 5 component**: New standalone homepage with history display and keyboard shortcuts reference
710- **Page generator system**: Vite plugin for generating dumb:// protocol pages (homepage, config, about) with extensible architecture
711- **History deletion API**: New DELETE endpoint at `/history/delete?id=N` for removing individual history entries
712- **Database migrations**: Embedded migrations now run automatically at startup to keep sqlite schema in sync
713- **Inline CSS type declarations**: Ambient module definitions for raw CSS imports improve TypeScript ergonomics in injected bundles
714- **Global Shadow DOM system**: Unified shadow host utility for component isolation with shared ShadowRoot and CSS reset management
715- **Unified page-world bridge**: Integrated API bridge with event-driven communication between page-world and isolated-world contexts
716
717### Improved
718- **Asset MIME detection**: Expanded scheme handler lookup covers fonts, images, and JSON to prevent incorrect `text/plain` responses
719- **Toast theming**: Runtime theme observer syncs toast styling with the browser's dark mode state for consistent visuals
720- **Shadow host styling**: Injected GUI now adopts Tailwind design tokens inside the shared shadow root with automatic dark-mode mirroring
721- **Omnibox/Find system**: Complete migration from 500-line raw JavaScript to modular Svelte 5 components
722- **Toast notifications**: Migrated from raw JavaScript to Svelte 5 components with proper animations
723- **GUI build pipeline**: Vite-based bundling with hot reload and TypeScript support
724- **Keyboard shortcuts**: Fixed Ctrl+F not working by adding missing 'f' key to keyboard dispatcher
725- **State management**: Proper cleanup between omnibox and find modes prevents state conflicts
726- **Homepage UX**: Enhanced layout with 70/30 flex ratio, compact keyboard shortcuts table, and statistics display
727- **Interactive delete**: History entries show trash icon on hover with smooth fade-out animation on deletion
728- **Top 5 most visited**: New section displaying frequently accessed sites with visit counts
729- **Performance**: Instant shortcut response with pre-mounted DOM elements
730
731### Changed
732- **Homepage icons**: Replaced Lucide dependency with inline SVG/Unicode fallbacks to shrink bundle size while debugging upstream build issues
733- **Major architecture shift**: Removed HTTP API routes in favor of direct WebKit message bridge communication for better performance and reduced complexity
734- **API token support**: Added optional API security configuration with token-based authentication system
735- **Shadow DOM improvements**: Enhanced isolation with WeakSet tracking to prevent duplicate reset injection and global shadow host utility for component sharing
736- **Message handler refactoring**: Unified keyboard shortcut forwarding between native handlers and GUI components with DOM event bridge
737- **Omnibox suggestions**: Native Go-based suggestion computation with search shortcuts and history integration, eliminating HTTP fetch dependencies
738- **Toast styling**: Migrated from Tailwind CSS classes to inline styles within component scope for better Shadow DOM compatibility and isolation
739- **JS to Svelte migration**: Replaced legacy inline injected scripts (see `pkg/webkit/ucm_js_cgo.go.deprecated`) with structured Svelte components mounted via the shared shadow root.
740
741### Fixed
742- **Service worker residue**: Homepage clears stale caches and unregisters old service workers to avoid 404s for legacy `_app` assets
743- **Keyboard debounce**: Native accelerator bridge filters duplicate shortcut events within 120ms for DOM and CGO handlers
744- **Ctrl+F shortcut**: Added missing 'f' key case in keyboard_cgo.go dispatcher
745- **Browser freeze**: Removed infinite loop in mode switching reactive effects
746- **State persistence**: Proper cleanup when switching between Ctrl+L and Ctrl+F modes
747- **Homepage protocol**: Fixed dumb://homepage not working after GUI migration with proper Svelte 5 component and API integration
748- **Omnibox positioning on homepage**: Fixed omnibox stuck in top-left corner by isolating homepage CSS styles and strengthening omnibox positioning with explicit fixed positioning and CSS isolation
749- **Find mode persistence**: Fixed find view persisting after pressing Esc when reopening with Ctrl+L by ensuring toggle() resets mode to 'omnibox'
750- **Favicon display**: Fixed missing favicons in homepage history after Svelte 5 migration by adding FaviconURL field to API response and implementing proper fallback display logic
751- **Homepage API communication**: Migrated from HTTP fetch to WebKit message bridge for all homepage API calls (history, stats, search) with proper callback handling and timeout management
752- **Omnibox accessibility**: Added keyboard navigation support with Tab/Enter activation for suggestion items and proper ARIA attributes for screen readers
753- **Omnibox suggestions race conditions**: Fixed timing issues where suggestions arrived before API was ready by implementing pending suggestions queue and proper event bridging between page-world and isolated-world contexts
754
755## [0.7.0] - 2025-09-14
756
757### Added
758- **Content blocking system**: Native WebKit ad blocking with EasyList integration, cosmetic filtering, and filter cache management
759- **Filter cache purging**: New `--filter-cache/-F` flag in purge command
760- **WebKit debug system**: Comprehensive debugging support with configurable categories for troubleshooting WebKit internal errors
761- **Enhanced error handling**: Robust content filter injection with retry mechanisms and graceful fallbacks
762- **Parallel compilation**: Multi-core GCC compilation support for faster builds
763
764### Improved
765- **Content filter timing**: Optimized script injection timing to prevent interference with WebKit preconnect operations
766- **Anti-breakage scriptlets**: Safer JavaScript modifications that avoid WebKit internal conflicts
767- **Build system**: Added parallel compilation with automatic core detection and success indicators
768- **Persistent TLS certificate validation system**:
769  - **Three-option certificate dialog**: "Go Back", "Proceed Once (Unsafe)", and "Always Accept This Site"
770  - **Database-backed certificate storage**: SQLite-based persistence for user certificate decisions with SHA256 certificate hashing
771  - **Smart decision handling**: Automatic application of stored decisions without repeated prompts
772  - **Temporary vs permanent choices**: "Proceed Once" expires after 24 hours, "Always Accept" persists indefinitely
773  - **Seamless user experience**: No more repetitive certificate warnings for trusted sites
774- **Performance-optimized WebKit memory configuration system**:
775  - **New `WebkitMemoryConfig`** configuration section with performance-focused defaults for faster page loading
776  - **Aggressive caching strategy**: `web_browser` cache model with page cache enabled for instant back/forward navigation
777  - **Balanced memory pressure management**: Conservative (40%), strict (60%), and kill (80%) thresholds optimized for performance vs stability
778  - **Smart garbage collection**: 2-minute JavaScript GC intervals with process recycling after 50 page loads
779  - **Reduced monitoring overhead**: 45-second memory monitoring intervals to minimize performance impact
780  - **Environment variable overrides**: All memory settings configurable via `DUMBER_*` environment variables (`DUMBER_CACHE_MODEL`, `DUMBER_MEMORY_CONSERVATIVE`, etc.)
781- **Early crash handling initialization**: Moved crash handler setup to application entry point for better crash recovery
782
783### Changed
784- **Modernized GTK dialog system**: Migrated from deprecated GTK 4.10 dialog functions to modern `GtkAlertDialog` API
785  - **Future-proof implementation**: Eliminated all deprecation warnings by replacing `gtk_message_dialog_*` and `gtk_dialog_*` functions
786  - **Async-first architecture**: Native async dialog handling with proper event loop integration
787  - **Improved accessibility**: Better screen reader support and GTK4 theme integration
788- **Major main.go refactoring**: Massive code reduction from 1071 lines to 61 lines (~95% reduction)
789  - **Extracted browser application logic** to dedicated `internal/app/browser` package for better separation of concerns
790  - **Streamlined entry point**: Clean main function focusing only on CLI vs GUI mode detection and application bootstrapping
791  - **Improved maintainability**: Modular architecture with clear responsibilities between CLI and browser components
792- **Refactored memory configuration architecture**:
793  - Integrated WebKit memory settings into unified config system with Viper environment variable bindings
794  - Eliminated redundant environment variable parsing in favor of centralized configuration management
795  - Simplified webview initialization with direct config-to-WebKit conversion
796- **Improved CLI logs command description**: Enhanced help text for better user experience
797
798## [0.6.0] - 2025-09-12
799
800### Added
801- **Smart AV1 codec negotiation system for YouTube high-resolution streaming**:
802  - **Resolution-aware MediaCapabilities API reporting**: Intelligent codec capability reporting based on video resolution, enabling YouTube to select optimal codecs for different quality levels
803  - **YouTube format manifest manipulation**: Real-time format list reordering to prioritize AV1 for ≤1080p content while allowing VP9 fallback for higher resolutions
804  - **Graduated codec preference system**: Smart localStorage preference (`2048`) instead of forced AV1 (`8192`), giving YouTube flexibility for optimal codec selection
805  - **4K HDR 60fps AV1 support**: Successfully enables YouTube delivery of premium quality 4K HDR content with AV1 codec, HDR10 (PQ) color space, and BT.2020 wide color gamut
806  - **Configurable AV1 resolution limits**: New `av1_max_resolution` config option with environment variable support (`DUMBER_AV1_MAX_RES`)
807  - **Automatic codec fallback logic**: Seamless VP9 fallback for resolutions where AV1 performance may be suboptimal
808  - **High bitrate streaming support**: Enables premium quality streaming (650+ Mbps) with proper buffer management
809  - Fixes previous limitation where forcing AV1 would cap YouTube playback at 1080p maximum
810- Page refresh functionality with standard keyboard shortcuts:
811  - **Ctrl+R** / **Cmd+R**: Reload current page
812  - **Ctrl+Shift+R** / **Cmd+Shift+R**: Hard reload (bypass cache)
813  - **F5**: Alternative reload key
814  - WebKit integration with proper `webkit_web_view_reload()` and `webkit_web_view_reload_bypass_cache()` calls
815- **Twitch theater mode and fullscreen stability fix**:
816  - **Complete removal of codec interference on Twitch**: Eliminates aggressive codec control that caused theater mode and fullscreen freezing
817  - **Native Twitch codec selection**: Allows Twitch to handle codec negotiation without browser intervention
818  - Fixes theater mode freeze and fullscreen black screen issues on Twitch
819
820### Fixed
821- Zoom level toast no longer shows on every page navigation within the same domain:
822  - Added smart detection to differentiate user-initiated vs programmatic zoom changes
823  - Toast now only appears when manually adjusting zoom or entering a new domain
824  - Prevents annoying notifications during regular browsing within the same site
825- Links with `target="_blank"` now load in current window instead of being ignored:
826  - Added WebKit `create` signal handler to intercept new window requests
827  - Redirects popup/new tab links to current window for seamless single-window browsing
828  - Maintains user experience consistency in tab-less browser architecture
829
830## [0.5.0] - 2025-09-12
831
832### Added
833- Hardware video acceleration with automatic GPU detection:
834  - Multi-vendor GPU detection (AMD, NVIDIA, Intel) using glxinfo, lspci, and sysfs
835  - Automatic VA-API driver selection (radeonsi for AMD, vdpau for NVIDIA, iHD for Intel)
836  - WebKitGTK integration with GStreamer hardware acceleration backends
837  - Environment variable configuration support (LIBVA_DRIVER_NAME, GST_VAAPI_ALL_DRIVERS)
838  - Legacy VA-API fallback mode for compatibility with older systems
839  - Video decoding acceleration for H.264, HEVC, VP9, and AV1 codecs
840  - Significantly reduced CPU usage during video streaming (Twitch, YouTube, etc.)
841  - Smart conflict prevention between legacy and modern VA-API implementations
842- TLS certificate error handling with user confirmation dialog:
843  - Comprehensive certificate information display (subject, issuer, validity dates)
844  - Interactive warning dialog for untrusted certificate authorities
845  - Certificate exception management with per-host persistence
846  - Manual load triggering after user accepts certificate exceptions
847  - Proper integration with WebKitGTK 6.0 network session API
848- Zoom level toast notifications:
849  - Real-time zoom level display with format: "Zoom level: ±X% (Y%)"
850  - Smart debouncing to prevent notification spam during rapid zoom changes
851  - Automatic cleanup of stuck or colliding toast messages
852  - 150ms debounce timer with 2-second display duration
853  - Emergency cleanup function for orphaned toast elements
854- Comprehensive XDG-compliant logging system:
855  - Complete application output capture (Go logs, fmt prints, WebKit C logs)
856  - XDG Base Directory specification compliance (`~/.local/state/dumber/logs/`)
857  - Automatic log rotation with size/age-based cleanup and compression
858  - WebKit CGO log capture with GLib log handler integration
859  - CLI log management commands (`dumber logs list`, `logs tail`, `logs clean`)
860  - File-only logging for cache operations to prevent dmenu interference
861  - Multi-output support with timestamped, tagged log entries
862  - Configurable log levels, formats (text/JSON), and retention policies
863
864### Fixed
865- WebView background set to black to improve user experience during page loads
866- Multiple linting issues and code quality improvements (reduced from 211 to ~150 issues)
867- Omnibox responsive scaling and layout issues:
868  - Fixed over-aggressive viewport scaling that made omnibox disproportionately large at high zoom levels
869  - Resolved input field overflow extending beyond container boundaries
870  - Improved box-sizing model to prevent layout issues
871  - Added conditional separator display (hidden when no search results)
872  - Omnibox now scales proportionally with webpage content across all zoom levels
873- Dmenu history favicon display:
874  - Complete favicon caching system for fuzzel/dmenu integration with real website icons
875  - ICO file support using go-ico library for perfect Windows icon conversion to PNG
876  - Smart brightness detection and color inversion for dark theme visibility
877  - All cached favicons normalized to consistent 32x32 PNG format for uniform display
878  - Anti-aliasing preservation during color inversion to prevent edge noise and pixelation
879  - Asynchronous favicon downloading and caching with 7-day freshness and 30-day cleanup
880  - Fuzzel icon protocol integration (`\0icon\x1f<path>`) for native icon display
881  - Favicon URLs extracted from webpage metadata and stored in database during navigation
882  - Fallback system removed to ensure consistent sizing - shows real favicons or no icon
883  - XDG Base Directory compliance for favicon cache storage
884
885## [0.4.0] - 2025-09-10
886
887### Added
888- High-performance fuzzy cache system for dmenu history:
889  - Binary serialization with memory-mapped files for zero-copy access
890  - Trigram indexing (3-character sequences) for fast candidate filtering  
891  - Prefix trie (compressed tree structure) for prefix matching
892  - Pre-sorted entry indices for O(1) top entries retrieval
893  - Smart cache invalidation with filesystem persistence and background refresh
894  - Comprehensive fuzzy matching algorithms: Jaro-Winkler similarity, Levenshtein distance, tokenized matching
895  - Weighted scoring system combining URL, title, recency, and visit count scores
896  - XDG Base Directory Specification compliance (cache stored in state directory)
897  - Atomic operations for concurrent access control
898  - Dependency injection using interfaces and gomock for testing
899- Purge command for cleaning up dumber data and cache files:
900  - Selective purging with flags: `--database`, `--history-cache`, `--browser-cache`, `--browser-data`, `--state`, `--config`
901  - Clear distinction between history cache (dmenu fuzzy search) and browser cache (WebKit)
902  - Browser data includes cookies, localStorage, sessionStorage
903  - Confirmation prompt with `--force` flag to skip
904  - Targets all data locations: SQLite database, WebKit cache/data, dmenu fuzzy cache, configuration files
905- Ctrl+Shift+C keyboard shortcut to copy current URL to clipboard:
906  - Cross-platform clipboard support with wl-copy (Wayland) and xclip (X11) fallback
907  - Reusable toast notification system for user feedback
908  - Injectable JavaScript component for consistent styling across all websites
909  - Native backend integration for reliable clipboard access
910
911### Changed
912- Dmenu performance dramatically improved: 200ms → 4ms (98% faster)
913- GetTopEntries optimized from O(n log n) to O(1) using pre-sorted indices
914- Cache build time reduced to ~300μs for typical history datasets
915
916### Fixed
917- Dark theme detection now properly reads GNOME desktop interface color-scheme setting (`org.gnome.desktop.interface color-scheme`) instead of only checking `gtk-application-prefer-dark-theme`
918- Eliminated O(n log n) sorting bottleneck on every dmenu call
919- Memory-efficient compact entry storage with minimal footprint
920- Concurrent cache access with proper read/write locking
921- Process no longer hangs when closing window with Cmd+Q or window close button - implemented proper GTK4 `close-request` signal handling and OS signal handling for graceful shutdown
922
923## [0.3.0] - 2025-01-11
924
925### Added
926- WebKit memory controls (opt‑in):
927  - Env vars to tune memory/perf trade‑offs without code changes:
928    - `DUMBER_CACHE_MODEL`, `DUMBER_ENABLE_PAGE_CACHE`
929    - `DUMBER_ENABLE_MEMORY_MONITORING`, `DUMBER_MEMORY_LIMIT_MB`, `DUMBER_MEMORY_POLL_INTERVAL`
930    - `DUMBER_MEMORY_CONSERVATIVE`, `DUMBER_MEMORY_STRICT`, `DUMBER_MEMORY_KILL`
931    - `DUMBER_GC_INTERVAL`, `DUMBER_RECYCLE_THRESHOLD`
932  - Version‑guarded CGO wrappers for memory pressure and GC hooks; safe no‑ops on unsupported WebKitGTK builds.
933 - Find in page (Ctrl/Cmd+F):
934   - Omnibox refactored into a reusable component with dedicated "find" mode.
935   - Highlighting: yellow for all matches; active match in orange for clarity.
936   - Match list with context (right side stops at nearest punctuation: . , ; : -).
937   - Navigation UX:
938     - ArrowUp/Down move selection and scroll the overlay list (page scroll disabled while open).
939     - Enter centers on the active match and closes; Shift+Enter goes to previous; Alt+Enter centers without closing.
940     - Hover focuses input and selects list items; click outside closes the overlay.
941     - Faded overlay with subtle blur when reviewing matches; opacity restores on input focus/typing.
942   - Programmatic API: `OpenFind(initial)`, `FindQuery(q)`, `CloseFind()` on `WebView`.
943
944### Changed
945- Performance‑first defaults retained:
946  - Cache model set to “WebBrowser”, page cache enabled, DevTools available.
947  - No implicit memory pressure or GC enabled by default; all memory tuning is opt‑in.
948
949### Removed
950- Deprecated offline app‑cache calls eliminated (no‑ops) to avoid warnings and brittle builds.
951
952### Fixed
953- Homepage Recent History layout:
954  - Show single-line entries as “{Title} – {Domain} – {URL}”.
955  - Truncate long URLs with a gradient fade; prevent horizontal overflow.
956  - Adjusted styling so URL is darker for readability.
957- Search shortcuts and config interop:
958  - Backend SearchShortcut now serializes `url`/`description` with JSON tags.
959  - Frontend normalizes field casing and extracts base URLs, handling `%s` and `{query}` templates.
960  - Omnibox shortcut parsing now URL-encodes queries and supports `%s` placeholders.
961- Input and navigation reliability (GTK4/WebKitGTK 6):
962  - Capture-phase key controller to ensure accelerators fire consistently.
963  - Do not consume normal left/right clicks; only mouse buttons 8/9 trigger back/forward.
964  - Added Alt+ArrowLeft/Right navigation and enabled two-finger swipe back/forward when supported.
965  - Added Ctrl+scroll zoom in/out; refined accelerator matching so Ctrl− works across layouts.
966  - Removed layout-specific hacks; added diagnostic logs for raw minus key events.
967- Zoom persistence:
968  - Added WebView zoom-changed hook; save per-domain zoom to SQLite on every change.
969  - Log on successful save: “saved X.XX for domain.tld” and on load: “loaded X.XX for domain.tld”.
970  - Load and log initial zoom level on startup and on every navigation.
971- Build/dev ergonomics:
972  - Makefile loads `.env.local`; supports overriding `GOMODCACHE`, `GOCACHE`, `GOTMPDIR` for sandboxed builds.
973 - WebKit CGO hardening and API compatibility:
974   - Apply memory pressure settings to `WebKitNetworkSession` (correct signature) when enabled.
975   - Guarded C wrappers remove deprecation warnings across header variants; builds succeed on WebKitGTK 6.
976
977## [0.2.0] - 2025-09-10
978
979### Added
980- WebKitGTK 6 (GTK4) migration for the built‑in browser window:
981  - WebView constructed via `g_object_new(WEBKIT_TYPE_WEB_VIEW, …)` with a fresh `WebKitUserContentManager`.
982  - `WebKitNetworkSession` with persistent cookies (SQLite) and cache directories.
983- Native UCM messaging restored via `script-message-received::dumber` (JSCValue*), removing the JS fallback bridge.
984- Rendering mode controls:
985  - CLI flag `--rendering-mode=auto|gpu|cpu` and `DUMBER_RENDERING_MODE` env.
986  - In‑app status endpoint `dumb://homepage/api/rendering/status`.
987- Native zoom shortcuts at the WebKit layer (Ctrl/Cmd+=, +, −, 0) and GTK4 input controllers for keyboard/mouse.
988- AZERTY keyboard fix: treat underscore as minus for zoom‑out.
989- Runtime theme synchronization: watch GTK `gtk-application-prefer-dark-theme` and update page color‑scheme live.
990- Makefile target `check-webkit` to print `pkg-config` versions of GTK4/WebKitGTK 6.0/JSC 6.0.
991- Documentation updates:
992  - README now targets WebKitGTK 6 (GTK4) and lists GStreamer package requirements for Arch and Debian/Ubuntu.
993  - CLAUDE notes updated with migration status, GPU/Vulkan path, runtime theme sync, and persistence.
994
995### Changed
996- Build flags and includes now target `webkitgtk-6.0`, `gtk4`, and `javascriptcoregtk-6.0`.
997- GTK4 APIs for windowing and event handling (GtkEventController, GtkGestureClick) replace GTK3/GdkEvent paths.
998
999### Removed
1000- Legacy WebKit2GTK constructors and container APIs.
1001- JavaScript fallback for UCM message bridging.
1002
1003### Fixed
1004- Header/enum compatibility for hardware acceleration policy and cookie policy across WebKit header variants.
1005- Linker error for `on_theme_changed` and gpointer usage in signal connections.
1006- Crashy paths mitigated by default “media safe” startup (can be disabled via `DUMBER_MEDIA_SAFE=0`).
1007
1008### Notes
1009- GPU rendering path leverages GTK4’s renderer (Vulkan/OpenGL). Mode `auto` uses GPU when available and falls back gracefully to CPU.
1010- WebKitGTK relies on GStreamer; install recommended packages for audio/video (see README).
1011
1012## [0.1.0] - 2025-09-09
1013
1014### Added
1015- Initial project scaffolding, build system, and dependencies.
1016- Unified CLI + GUI architecture with search shortcuts and fuzzy parsing.
1017- Wails v3‑alpha browser integration (early phase).
1018- Global keyboard controls with script injection (zoom/devtools, etc.).
1019- Native WebKit2GTK backend migration:
1020  - Custom `dumb://` scheme and `/api` endpoints: `/config`, `/history/recent`, `/history/search`, `/history/stats`.
1021  - UserContentManager omnibox injection and theme initialization.
1022  - Persistent WebsiteDataManager with cookies.sqlite; per‑domain zoom and title persistence.
1023  - Keyboard/mouse accelerators (including mouse back/forward); debounced triggers.
1024  - Homepage switched to first‑party API fetches; removed @wailsio/runtime usage.
1025- Documentation and licensing: README enhancements and LICENSE added.
1026
1027### Changed
1028- Replaced Wails runtime with native WebKit2GTK CGO bindings and homepage API.
1029- Improved asset resolution and logging for the `dumb://homepage` scheme.
1030
1031### Fixed
1032- Eliminated duplicate accelerator triggers via debouncing.
1033- Corrected asset resolution and URL normalization in scheme handler.